Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: BB3t9dAZkzwo8Ey95jmMg2VGY+T1bMXzMd5cyJWvbYs=
Subject key identifier: 7E:EF:A6:D0:0F:8F:22:3C:94:FB:C6:AB:4A:4B:24:3C:53:F9:D3:6D
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019D265F1CCE0ACF267F826749B6777FBE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: TW9cDLPQ6c8NTP2QdTOM6yPNuIP/u6iDbno1xkdW69k=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
5: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
6: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
7: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
8: toBgBy-wXt9ztACvTMgMCKihycU.roa (hash: yb1GpybJZ+YI1CnQBecKiIQImUYJAW98skB9t8+FlLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1c:ce:0a:cf:26:7f:82:67:49:b6:77:7f:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=7eefa6d00f8f223c94fbc6ab4a4b243c53f9d36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:05:ab:df:73:c7:87:ee:f2:36:3e:02:37:
f0:55:71:e4:05:00:41:c1:72:3c:ee:95:74:71:5c:
5d:4f:60:d2:79:a3:d0:c2:b8:f9:3a:4f:81:ae:f9:
b7:23:5c:15:cb:a6:e9:3f:7f:19:3f:5e:6d:26:c6:
8b:85:0a:1b:af:da:47:e9:57:68:b4:c3:27:2c:16:
4c:c1:9a:28:3b:ab:2d:e5:2a:55:fb:ae:15:07:9e:
a8:93:de:6f:a3:47:15:25:c5:f4:9e:4b:98:72:04:
f7:a9:11:d4:2f:a5:67:9a:43:e0:4a:3c:48:e0:23:
8a:e0:f4:dd:5d:49:c7:07:ea:22:85:48:31:72:e9:
e2:a2:37:e5:7c:ef:e5:bb:b5:37:c6:ad:e8:40:78:
fd:96:96:88:d7:b8:35:c5:7a:8a:10:80:b9:41:f0:
cf:64:14:48:7f:36:e1:d0:38:8b:64:c9:a6:77:b4:
79:cf:6f:86:44:4f:38:8b:70:a6:e2:c5:9d:b4:3c:
ad:9b:53:76:31:16:87:ca:b5:72:fe:12:13:fb:dd:
45:f9:4c:e5:b4:0d:47:17:5a:9e:7c:05:8c:5d:da:
c6:ad:4d:83:44:fd:2a:54:60:d8:8c:06:f9:9c:bf:
7f:d7:6a:4c:d5:45:6f:b3:5c:13:c4:11:6b:e1:b0:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:A6:D0:0F:8F:22:3C:94:FB:C6:AB:4A:4B:24:3C:53:F9:D3:6D
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:2b:70:a7:6e:cd:f0:42:da:8e:c7:4a:c0:a4:ae:d4:57:
ab:a0:06:fd:eb:e6:20:42:17:20:0b:bd:31:07:f6:b8:29:31:
33:8b:3d:b6:9b:04:3d:8c:53:3c:0b:6d:29:eb:0e:eb:e8:bf:
b8:b5:ed:18:f7:9a:1d:0d:18:e6:93:bc:37:22:8f:da:7f:07:
27:0b:8c:f1:dd:30:83:5a:9a:7d:73:ea:ed:c8:de:eb:bd:06:
f8:d7:9f:95:28:59:bd:b3:f4:58:ee:8c:70:41:d8:c6:3e:e2:
38:36:0a:ce:55:a1:a9:81:4a:67:70:76:6c:05:18:6b:db:e5:
e0:50:c5:87:df:86:36:a7:1d:5f:31:8e:04:8a:82:98:12:3f:
4b:cc:36:b0:15:ba:92:26:3a:a4:c2:04:d2:39:25:f3:c3:0a:
6a:26:06:16:a2:1b:9e:ab:17:c4:df:51:bb:18:1f:ca:c0:88:
28:65:bb:fe:f1:a8:fc:a6:f5:33:be:b9:e5:77:cd:89:7d:94:
3b:e8:55:b8:8a:69:57:1f:82:69:c7:a6:26:dd:46:6c:cb:a3:
50:b7:54:ab:10:67:77:ee:72:89:10:21:37:e3:ab:fc:32:be:
31:4f:f4:2b:1d:da:fa:b4:bf:92:9a:d1:70:0d:cc:77:96:dd:
ee:df:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:37 2026 by rpki-client