Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: nM8roo7oeAncHJHlRgYRcQjz+G6m8CGB/Sa87sfWKFo=
Subject key identifier: EF:58:4B:AA:65:37:32:B7:6E:49:9A:18:43:F7:FC:BB:AA:14:39:7C
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019D38D2EA111FE6914934784EDF765DEFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: Oa0jvBBMVxZpZxIx9z74taMkQ7wGzyXMwF9ZPIYnlVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:11:1f:e6:91:49:34:78:4e:df:76:5d:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=ef584baa653732b76e499a1843f7fcbbaa14397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:5e:c0:ba:05:a9:f0:f7:c1:1b:a6:f7:9a:
11:84:03:df:d3:b5:a8:0f:e4:99:4e:b5:36:4b:02:
9f:34:fb:03:45:e5:d0:b3:cb:dc:ad:48:33:9d:4f:
fc:3b:ef:e2:2c:00:31:56:77:94:d5:e8:d9:4f:d5:
ae:50:b0:6c:66:7f:3d:e0:49:03:0c:32:3c:1a:07:
ba:4d:39:a4:56:b0:ba:5b:c7:2f:27:d6:8c:e1:a0:
09:81:c5:f6:df:e3:bd:6b:e1:64:30:e1:6e:97:50:
c0:39:86:47:e1:2d:02:92:d7:6e:e0:86:2e:90:a2:
e8:6b:25:c2:c6:db:b0:80:56:d3:24:24:ca:0d:8d:
0d:de:ed:3c:76:c2:1f:14:23:af:e8:44:57:da:73:
27:9e:01:58:3e:2d:0c:d5:8c:12:d9:dd:3e:2a:0d:
39:45:7f:aa:ae:35:cf:05:d2:6b:65:8e:ee:42:72:
1b:e1:3a:00:43:3e:fe:8f:e3:46:ff:44:af:f6:ff:
78:9b:bb:33:b3:7f:9d:7c:4e:75:5b:4d:ee:7a:ff:
bf:ea:93:9c:14:24:9b:76:e4:3c:03:bb:78:f0:ee:
3c:06:00:6d:99:8e:d3:46:17:1d:5f:f4:d3:7d:e2:
74:ab:f4:3f:3f:0d:88:1c:e8:d4:ef:66:61:be:98:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:4B:AA:65:37:32:B7:6E:49:9A:18:43:F7:FC:BB:AA:14:39:7C
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:08:a0:c0:6c:7f:83:a1:73:bb:04:60:1e:e0:51:57:c0:
e6:50:f3:86:19:6e:9e:65:68:7f:48:ed:87:e2:59:5f:72:c1:
83:20:b3:90:fc:70:c7:7a:45:b0:61:a4:db:46:13:cf:1a:bd:
1a:ff:c6:40:31:57:23:39:ca:e1:ba:db:d5:e8:41:8c:ec:14:
41:0f:62:10:ed:53:27:42:94:f5:d2:25:5a:31:39:50:c1:d9:
64:a3:b4:34:05:f1:53:51:dc:6a:4a:d7:7b:ac:0f:13:9d:5f:
01:f1:c3:58:5c:25:ca:a6:9e:36:dc:e2:77:a9:e3:80:38:6c:
75:e6:18:a4:f3:dd:26:54:3b:23:65:f1:22:07:af:63:84:13:
50:1c:43:6c:bb:3d:fd:82:72:16:b8:39:30:3d:55:8d:3b:98:
43:51:19:32:60:43:ac:9f:31:79:21:c7:55:70:aa:72:50:70:
5f:75:96:1a:da:3b:9e:e0:76:98:36:43:63:0a:7a:60:1e:be:
ec:c1:6d:a6:5d:94:87:8b:eb:0a:7f:54:45:0a:6c:87:7c:81:
1a:cb:63:82:ae:b0:ef:9c:a0:f4:c7:96:de:59:d2:05:5e:56:
96:44:7d:52:b5:60:a9:39:da:4e:4a:3c:8a:ff:46:f2:ee:17:
8c:3c:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client