Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: WP52+n5ZynTlKX1pl3XWrhEWPwhKYpzu9SwKoffKoew=
Subject key identifier: AF:0B:21:7A:02:1B:37:3F:44:F2:5E:39:EE:1E:9A:85:E7:D3:DF:50
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019D38659C62BF33423A3F8BB6C4592E5865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: glK0zLwlzUAo42GT62Xclw997qPlZp2oJ5kMAu3fYiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:62:bf:33:42:3a:3f:8b:b6:c4:59:2e:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=af0b217a021b373f44f25e39ee1e9a85e7d3df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:72:f2:bf:93:d4:fa:9a:2f:a7:79:3b:53:
09:0e:90:28:7a:f0:44:77:0c:a2:33:81:c0:fc:4c:
61:ec:22:e0:8d:a2:cd:62:06:ba:bb:61:d5:00:02:
9e:7f:5f:9e:9e:ac:13:f0:59:26:60:5a:b3:db:21:
5e:cf:51:99:ba:82:38:87:c7:a6:a8:20:e3:ef:bb:
8f:f4:b7:c7:20:c5:86:dc:4d:bc:36:67:ed:cb:e4:
c0:cc:43:cc:b8:4e:c6:85:6c:08:31:67:9e:24:ec:
5a:b4:d8:f3:96:bf:13:a2:d0:b9:ee:9c:b0:df:54:
6a:be:bc:cb:a6:23:75:0b:78:3b:0f:46:59:43:a0:
2c:66:49:c6:b6:89:6a:c6:d7:04:83:54:10:65:a1:
53:0a:d9:44:78:dc:0e:d9:ca:a7:c8:aa:82:7a:42:
2f:18:0f:14:f7:e2:5f:aa:cf:0c:0a:6f:12:60:39:
a2:4b:38:e1:52:0a:e1:1e:62:61:7e:76:a2:08:df:
f0:00:8b:05:36:9f:a0:cb:5c:26:b7:b5:ad:45:dc:
09:83:39:bd:99:f6:22:ac:02:69:a1:e1:9b:1c:ef:
28:fc:a8:0c:22:05:d8:08:3f:31:88:16:f9:8a:da:
7c:fe:94:94:d3:ba:bc:ba:cb:a2:f4:35:71:83:ae:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:21:7A:02:1B:37:3F:44:F2:5E:39:EE:1E:9A:85:E7:D3:DF:50
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:1f:3f:33:55:18:c9:eb:8a:89:3c:b4:a6:c6:50:17:63:
13:3b:27:a9:36:65:07:4c:28:d6:10:6c:15:c8:f4:24:24:f1:
15:63:f4:3a:f1:c2:e1:fe:56:ff:ac:c7:75:3a:66:8d:fd:8e:
48:92:b5:4d:89:9d:4f:72:54:3d:1c:27:5f:bb:7a:1f:ea:9f:
23:cc:51:cc:73:db:af:92:93:ab:18:61:d1:62:21:9c:cf:8c:
31:27:f7:d4:a8:dc:c6:40:4c:12:be:84:13:9a:8a:0a:8f:f0:
5e:8d:0d:ae:20:29:28:7c:89:cb:bd:5a:03:00:7e:5b:dd:38:
e3:43:26:97:bc:0f:07:c3:fe:51:7e:b8:18:4b:6c:e8:83:6e:
be:73:ef:c9:ff:24:ae:b7:d2:a6:62:2b:b5:00:4f:e9:5c:a5:
37:ef:be:0a:61:ee:51:6c:51:31:f2:62:0a:30:2b:99:71:6b:
1e:6b:54:9c:6b:8a:0b:58:3e:19:f3:2e:91:19:11:99:46:cd:
fd:e5:35:c8:45:60:d7:6b:4f:bf:7e:77:66:e5:38:7f:00:4f:
58:dd:d5:ee:70:84:1e:03:7e:da:02:5e:43:21:39:5e:d6:4f:
3f:3b:e3:1e:b4:07:82:5b:76:7b:03:25:f8:f5:79:a1:05:fe:
8e:fe:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:18 2026 by rpki-client