Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: elxt+AtLpFT7qspnt4OZG22WZ1xZ2D9o+xYZsCuEi5Y=
Subject key identifier: FB:A0:78:05:F7:4D:73:4E:8A:6F:8B:34:C5:99:AA:BD:59:F7:D6:81
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019D284E671F7AE01429B95E87C0293D3F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:02:00 +0000
Manifest this update: Thu 26 Mar 2026 04:02:00 +0000
Manifest next update: Fri 27 Mar 2026 04:02:00 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: HHN2gPIhhXPL5rJmN+si4wQj9c4iZg/PD1GTGwBJJes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:67:1f:7a:e0:14:29:b9:5e:87:c0:29:3d:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Mar 26 04:02:00 2026 GMT
Not After : Mar 27 04:02:00 2026 GMT
Subject: CN=fba07805f74d734e8a6f8b34c599aabd59f7d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:aa:72:04:5c:58:56:2d:c1:bd:b7:f5:6f:
e4:23:88:07:a5:3c:b1:fa:c8:9c:bf:ca:93:33:eb:
cc:b9:79:4f:ec:a1:3c:89:fe:b6:c0:8c:4d:56:cc:
3c:5a:1a:e5:ed:c3:6b:17:96:d4:74:3e:eb:00:86:
18:b8:ab:89:de:7e:6e:1e:59:8d:59:0b:33:d8:5d:
3c:8a:9e:19:9a:5f:1b:0f:af:4d:04:2e:35:13:e3:
da:d2:79:b4:3c:df:f0:d8:67:ca:20:54:3f:db:03:
31:ba:4f:4e:ea:a0:72:a1:3b:95:76:27:dc:ac:6a:
01:34:91:df:74:61:4c:01:26:0b:59:c0:78:4c:6b:
90:63:cc:fe:b9:60:d9:b1:bf:59:d5:30:9d:53:3c:
ba:d7:be:51:ab:c4:49:d4:35:80:bc:e0:22:30:ce:
c1:f6:d4:93:fa:2d:0a:30:e0:1c:0f:51:c2:9d:a3:
86:a6:da:0e:86:fe:7b:e0:62:a6:16:b5:60:4b:d0:
0b:9f:1c:61:b4:1f:12:d7:74:00:bb:6f:ae:65:27:
b0:21:18:82:cf:48:bd:2e:5f:11:5d:e6:88:fe:d9:
8b:7a:57:e6:8e:f6:f1:3e:dc:49:e7:55:ad:7b:d3:
9d:5a:97:90:d1:cc:71:32:90:16:8e:99:4f:2e:7f:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:78:05:F7:4D:73:4E:8A:6F:8B:34:C5:99:AA:BD:59:F7:D6:81
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a2:c4:d1:40:38:df:b5:69:da:87:ad:f8:1a:13:09:3d:29:
a8:6e:e8:a5:38:e9:46:01:ca:a8:23:7e:df:4d:c3:12:1e:c8:
26:ec:81:28:7b:8f:4b:62:2e:a5:70:16:60:d9:f3:41:84:94:
02:08:b7:fb:18:ab:cd:0c:12:d5:9b:c9:33:3e:5f:16:71:36:
64:4c:99:a1:92:a9:e3:76:f3:e2:e9:e0:6d:6f:01:36:e0:91:
ce:da:fa:43:1a:0f:e7:16:ed:d9:39:4d:8a:c6:a8:54:a5:88:
e2:55:6a:1e:27:c4:b4:70:14:c4:d3:53:aa:15:43:ac:96:c5:
87:3b:db:9b:1b:a3:0b:ec:3a:67:39:42:aa:5c:62:39:0f:62:
95:67:af:43:16:9a:2e:5c:8f:ec:97:82:34:06:6e:c1:ef:92:
7e:8e:69:bb:e6:eb:45:70:73:3a:cf:8b:a1:57:73:7b:5b:54:
11:3d:bb:fe:97:aa:43:4b:c8:c8:c7:02:28:24:3d:39:0a:cf:
91:a6:fa:b0:1e:96:de:0a:88:1b:a3:0d:ed:91:e6:a7:23:66:
60:41:b0:38:7b:21:ae:89:1f:27:84:f5:2b:31:6c:29:9c:83:
ab:72:f2:65:ce:e5:9b:53:ea:5b:7b:30:b3:d4:38:7f:b7:5c:
15:ec:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:25 2026 by rpki-client