Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: iNu/rzPcthRRUcG4/nyMDL7bDuX+61kFxERKLP51bHc=
Subject key identifier: 6F:20:F7:AF:C5:57:2A:A8:24:73:71:20:41:63:08:DF:F5:AB:C4:2B
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019D389BD83C3566F7AAB82FE676F10D7F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: JbpWuGPDByu0noDovNsEU6A1BQm/fn0sK8aILTNHpkU=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d8:3c:35:66:f7:aa:b8:2f:e6:76:f1:0d:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=6f20f7afc5572aa824737120416308dff5abc42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:5f:86:9a:ac:f2:4a:55:c1:6e:90:e2:47:
fc:d1:5c:aa:c4:fa:24:8b:2f:83:72:71:a9:14:f0:
3c:ad:1d:fb:e7:81:7a:cc:65:7c:2f:e8:2d:e1:d7:
e3:31:5c:7d:86:2d:10:9d:90:a4:69:c4:71:b1:39:
13:04:d9:af:e5:69:e5:7d:84:b2:e4:d0:3d:49:ec:
31:29:df:ae:c6:42:21:55:c5:75:a2:98:dd:1f:43:
ee:bb:b8:a0:4f:0d:c7:82:80:02:1a:aa:8d:ec:78:
3e:e9:17:81:6f:0b:f0:b7:49:a1:e3:de:d2:37:a8:
57:5a:ff:b6:63:0c:a7:c9:d5:1c:9d:5a:b7:c1:8c:
21:aa:24:68:dc:5b:07:e6:90:5d:53:a3:0c:31:9c:
25:4d:77:72:bd:a9:71:74:80:c0:4f:f3:6e:72:72:
72:c6:0b:cd:05:35:a7:5b:fc:61:45:93:14:95:86:
ae:0a:bc:01:ad:ed:96:df:4f:dd:b4:b3:7d:ca:f6:
38:39:2b:0a:12:13:6e:24:17:84:ce:79:0c:d7:11:
f8:1f:ca:f7:5f:31:22:52:1a:93:c8:1b:ab:5c:e1:
7b:cf:6b:85:b7:06:71:aa:78:44:59:15:47:34:f8:
51:b4:d6:8d:fd:39:fa:d3:27:30:03:c1:be:cf:ec:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:20:F7:AF:C5:57:2A:A8:24:73:71:20:41:63:08:DF:F5:AB:C4:2B
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fa:c9:bc:1a:5d:17:af:05:75:a5:71:41:9d:af:df:ad:26:
ac:20:ea:42:39:aa:52:92:9f:cc:50:b7:2a:a6:d3:a0:2a:39:
76:f1:f6:88:5f:9e:30:1b:61:fc:31:03:13:d9:56:d4:27:80:
4f:25:b0:b7:c9:b6:2d:0e:fd:e1:df:ca:cb:37:63:cb:c8:a2:
f3:1f:87:85:26:b9:41:32:99:32:9b:5b:1a:b8:82:39:f3:0c:
3f:5c:fb:aa:27:4b:34:92:b5:4a:2c:60:bc:61:dd:fe:d9:04:
a9:31:f7:04:67:9f:72:5e:a9:77:b5:0a:2e:62:e9:b6:d3:75:
a1:95:1e:21:9a:18:29:8c:e9:8b:90:c5:4c:42:99:13:08:ff:
20:8f:c7:d3:fc:05:c7:01:cc:64:42:67:21:37:6e:e9:25:06:
d4:a5:90:52:1d:42:8e:ce:bf:bb:61:14:c0:16:05:24:62:d3:
61:f4:ea:bf:91:ce:5b:df:0a:71:cf:81:ed:fb:ef:fc:6d:42:
7d:ac:c3:ec:d4:ea:b6:43:02:a6:45:6f:6f:44:81:ab:69:69:
fc:6e:9f:e5:3f:31:9b:36:cc:d7:88:10:b2:5c:c4:31:6f:4c:
19:c8:6c:5f:85:27:74:f6:14:3f:76:45:5a:88:e2:e4:59:9e:
f7:8a:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:37 2026 by rpki-client