Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: 4IflOYl0m7r2XqLYcPWtapneV8fNp1eaHMZyabf6h9s=
Subject key identifier: BA:00:DE:73:AB:E2:D0:36:FE:96:49:4F:71:0F:C8:A3:95:83:2A:DE
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019CE4B60B0F0B617416AD3140836D8F5C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0605
Signing time: Fri 13 Mar 2026 01:01:01 +0000
Manifest this update: Fri 13 Mar 2026 01:01:01 +0000
Manifest next update: Sat 14 Mar 2026 01:01:01 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: rDyhVCdLupz81zpoBlbrMR63AprAo/MIhmLKGNzFR2Q=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:0b:0f:0b:61:74:16:ad:31:40:83:6d:8f:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Mar 13 01:01:01 2026 GMT
Not After : Mar 14 01:01:01 2026 GMT
Subject: CN=ba00de73abe2d036fe96494f710fc8a395832ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4a:6a:1c:75:da:16:24:eb:6c:00:43:1f:1e:
ab:93:45:51:d6:1a:62:f4:17:2e:60:75:30:db:aa:
20:94:30:51:49:0c:9d:67:16:26:30:01:a9:1d:c8:
57:f3:b4:a2:fb:cf:99:d8:3b:c1:60:63:c1:0e:d4:
c4:d9:d6:5f:6e:69:53:4a:b5:7c:f2:05:37:1f:d1:
25:ea:18:95:6b:4e:2a:e7:b8:0c:09:d5:69:18:b7:
4a:8e:d0:25:d3:86:d7:e4:34:7f:e5:3d:37:d8:91:
34:93:c6:c0:c7:d9:a7:ac:17:e2:3a:6a:ac:f1:ad:
c9:aa:a8:31:4a:2f:68:51:c9:56:3f:1c:e7:98:62:
7d:5a:4e:58:29:ef:2b:88:e9:f3:08:c1:56:ec:38:
c0:4d:aa:20:d1:5a:e6:ce:de:d1:82:70:24:4e:a7:
0f:4a:de:a7:a7:52:ed:fe:36:d3:9a:86:f6:73:e2:
0c:09:12:0e:3d:7a:94:e4:43:81:0d:d3:43:33:d9:
2d:5c:e2:3a:51:67:79:9f:32:50:23:90:a2:60:be:
4a:31:82:78:e1:b4:4b:75:d8:4e:f1:19:9c:06:50:
11:bb:a7:f6:05:46:07:c4:6b:71:e4:ab:25:d4:5b:
d4:e2:95:db:dd:70:9e:bd:65:db:d4:a2:f8:26:d7:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:DE:73:AB:E2:D0:36:FE:96:49:4F:71:0F:C8:A3:95:83:2A:DE
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0b:1c:fb:72:bc:29:d1:30:85:01:73:dc:51:2c:e8:f0:3c:
49:22:4c:90:39:5b:be:7a:90:60:7a:c6:36:f0:74:79:da:19:
8f:c1:a9:40:e8:a8:70:52:8b:46:3d:0a:d9:ae:cc:bb:6f:28:
53:aa:ef:7f:65:87:6b:80:15:65:22:bf:f2:6c:6c:c9:bf:e2:
54:28:c7:28:49:27:89:04:73:d1:e7:16:88:1a:2d:d8:f5:63:
19:cd:0c:de:bb:90:82:9f:0b:05:ef:45:74:43:97:c5:a9:07:
bf:f9:27:73:55:38:57:f8:8a:b0:d8:45:b1:2a:38:90:9a:37:
af:0f:26:20:4e:0e:b7:e8:e8:1d:02:31:7c:0b:f9:9f:d7:96:
0c:6a:28:d7:78:df:4d:8e:d3:b4:fb:11:2d:81:43:41:99:bb:
b3:84:b0:2d:ea:d3:c5:a4:cd:2e:21:98:50:73:e9:6c:65:9b:
0f:49:6c:03:bc:4f:9f:7e:c7:c6:40:30:f4:07:30:19:21:ee:
2b:eb:b9:65:b4:3f:c9:a3:c9:a4:53:4e:24:83:85:64:37:c4:
4d:1b:3c:1c:27:0f:43:a2:53:60:9e:8f:69:ca:b1:b3:67:b7:
1b:ab:b0:2e:7b:60:bb:4e:c4:54:89:fc:8b:96:9c:1c:e7:94:
e5:c9:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:05:18 2026 by rpki-client