Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier: 2EIGQch7Jc6X/03Fnq2bZmZU0DXQ85ohOlXfLBXLcqw=
Subject key identifier: FE:41:36:FC:9F:5D:15:BA:35:C5:01:B5:DB:06:DC:53:2D:56:75:28
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 019CC7BEB95E7B7BE5121BA02D2D4FD85DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number: 0318
Signing time: Sat 07 Mar 2026 10:01:31 +0000
Manifest this update: Sat 07 Mar 2026 10:01:31 +0000
Manifest next update: Sun 08 Mar 2026 10:01:31 +0000
Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: /gtNKcjOQ2xVGp+O30ZNn5tO4q6RvGcPtEuVHTw1dcE=)
2: edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (hash: 8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:b9:5e:7b:7b:e5:12:1b:a0:2d:2d:4f:d8:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Mar 7 10:01:31 2026 GMT
Not After : Mar 8 10:01:31 2026 GMT
Subject: CN=fe4136fc9f5d15ba35c501b5db06dc532d567528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:62:4d:12:4e:3b:d7:06:71:6e:55:67:1b:
dd:b7:16:d4:9f:ef:b3:87:b3:3f:9c:87:f5:f2:4f:
17:62:b2:1f:4c:12:e7:0a:68:fb:d4:15:d4:00:06:
ce:87:13:1b:9a:14:15:d2:95:4b:d5:1e:06:06:a2:
33:fb:3e:e2:1d:0b:24:a5:48:d9:f0:8b:93:28:ea:
88:49:73:b7:b7:cb:41:c1:bb:db:a9:f0:2c:29:35:
a5:70:a7:62:45:cb:0a:c4:b4:34:90:80:49:3d:d7:
cb:0b:5c:26:38:81:9b:c4:bb:b2:3d:60:c5:4d:4e:
3a:87:0b:01:8e:77:bc:b1:12:82:cd:a0:29:0e:16:
7c:99:3f:69:ed:7a:3c:31:d3:31:ac:72:41:76:2e:
98:1f:9d:b6:0b:21:22:a6:32:e2:c5:e1:d9:3b:79:
0c:43:c0:dc:32:1d:77:00:cc:cf:68:a7:da:e1:e6:
99:c9:f6:05:50:23:a1:bd:57:a1:e9:01:8b:4e:eb:
93:fb:21:37:3a:7a:ed:40:9a:57:3e:0f:35:a5:a5:
84:89:33:98:09:aa:c0:ec:49:7f:17:d4:9c:42:12:
b1:3e:d9:17:40:f0:64:9d:8e:97:86:ce:34:40:ef:
77:9a:51:8a:8a:cc:ec:d0:64:13:e9:5b:72:0c:df:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:36:FC:9F:5D:15:BA:35:C5:01:B5:DB:06:DC:53:2D:56:75:28
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:cf:d2:17:a7:5b:41:ea:71:e2:bc:bc:ca:9f:ae:3e:59:
80:ed:96:72:aa:41:94:3a:7d:2e:82:a5:84:26:c2:e6:f4:3d:
1e:d2:9c:c1:43:26:50:61:55:c5:0c:f8:37:22:17:e0:06:bd:
d1:aa:1d:2b:d1:15:01:96:02:43:58:17:5d:14:33:23:8b:7c:
a6:e6:50:d1:4c:6b:ac:dc:fd:2e:bb:5b:2c:10:11:d6:a1:26:
64:9f:5e:31:c5:78:e7:3d:ce:fa:09:d1:25:9f:f0:a1:f4:fe:
3b:94:1c:07:f0:f1:6c:f6:84:f7:c4:33:84:14:4d:27:09:17:
db:c1:ea:6c:3a:78:89:7f:aa:0c:c3:9b:d9:e9:6b:70:fb:99:
43:d8:8a:6e:f7:16:87:8c:07:1f:c4:97:3e:01:6c:59:4e:b9:
d5:47:95:5a:d0:01:18:0f:05:70:35:0a:e4:9e:5f:ae:d5:b2:
a3:7f:81:7a:3e:b7:c6:12:b0:cb:0e:7a:3e:2f:28:03:cd:c3:
0d:ee:e8:54:f2:92:7d:34:2a:97:9a:37:8b:06:ca:4b:16:82:
97:5e:b2:b1:a4:ab:08:20:ac:3d:c2:1d:32:ed:d3:4a:c6:d9:
7d:bb:f5:2c:1f:3e:3d:24:3e:fe:3d:fa:74:89:d5:9b:f9:d7:
6a:fa:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:05:54 2026 by rpki-client