Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: 6dFdzkXMvNLTLOOSbmlC25hnBqowDEJGG02S8zTcnHM=
Subject key identifier: CB:8C:B5:5F:BB:67:52:60:EA:8F:F7:7F:5A:EF:68:EF:6D:0C:2D:61
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019D3A8B2BCE3EDD06D6A2F221B81AF882D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 17:01:32 +0000
Manifest this update: Sun 29 Mar 2026 17:01:32 +0000
Manifest next update: Mon 30 Mar 2026 17:01:32 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: EorOr7N67dbx4y2pFVdlMalP8X6MF8ViryXtKBIYX7E=)
2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:2b:ce:3e:dd:06:d6:a2:f2:21:b8:1a:f8:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Mar 29 17:01:32 2026 GMT
Not After : Mar 30 17:01:32 2026 GMT
Subject: CN=cb8cb55fbb675260ea8ff77f5aef68ef6d0c2d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:f4:fd:9a:74:80:88:03:4d:c8:27:62:53:
5d:e8:10:fa:9c:93:18:57:96:59:76:07:39:0b:a9:
b9:0d:08:5b:93:03:f3:58:1a:4b:ed:e4:56:10:3c:
c5:b6:03:33:29:9e:5b:4d:37:66:0c:1b:a6:7b:f6:
e6:0f:46:04:f2:34:d1:f5:03:16:75:63:e8:48:4c:
78:0c:e3:08:29:d0:cd:fe:29:4a:93:90:90:02:b2:
94:d6:31:ab:ec:e4:6f:6a:b2:20:66:30:23:3d:72:
cc:f6:e1:f9:66:ee:f3:fd:25:62:00:4b:f4:2f:ed:
34:77:2d:c2:62:95:e1:32:19:90:d9:4b:37:ff:cc:
55:c7:71:10:a8:e8:90:81:0d:c6:6d:d9:ab:c2:9d:
0e:ee:8a:a1:5b:e5:f6:3e:5e:91:03:30:65:1b:dc:
5d:ee:a8:d6:fd:f7:a8:7a:9e:b5:91:d4:40:f9:9b:
23:1b:61:38:9e:a3:0e:f1:8d:b3:1d:45:14:20:77:
bb:32:dd:38:3d:3a:b4:c8:e2:f0:94:aa:7b:84:7a:
6f:13:fc:24:27:07:c1:b0:06:c8:73:cd:83:a8:b1:
b8:33:f3:9f:5a:00:1e:61:62:b6:11:8e:20:63:41:
21:28:5a:63:c9:57:76:21:05:85:ea:9c:ed:4c:0c:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:B5:5F:BB:67:52:60:EA:8F:F7:7F:5A:EF:68:EF:6D:0C:2D:61
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:01:95:0e:d5:5a:6d:4e:fc:a2:20:9a:6f:24:bb:f7:e7:60:
89:be:64:f9:b5:72:24:0c:d1:10:a0:c6:32:79:4d:39:4d:45:
53:9e:d3:f7:27:f4:98:89:cd:1c:86:c0:59:63:c2:e7:44:bb:
20:09:06:0c:45:5b:50:81:d1:de:3d:27:4d:16:7a:24:bf:7a:
c7:49:39:57:d1:c1:83:18:31:e4:49:22:3f:4a:43:7d:1e:91:
16:d3:9d:8c:a1:b3:84:b3:05:a5:19:3a:5a:1f:ab:91:37:0e:
c2:5f:44:db:01:2c:f2:54:6b:7b:5d:42:cb:01:0f:04:03:ad:
c3:a0:bd:a2:77:9f:6c:66:f1:41:da:ff:5d:c3:a1:9f:c2:34:
7c:ef:e5:11:d6:01:36:16:f7:64:df:5d:92:3a:99:df:89:3c:
dd:12:ba:41:27:ad:b2:78:1d:af:38:6e:ea:8e:51:86:e8:c3:
0a:9a:13:be:7e:f1:53:25:6a:06:40:fb:a9:6b:83:91:41:60:
fb:e6:2f:3d:74:a9:14:1b:df:d0:9c:9f:af:ef:21:4e:23:66:
4a:97:dd:cb:6e:99:e5:22:d9:cc:c1:20:62:32:03:cf:59:14:
64:62:fc:f8:62:a9:1f:78:91:8e:59:f1:25:39:09:79:fc:d0:
0c:98:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:06 2026 by rpki-client