Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier: sMpYnAe6t/W3Ql6UwUCyZ9kLv9Uekkpn7UpIoPJ3Gg8=
Subject key identifier: 31:51:3F:8C:AB:C0:27:14:62:69:2E:31:A7:48:EE:89:23:C0:7D:09
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial: 019D3752699F1C8E685E8C74EC9459F01FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:40 +0000
Manifest this update: Sun 29 Mar 2026 02:00:40 +0000
Manifest next update: Mon 30 Mar 2026 02:00:40 +0000
Files and hashes: 1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: UNYYx/UFsWa8FSJDxrYUeSouSoFxHDkx6Earu7remTs=)
2: _mlWLWGEeY126ouf9N2RBXWxQWs.roa (hash: hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:69:9f:1c:8e:68:5e:8c:74:ec:94:59:f0:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Validity
Not Before: Mar 29 02:00:40 2026 GMT
Not After : Mar 30 02:00:40 2026 GMT
Subject: CN=31513f8cabc0271462692e31a748ee8923c07d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:e5:88:ee:1d:00:81:88:3e:6d:b3:0d:dd:
5a:4c:ee:0d:54:83:28:58:f2:b0:78:23:a3:fb:06:
ae:87:cd:e5:43:5a:c5:96:25:75:81:e2:61:af:19:
ab:4f:f9:7e:04:8a:c8:bd:d8:6b:54:ec:24:7c:68:
c0:04:2d:3b:a5:9c:4c:c8:e8:3d:7c:f5:c2:a0:a2:
36:ee:f4:8d:45:72:18:d3:ff:a6:1e:e9:5c:41:24:
91:21:fc:82:13:6c:b7:10:2d:46:f7:d1:8f:78:20:
b0:f0:48:6c:c5:13:17:22:eb:75:72:1e:e1:8b:a0:
49:4f:f8:c3:c3:85:52:7d:ea:73:7b:7c:c6:36:94:
a9:01:68:7c:6e:80:a0:2a:aa:67:c0:cb:e1:d6:b6:
e8:68:a9:42:e4:cb:10:ac:ee:6f:1a:48:4a:04:7f:
ce:cd:1d:e9:22:74:f4:83:3f:08:c2:fb:55:79:cd:
f5:5b:c9:a6:69:de:b8:11:72:60:9a:67:8a:01:1a:
eb:79:2b:92:5a:62:3d:a4:1c:6d:de:62:27:44:4b:
23:72:f4:e6:5c:a0:07:15:34:f8:ff:08:b1:ff:74:
e3:07:3a:f8:a6:22:4e:37:6d:ab:3d:a0:8f:5a:8a:
c3:c9:9b:02:d7:db:5d:e2:79:28:84:c4:d5:a4:f6:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:3F:8C:AB:C0:27:14:62:69:2E:31:A7:48:EE:89:23:C0:7D:09
X509v3 Authority Key Identifier:
keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:aa:e1:24:6d:c1:56:c5:93:05:20:af:84:fd:f9:94:4e:5d:
bc:b5:eb:5c:7f:22:2c:bd:cd:30:e8:b0:ed:d5:a5:2b:62:98:
84:bb:34:77:86:02:a4:96:2a:ee:0d:2a:e9:5e:66:bc:0a:a2:
30:08:2e:07:8e:b8:24:0f:38:0b:29:1c:df:00:6d:2b:9a:1e:
02:7c:be:88:62:c4:9b:47:a2:6f:77:b5:f7:d4:c9:92:28:c6:
d3:6f:ad:7f:b5:10:52:95:42:57:ea:21:86:ab:02:e1:30:35:
76:4e:c8:1c:a5:68:a5:ce:b5:74:29:0a:9b:7f:8a:90:ec:22:
2b:07:af:78:b1:27:66:3e:d9:97:66:a9:cf:51:d3:14:d8:59:
2c:89:53:2c:f2:dd:93:7c:a4:fc:26:6e:86:3c:f8:c7:95:b9:
2a:5f:9b:07:5f:9b:16:a0:b2:54:32:23:f6:64:2d:1b:6e:19:
87:c5:66:a5:9c:b7:a5:b1:58:ce:f5:e1:c5:0b:dd:2e:3a:f8:
41:03:8a:02:49:ef:e9:0d:5e:35:59:a6:98:2e:55:0a:f2:a0:
d6:20:b8:5e:63:58:d1:4c:ca:cf:a3:42:4f:1f:b2:ae:08:3f:
f0:4f:68:06:80:26:e9:fb:10:7a:e1:4d:a0:4f:0c:3a:d6:e3:
13:80:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:32 2026 by rpki-client