Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: AkwBkh4ugUmOvBhY+kBfhZLzkpRZ5/+6sYzf4bspbqU=
Subject key identifier: 67:84:55:B8:9A:58:FC:E7:38:F1:46:79:0F:BE:EA:0F:C8:AF:99:E9
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019D386607C07E201405D83E7DC774134E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 123B
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: MvZzt6Wz6e4jXZcAC9J+L3O2tZDuFQq+8Vts6klwXD4=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:07:c0:7e:20:14:05:d8:3e:7d:c7:74:13:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=678455b89a58fce738f146790fbeea0fc8af99e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:6e:36:0d:15:9b:0e:68:c0:0b:8b:06:a0:
c8:67:29:fb:ed:47:9a:3b:31:68:2e:39:20:1b:b9:
b8:be:fb:ce:c2:df:8a:7d:68:fa:bf:ec:ef:79:5c:
d4:61:60:c8:b2:58:f9:40:34:6f:fe:1d:2d:34:7d:
3e:85:9a:19:f5:d7:ec:36:51:e3:ef:56:9e:96:4d:
07:38:e4:bb:8e:78:f1:72:c9:f1:ad:c9:f1:60:97:
72:0c:ed:9c:38:fc:af:1f:26:9e:3c:2e:80:16:b0:
8f:83:d9:dc:f7:84:50:94:34:e5:84:d8:ca:95:7c:
27:b5:a3:f3:9b:d5:28:b4:e5:7d:5d:26:05:b0:bc:
88:87:69:c8:a9:67:80:ec:e3:1b:f3:e0:61:c5:b8:
b7:bf:03:54:9b:0c:61:db:69:d6:ac:e1:16:98:39:
91:90:8a:65:17:65:60:87:33:59:f6:bd:51:cf:85:
de:df:20:a6:27:bd:81:74:66:74:fe:a0:6d:b2:bb:
ed:6c:0e:65:b7:91:ad:94:77:04:2a:6c:81:7e:3e:
3b:57:8b:f3:a7:0a:ad:5d:18:85:cd:eb:17:ba:ab:
d9:12:73:a9:e9:10:1e:7a:13:04:77:ab:9c:34:f4:
95:92:da:10:b7:6a:61:c5:89:fb:97:cf:c1:49:66:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:55:B8:9A:58:FC:E7:38:F1:46:79:0F:BE:EA:0F:C8:AF:99:E9
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:e3:29:96:45:91:64:18:f0:fe:cf:5a:c0:3f:8a:cf:f4:
1c:c3:cd:93:1d:f5:ae:5c:99:b1:2a:ac:97:6c:f7:2f:c3:43:
68:9d:b9:ae:4a:bd:3d:9e:18:54:29:61:95:56:46:15:d7:03:
78:25:25:c7:20:d9:58:34:f4:35:6e:e4:21:04:af:1b:81:a8:
3a:ed:92:20:3a:81:50:8b:53:78:4a:a4:3a:11:b6:03:ca:5d:
87:bd:21:07:0c:a6:73:eb:1b:61:5a:01:6d:93:5e:99:ef:18:
ce:cf:ef:1a:0c:0e:ce:a4:e7:1e:ac:f4:b1:69:c5:2d:c2:39:
12:bf:98:68:17:9f:e7:52:b6:3d:52:c0:5a:f9:9d:95:dc:89:
65:01:73:71:23:21:bc:ea:22:4d:61:21:ff:49:93:0c:f7:4e:
c6:fe:30:1a:92:72:a9:c5:d3:13:fc:4f:84:d7:d6:6f:9e:8b:
f8:c9:7a:15:b5:b8:1c:00:e6:3b:ff:66:1a:c8:35:35:4a:38:
76:76:2d:7c:f3:d5:46:cf:d7:4a:23:01:88:3a:0d:69:69:53:
78:db:f8:09:73:9d:8f:cd:47:83:4b:64:d7:33:f4:65:fb:28:
fd:24:95:48:54:f0:a6:bf:75:8c:28:61:f0:e8:fd:41:d5:c9:
0c:6a:39:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:39 2026 by rpki-client