Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: tpFnWeCLXu1DGkTGIPK4UzDwxN5k7vDv1RfV5QY9DGY=
Subject key identifier: F2:05:CE:DD:89:4C:7A:8A:95:EA:FC:CD:9B:34:B7:69:56:23:B0:E0
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019D2772D5852B1745897B1349082B6EB8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: N3NBjXqBoJMTuqNoQw+Uw7ncL/qmix5aZ+H19SXidH4=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d5:85:2b:17:45:89:7b:13:49:08:2b:6e:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=f205cedd894c7a8a95eafccd9b34b7695623b0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:eb:b2:6d:79:b9:4a:3a:55:01:11:9e:e7:
42:ee:3e:00:16:87:5a:02:f1:36:ef:51:09:cb:84:
da:93:63:b9:c8:a9:a5:1d:b7:18:71:8e:aa:a1:0f:
ba:b5:ed:55:c3:fb:4f:6a:76:5c:5b:32:a4:96:64:
c6:28:53:18:05:30:71:e5:32:9a:34:1c:fc:58:1c:
59:01:04:64:5b:42:e2:26:36:84:73:cb:4d:99:c1:
37:46:47:09:4a:70:9b:75:c4:ad:81:64:7c:fc:41:
22:fa:fb:98:b1:07:2d:58:89:f2:95:c3:19:44:6c:
83:3b:ec:47:22:b2:e2:04:e8:31:b0:e9:2e:cb:4c:
7e:74:11:60:35:02:52:d6:73:60:91:46:5c:03:0d:
85:5c:9d:c2:04:a8:c4:17:55:00:13:ce:82:bb:0e:
cc:ce:50:82:7a:06:68:bf:db:2c:9d:d9:44:e3:c2:
3e:39:31:bd:60:fa:52:84:0f:b5:91:77:e6:aa:e1:
f4:64:3d:a0:4a:5d:fa:e1:36:54:98:16:2e:3e:16:
0b:cd:38:b3:02:96:1a:b6:ec:27:68:fe:6b:07:4c:
6f:db:43:f2:b7:38:7d:5f:f5:a5:55:00:0d:59:2e:
e8:82:f3:05:a3:60:6d:46:ed:df:ba:8b:44:4e:1c:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:CE:DD:89:4C:7A:8A:95:EA:FC:CD:9B:34:B7:69:56:23:B0:E0
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2d:c3:01:88:e3:af:63:d4:b7:c4:9e:68:08:54:b6:43:b4:
8d:1d:9c:0f:05:20:e2:8a:fc:ee:cc:67:58:be:42:a9:a4:d2:
c3:09:16:c7:29:08:8d:5e:03:f0:d0:aa:56:f7:f0:71:7e:0b:
45:e3:7d:90:f7:98:68:f7:27:3b:03:89:b7:fc:2e:1c:5f:e5:
22:e0:71:42:73:fd:6f:cb:72:eb:b0:68:a4:d1:c1:6c:14:d1:
22:6f:7d:0b:e3:44:1f:19:57:32:ae:14:9f:ec:49:83:6d:45:
fb:d7:f1:a3:e9:c5:52:d7:57:f0:01:cf:4e:b1:d2:97:c2:96:
fe:a2:31:ec:e8:7f:e6:f9:95:2d:7e:ca:99:a8:e1:11:84:b3:
ee:ef:55:fb:25:59:76:d4:44:68:47:0c:72:0a:e8:ad:1a:ef:
e5:54:95:68:df:a2:53:62:b1:43:88:7a:13:0e:f3:65:68:a1:
60:7e:4b:d4:90:53:6b:80:85:8e:7a:fd:79:4d:b4:81:f6:03:
e8:32:58:a7:30:a7:7d:37:c1:47:0c:fb:20:f3:14:5d:cd:3a:
e2:d1:73:32:7a:c2:9b:36:84:9a:83:94:a4:12:27:d2:74:a9:
2c:dd:5d:ec:21:6b:2a:56:5a:14:f7:66:4a:ad:b1:b9:4a:d0:
7d:25:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:56 2026 by rpki-client