
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: 1ndrr3JQaVj2mClI5i/guvVkqGPbnBMvzHW85JXOalU=
Subject key identifier: A6:31:E9:65:7B:45:47:27:E6:4E:31:88:C0:E9:3B:D4:1C:15:22:86
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 019D28BB2A865F907EABD8C9D131C835D61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 18A9
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: uHnZJp6QThmd3XLitVpvi6awsFDyCwYsC7iidkmYvCA=)
2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2a:86:5f:90:7e:ab:d8:c9:d1:31:c8:35:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=a631e9657b454727e64e3188c0e93bd41c152286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:12:c4:a7:2d:c0:a3:80:ed:9e:61:8d:a1:
89:ff:0e:28:7e:9e:ac:82:b8:31:7a:2b:b9:a4:a6:
cd:14:89:37:f4:91:8d:0a:8c:d0:bf:1d:d7:50:fb:
0f:fd:2a:1c:ef:e7:c8:5b:3e:eb:94:cf:1e:43:d0:
75:bd:87:2e:a9:3d:47:3f:1b:f0:38:42:31:9e:28:
8e:54:40:c9:8d:66:5a:c4:46:8a:ed:31:2f:15:82:
3c:db:1f:b6:48:ae:c1:c5:b4:00:06:cc:dc:23:c2:
d1:5a:c0:c5:f0:0a:b9:2c:b3:3b:ff:68:b5:56:65:
ab:e4:af:ff:e2:9a:64:84:c2:e7:ea:51:1f:e9:19:
2a:a0:cd:0c:5a:06:60:a6:a9:e3:d7:cf:c6:c1:68:
af:52:5c:58:7e:3d:90:bc:66:04:55:27:6f:72:93:
79:dd:05:d2:52:dc:14:48:d5:32:4a:ee:22:0b:e6:
cd:2d:26:a0:30:5b:1a:6a:fa:1c:9f:15:24:a1:e5:
e6:0f:48:db:cf:dc:18:65:81:56:8a:01:07:bf:4c:
2d:86:60:7a:40:3e:31:4c:34:e9:ff:e0:30:63:a1:
4c:26:80:34:69:ce:50:25:c6:c5:b0:68:36:c8:fe:
44:d5:d5:0c:de:88:36:cc:75:06:4c:a8:15:26:af:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:E9:65:7B:45:47:27:E6:4E:31:88:C0:E9:3B:D4:1C:15:22:86
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:fb:1a:38:a4:96:20:e2:70:55:fe:dc:e2:6f:13:b2:14:
d2:18:f1:4a:a8:96:d0:6e:18:e9:52:0e:d6:41:ff:fc:3b:bc:
e6:ac:e0:d7:6b:31:2b:d7:02:8b:eb:c8:37:88:89:1a:de:f8:
8b:c9:18:53:cb:b0:e7:47:3a:1c:c0:d1:32:a1:84:e8:fa:1f:
07:9c:ee:1c:ca:34:25:cc:95:63:b9:35:68:26:0a:ab:2b:71:
75:d7:b9:6b:87:50:49:e6:f3:17:21:0a:92:c5:63:ea:a6:b2:
f9:79:60:3e:53:64:63:fb:87:3f:ff:31:46:c7:4f:d9:1e:9c:
48:bd:14:5b:74:3d:f6:ea:a0:65:c9:6f:dc:a6:1d:a1:1a:2f:
ae:33:7e:88:6e:f8:df:61:1b:e4:e0:66:c3:44:f2:1d:98:b8:
ec:33:3e:94:e4:03:f7:ae:9d:ce:64:ad:26:ce:7b:bc:f1:74:
e9:dd:19:bf:a7:89:a9:6f:1c:0f:85:f9:c8:b1:63:60:a0:98:
e5:dd:f1:2d:b3:49:b4:7f:15:ad:f7:e6:4d:8e:38:df:94:dd:
55:1c:bd:69:75:b5:47:44:ac:27:1a:7e:71:00:38:aa:13:ca:
ac:11:bc:0b:71:36:8d:7f:2a:48:a3:17:05:2b:60:32:d7:db:
aa:2b:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:59 2026 by rpki-client