Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: suYwbqs+1y9/4DQdqJytqFPiXQI/StETLHSVOdNfeNQ=
Subject key identifier: 20:C3:9E:96:6F:6F:63:0C:C7:93:48:00:6C:89:04:2C:D9:CC:FF:55
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019D38D36EBA3AD9949B1BCA1698A79A9C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0685
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: KMS/WeYz3FIYqvbFZhLsJEMVtMqV0NI2FA+j07MCFKY=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6e:ba:3a:d9:94:9b:1b:ca:16:98:a7:9a:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=20c39e966f6f630cc79348006c89042cd9ccff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:2a:8f:fd:e5:dd:4a:b5:9d:69:48:c2:29:
0f:95:da:ec:96:8b:59:33:2a:35:50:7c:03:46:b3:
7d:08:e9:6f:a4:3d:c5:08:e8:a9:d1:1e:dd:d1:2f:
d7:bc:f2:e7:fb:b7:e0:70:02:7c:2b:94:f8:2f:e2:
60:9b:b2:fe:6f:99:df:17:4a:03:24:a2:2c:92:e4:
4f:61:be:fe:c0:87:fe:4c:b5:bb:b1:2a:2a:85:ef:
78:b4:30:9c:03:21:9c:b0:80:4a:7f:63:77:7f:63:
42:8a:48:61:e3:4e:31:d2:3b:81:d3:43:8a:a9:c6:
ec:43:c2:a0:d2:3a:a4:52:82:88:7e:25:95:98:bf:
55:35:56:3f:ce:85:64:0b:49:00:b8:ef:b5:31:d3:
f0:96:fd:05:b4:69:24:92:66:ec:3b:66:e7:82:27:
74:00:53:07:71:a1:fa:75:56:16:54:fc:1d:03:0b:
08:0b:6c:12:3c:55:d8:69:57:c3:1f:32:ec:3a:57:
c1:c0:ab:ec:9a:be:c6:27:27:89:1e:73:6b:e7:72:
08:2d:cd:be:40:0d:d0:9d:da:54:04:91:07:8d:cb:
85:2d:38:e4:32:65:d8:67:5f:5e:5f:8c:d1:66:62:
69:14:a5:a1:50:e4:ba:1c:a1:0c:c9:85:63:f9:f9:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:9E:96:6F:6F:63:0C:C7:93:48:00:6C:89:04:2C:D9:CC:FF:55
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:63:35:21:30:70:82:f7:5f:21:1f:a2:85:4e:cd:e8:15:
64:97:64:4d:1d:b3:f1:54:ca:0c:08:07:2f:d3:08:22:e8:45:
cd:93:ae:eb:ad:4c:5b:3f:9f:a8:a4:99:f0:d4:13:bd:f6:9f:
55:8d:18:bd:e1:47:8f:96:53:dd:02:29:a6:21:57:cd:bd:a2:
ec:d0:4c:d4:7b:94:96:02:5f:c7:19:87:13:b3:17:da:f5:1a:
9b:5a:2c:e8:28:b2:ef:6d:4b:a3:a4:37:af:26:d7:ed:b9:45:
da:08:bf:5e:1e:a3:3e:31:c7:6a:d4:c9:e0:e1:87:0a:67:87:
78:9e:81:b3:50:cb:94:38:93:cd:f8:06:ad:df:5a:aa:39:65:
8f:ae:dc:76:5d:98:32:69:dc:df:2f:92:49:26:c1:f0:f2:3e:
37:c1:f1:b7:f2:35:14:a4:73:4b:29:b2:93:43:be:98:00:99:
b6:94:49:a0:fd:8d:ec:2e:30:35:ff:0d:78:91:c9:95:be:12:
a5:a7:e0:8f:5e:f7:1b:16:cb:1f:39:97:ec:6c:a8:72:66:aa:
3d:7c:5e:74:6f:36:6c:72:52:e2:96:5b:50:f1:ef:2f:97:37:
39:22:08:70:52:82:d4:ab:8f:d4:8c:a7:bf:01:f2:15:e2:77:
1e:3b:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client