Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: 8VQ/apvuzen90rRCVIbqgs/LAep7Ic/LVNKs6hwYSSE=
Subject key identifier: 63:DE:DF:AE:0D:9C:6C:69:BC:E3:1A:92:0C:AF:98:9E:72:DC:0D:16
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019D27A901306EB4FD7CA4BF08F25D983AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:20 +0000
Manifest this update: Thu 26 Mar 2026 01:01:20 +0000
Manifest next update: Fri 27 Mar 2026 01:01:20 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: XR3GfdjGltL/7EzhzazHfby5G/96EzRZ9F3bRmeR+Tc=)
2: r8PbpDzHXgfJiNwt0p1njiTGzqA.roa (hash: +SJYxb1bGepByhIB3drzHoM1u1Z/gMv0EMWpc82/7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:01:30:6e:b4:fd:7c:a4:bf:08:f2:5d:98:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Mar 26 01:01:20 2026 GMT
Not After : Mar 27 01:01:20 2026 GMT
Subject: CN=63dedfae0d9c6c69bce31a920caf989e72dc0d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:4a:42:a1:cb:14:d3:a7:0c:48:ac:e3:b9:
ec:76:22:19:1e:b4:5d:1c:6a:58:06:d0:f9:f2:98:
82:e8:89:05:42:f2:84:77:9e:72:06:65:e7:be:00:
dd:af:9f:bb:95:25:d1:d1:b1:b2:76:b1:56:01:24:
b5:2d:5c:f8:e6:7a:af:22:f6:0d:ef:cf:90:56:0d:
f4:2b:d1:ec:b9:c3:77:43:5d:dd:8e:d4:1d:73:3d:
36:20:b2:71:6f:b1:51:0e:4d:48:d7:75:d4:3a:73:
20:54:da:33:d0:3e:b4:70:e5:81:70:c4:8c:dd:64:
bf:c1:b2:de:02:6d:85:93:8e:de:25:f3:a0:d1:37:
5d:33:45:46:d8:b2:69:aa:dd:ef:26:e0:e0:41:63:
53:f6:80:ed:08:92:55:f4:e3:af:85:56:44:4b:9f:
96:d9:aa:0a:f8:89:0f:90:70:d0:35:80:4e:5e:51:
22:1a:86:14:3e:57:17:7c:34:b7:a9:e5:44:0f:9f:
08:11:41:77:a0:92:88:6b:9a:91:1c:b9:40:12:66:
81:d2:0a:b3:ad:c3:c5:e1:62:11:d9:21:c8:18:09:
b5:bd:0a:3b:b1:f2:2e:ef:e4:56:1e:41:77:ed:50:
72:12:24:4d:46:9c:cc:3d:71:7f:e2:44:0f:46:aa:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:DF:AE:0D:9C:6C:69:BC:E3:1A:92:0C:AF:98:9E:72:DC:0D:16
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6e:f4:0b:96:b8:74:6b:87:19:96:91:6e:c3:37:a7:f2:fb:
12:f1:7a:30:6f:8c:b0:83:b1:aa:ba:fb:62:78:2a:2d:48:54:
4c:fe:21:59:f7:a2:9d:d9:3c:5e:62:d8:67:c4:05:9a:18:0c:
9d:18:4a:72:68:2a:b8:b0:00:65:ff:3e:63:29:43:da:a9:92:
cf:08:fa:3c:98:6b:f4:89:1d:9f:ec:90:96:e1:7d:cd:f6:70:
b6:9d:0d:f1:ab:02:fc:24:a4:70:ae:5f:b5:24:23:1a:fd:0e:
d2:39:db:16:09:83:3b:08:16:89:5a:b2:99:c5:88:33:f2:20:
4b:7e:4a:a5:f9:99:bc:6f:43:65:d9:41:2b:5d:fb:38:b1:a9:
ea:fe:0b:53:ad:bd:87:7b:70:9c:63:d7:c1:d6:49:a2:04:c3:
e6:df:60:bb:7b:54:d3:78:61:91:d3:60:47:44:93:6e:c3:f0:
74:0b:39:64:03:84:ce:43:2c:7c:9e:a6:5a:5a:ff:0a:da:a9:
be:5a:21:2e:a6:49:c7:ac:3f:66:be:3c:b8:e1:0f:8e:d0:16:
dc:0d:3b:29:96:69:d2:0f:22:a2:33:13:dc:50:cb:33:32:d4:
d0:a1:ce:0c:f6:31:d9:61:85:74:9f:5b:7e:29:1d:8d:04:0f:
a5:10:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:06 2026 by rpki-client