Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json)
Hash identifier: OwpqJBCEkeMzjzHoIygEGHiAd4F5GSXy5Bv+06izZD0=
Subject key identifier: 31:41:3E:64:F0:9A:4E:A0:D7:91:1E:D3:85:0F:DB:90:C4:8B:DD:52
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 019D37C054657A3818B414E4F406CB40D4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
Manifest number: 0181
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: P5VE56qLyEQQURqr3aqWKvCLRq9mxUqQEmDHj9lijIo=)
2: 118-0Se03Hd6WkrM5OjppqFR1S0.roa (hash: iigPQAfXfwcfzslQVLCKiVJRI0tND4zuk1TNSyWLZe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:54:65:7a:38:18:b4:14:e4:f4:06:cb:40:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=31413e64f09a4ea0d7911ed3850fdb90c48bdd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:f2:76:bf:6d:90:02:b2:d0:6a:a4:64:44:
e3:e1:37:59:0d:b2:95:f0:f3:f4:06:51:2c:2d:0c:
25:a2:ec:f2:48:10:7e:3f:51:80:fb:6b:d9:4c:37:
05:48:3c:fa:8a:40:e9:aa:ef:b7:20:ee:d5:69:60:
1a:cf:af:08:ed:f8:6d:11:64:93:5c:eb:d3:3a:4e:
bc:87:39:a0:f0:32:ed:1b:26:04:4b:a8:f8:8c:7d:
b4:7c:4f:fd:05:58:57:da:d1:e3:6b:b3:23:2a:db:
2d:30:5e:b7:37:f9:cf:a8:5a:ad:94:e8:f3:cd:d1:
2f:2c:41:e7:a8:43:be:3d:b7:c6:0c:87:13:8f:16:
22:4a:3e:ef:9e:e0:d5:2f:18:8a:ae:84:1d:c6:08:
6b:c9:bb:9a:44:47:f7:a1:68:f0:a5:84:d3:3c:a4:
66:48:81:57:14:e6:eb:07:88:53:4e:4c:86:d2:f4:
cc:ff:90:27:cb:d1:06:be:e4:11:19:ef:b7:ed:38:
90:91:e1:9f:b7:f6:a0:c1:b0:0f:fb:00:c9:80:2a:
26:98:be:7a:51:3d:b8:55:2b:34:19:01:f9:48:20:
e6:a9:00:de:6d:88:df:02:c6:c7:4f:08:b2:83:67:
6e:2d:64:0f:95:3e:a8:bf:aa:c1:57:da:21:e7:ca:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:3E:64:F0:9A:4E:A0:D7:91:1E:D3:85:0F:DB:90:C4:8B:DD:52
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:68:f7:d3:17:c2:12:55:8a:f1:28:99:e8:8b:32:25:e6:
bc:b4:65:0f:93:32:0a:09:2c:77:f6:df:9b:d4:74:49:05:bc:
9e:03:85:02:95:f5:23:51:24:25:f9:aa:d2:96:27:23:28:36:
05:2f:91:d5:53:c8:6d:23:f0:02:02:3d:04:0d:2d:34:d3:cc:
25:61:fd:4d:68:0f:12:7b:b7:25:66:b8:aa:48:d3:00:56:ee:
54:7e:f5:2c:d4:fe:95:d3:40:1f:bb:22:0b:ac:e5:67:bc:24:
f0:74:78:ff:22:3f:18:a1:95:d0:9e:43:08:b0:d9:7e:3b:7e:
45:82:ed:03:99:e7:f8:43:0b:c3:21:36:10:67:3c:e5:52:4a:
8c:55:48:91:a6:88:ec:2b:23:4b:42:a4:46:a0:02:2a:a8:6f:
8f:5b:19:45:9c:1d:f7:38:9c:44:18:6a:8a:d4:42:5d:11:f8:
7b:d2:95:d0:2e:a1:07:70:05:b7:e3:8c:81:ab:d1:f5:17:ff:
3b:58:ee:ce:f2:5e:8d:4c:84:62:f6:44:7c:08:d2:83:75:f1:
7d:a8:52:e0:b2:fd:78:cb:2e:d6:01:90:81:81:8f:ce:86:ec:
2b:05:56:05:5c:91:81:87:c4:7b:18:01:32:aa:24:8f:cb:45:
45:8d:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:06 2026 by rpki-client