Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: HEDfQErDBIy66yco6JUzjavyUaP1AvPSlrS/vF4iFGk=
Subject key identifier: F3:AE:F3:E1:C8:4C:B9:9C:79:CF:A0:BC:8E:ED:BA:B9:06:0A:AA:1A
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019D25F1AB189ACF79286C220394EC0C3672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:28 +0000
Manifest this update: Wed 25 Mar 2026 17:01:28 +0000
Manifest next update: Thu 26 Mar 2026 17:01:28 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: /yRXUqHZw93Pz479dYU9ny5mWMr8VHV5Q/CL64C8D7E=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ab:18:9a:cf:79:28:6c:22:03:94:ec:0c:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Mar 25 17:01:28 2026 GMT
Not After : Mar 26 17:01:28 2026 GMT
Subject: CN=f3aef3e1c84cb99c79cfa0bc8eedbab9060aaa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:15:5f:32:a3:19:4f:45:22:33:a6:52:26:
f7:f1:d2:f6:aa:21:bf:c8:f9:5a:fb:0d:14:58:2c:
cf:69:3b:bc:a9:b6:60:d1:d8:15:9a:64:2e:e6:47:
b6:9d:67:7a:51:7b:e8:05:dd:8d:81:38:95:4c:89:
ad:00:7b:f1:84:f8:90:d6:02:64:6c:af:2f:12:2b:
4f:28:b2:06:5d:70:c9:1d:1f:93:b0:d0:67:70:8a:
e4:69:15:b4:8d:80:5f:f6:a4:3a:3d:09:60:6c:45:
69:77:49:4c:2d:37:5a:9b:22:1e:da:24:c6:ac:9c:
72:ce:4d:8e:74:28:93:0a:d9:98:52:40:50:1b:75:
6c:44:fd:14:9e:7d:c8:03:83:90:47:7d:ee:82:ce:
41:a1:18:ff:a3:35:14:8e:dc:27:c9:4d:6c:82:e6:
d3:d0:8b:25:e5:24:a5:bc:29:13:da:cc:fc:bf:82:
c0:59:ce:de:f8:ef:b6:be:ac:e6:97:0c:85:69:ee:
22:7f:5d:cf:ac:30:96:c1:dc:18:60:04:25:d9:f2:
0f:c6:63:3a:22:e2:cb:93:84:13:63:b6:61:26:3e:
7c:e8:e7:ff:b5:01:8c:3a:1c:30:46:59:d2:b7:f0:
8d:3d:a1:12:d8:f1:ed:10:86:d0:1d:a0:e9:42:33:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:F3:E1:C8:4C:B9:9C:79:CF:A0:BC:8E:ED:BA:B9:06:0A:AA:1A
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:64:93:1f:5f:52:a5:00:ee:40:b7:c7:f9:79:90:91:37:18:
4d:11:8b:de:a5:42:d2:c8:39:a3:6f:ba:d8:b4:27:c1:75:9a:
5d:34:5c:5f:2c:c1:94:4b:43:9c:ad:e0:d5:c8:b9:cb:1a:27:
b5:57:db:ef:60:d7:38:04:c9:71:85:05:32:23:14:0a:be:e7:
52:df:eb:89:c4:c3:4b:b9:0a:84:cf:c7:0f:8c:ad:11:ce:c1:
ff:b0:56:f5:b8:d3:e3:2a:01:e4:66:65:f8:da:35:13:91:f7:
0d:7a:79:64:37:f2:67:4e:38:f7:85:6d:1a:00:03:2f:ab:c5:
2a:ba:6d:e8:5b:a4:87:a4:47:2e:60:9d:77:82:77:01:78:55:
68:df:f0:cb:88:93:d1:cf:97:a4:6e:b5:cb:02:9d:b0:12:26:
e5:ff:34:ff:09:9c:4d:f7:58:9d:7c:94:ce:90:80:25:30:30:
33:28:d9:26:6f:5d:a9:63:1a:ff:de:9c:6f:aa:07:ad:b4:d6:
b0:26:7a:ac:79:33:d0:1e:1f:fd:24:e5:72:a1:c3:78:ef:39:
fc:d2:79:94:e6:32:1e:7f:eb:c3:b2:0c:bc:e0:96:9e:24:e2:
43:c8:29:f4:31:51:bf:b5:2d:88:a5:7b:52:90:56:d4:7b:3c:
95:e4:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:14 2026 by rpki-client