Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: cQunWapUA8Z2NiqeB25T52noOnhVl16MsOSVUQ0fZYU=
Subject key identifier: 52:E4:77:7E:73:18:4D:1B:1F:50:73:34:61:31:53:3C:52:A8:C2:99
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019D25BA6066194E470E9A6654C3C438AEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 8F
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: DieL7E+raHJmcTV2iCRjDnxin/TuYpUGUBukvrnTWwE=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:60:66:19:4e:47:0e:9a:66:54:c3:c4:38:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=52e4777e73184d1b1f5073346131533c52a8c299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:60:86:b2:83:6c:31:19:34:e0:b7:8e:5b:
07:d1:ef:e5:03:49:d8:fd:1e:b1:a9:27:eb:e9:7f:
20:38:31:0a:a0:0f:98:ff:dc:37:71:be:74:d3:25:
7a:45:1e:08:b3:73:17:a4:f3:42:a3:e5:db:3d:0c:
24:85:fa:25:45:33:eb:fb:98:0d:0e:0e:f0:36:fe:
1e:5b:f3:d1:51:75:c5:97:fd:09:92:4e:44:ba:65:
f7:e0:89:41:7c:fe:2e:2e:31:06:78:af:97:b4:92:
4f:97:9a:59:03:a2:ab:e4:ae:b2:8f:8c:8f:9a:e3:
1d:22:9e:f6:ba:fe:90:9b:e5:be:ac:58:01:50:6c:
3c:f2:c5:d2:9c:da:f2:10:9d:6e:4e:df:74:d0:56:
c3:68:31:16:82:50:c0:e0:7d:c4:4f:a6:84:d0:86:
be:65:5e:11:d6:f8:69:b8:4c:0c:46:fc:4f:1c:8a:
49:8f:51:0d:f0:ba:07:43:dd:d9:c3:7d:c1:5e:dd:
68:68:ea:30:7d:65:e8:ed:ac:5a:51:bc:d0:c2:40:
75:94:ba:5b:c7:07:ec:ea:32:c3:cc:75:ff:cf:eb:
ad:bb:d0:08:9a:21:2e:3e:91:d6:23:d2:6e:64:6c:
38:db:f3:a5:62:a3:38:89:de:8f:e4:82:1b:60:a5:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:77:7E:73:18:4D:1B:1F:50:73:34:61:31:53:3C:52:A8:C2:99
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:f8:34:31:83:82:1d:ac:f6:31:0f:36:e6:f9:8f:8f:33:
43:9c:b9:45:89:3a:e5:58:95:3c:1c:ed:ce:41:28:ab:17:bf:
82:5d:46:35:7d:4c:c1:0d:19:30:b5:f5:f7:6c:e6:0a:fc:08:
f1:49:ce:2b:74:d4:35:47:ea:d5:3c:93:54:1c:e8:6a:fb:7d:
87:65:57:a4:e6:e8:15:96:b4:13:e4:53:f4:7f:3e:28:b0:3c:
20:96:3f:8e:8c:19:ee:32:31:4f:5b:84:2f:f7:ff:4c:bd:3e:
30:76:5e:6b:99:09:1f:a3:69:9e:24:1a:66:4d:bd:93:9b:81:
db:9e:c3:58:09:16:30:28:9e:d8:75:e8:a8:05:d7:bf:9f:73:
07:e0:ad:2b:c6:cd:cb:4a:7f:f1:35:d7:c8:bf:83:f7:ce:fb:
d6:b8:18:b3:fd:0d:e7:53:00:54:c4:81:21:43:5f:d9:e6:22:
d4:8a:fa:29:4f:25:f3:a0:c9:d5:9f:9f:45:84:76:bc:e5:b5:
f7:a4:e5:68:b8:ad:8d:38:b7:fa:94:7a:6e:43:90:6b:92:2f:
12:fa:ab:f5:3e:6e:13:ff:3d:18:10:48:bf:0e:7c:24:7e:e9:
c6:35:16:31:c5:11:e1:54:18:c3:f2:1e:a5:9d:c9:bd:59:10:
ad:25:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:50:09 2026 by rpki-client