Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: iFzK8aE7GPGuvwtL03HlrAgONm04HSpuu/kGdjddp40=
Subject key identifier: DF:C4:6A:8D:1B:54:7B:38:44:68:9F:8F:7D:2B:26:46:A7:E3:F5:03
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019D27A952C4CF0A38D66A323F7E95EEB568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:41 +0000
Manifest this update: Thu 26 Mar 2026 01:01:41 +0000
Manifest next update: Fri 27 Mar 2026 01:01:41 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: OU4uImu271GOa8RGiZijaVby/ILDynuoujrW6f27E20=)
2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:52:c4:cf:0a:38:d6:6a:32:3f:7e:95:ee:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Mar 26 01:01:41 2026 GMT
Not After : Mar 27 01:01:41 2026 GMT
Subject: CN=dfc46a8d1b547b3844689f8f7d2b2646a7e3f503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:2d:29:d6:ed:f9:65:81:ce:e5:3e:bc:2e:
ff:df:2c:5a:d1:95:0c:ad:2a:c0:6f:35:21:98:e5:
04:d1:a5:67:a5:30:a6:cd:39:49:3c:e6:70:8f:ad:
b3:bd:10:ef:93:a5:e8:59:26:a8:88:bc:70:8e:20:
7d:5f:fc:4e:65:e2:50:60:0d:2e:da:d5:b9:61:4b:
5e:bf:9e:fd:9b:b4:eb:74:52:76:e4:28:e5:82:88:
d5:95:f3:e7:7c:58:fd:49:16:ee:79:8f:43:4b:af:
aa:5f:26:71:e8:4c:0d:28:eb:8a:ff:7d:f9:53:b9:
6b:04:7e:ab:23:3a:04:57:33:05:0d:25:d9:d5:05:
e2:9e:1b:ac:95:1f:90:e2:82:88:76:0a:c8:4d:ff:
5b:45:2b:b3:9e:23:42:a2:2a:0c:31:fd:1d:44:dd:
6d:4a:65:86:31:39:b3:77:df:6a:37:52:78:ea:0c:
a1:97:0e:d1:bd:b4:f5:9e:18:b7:18:b5:a6:70:d5:
10:de:56:b1:8f:00:84:55:c2:3e:97:4f:5a:23:c1:
9b:1f:e5:19:f1:28:24:46:f9:2e:61:5a:e8:4d:ef:
2c:8e:75:78:18:d1:34:48:44:f2:3e:53:3f:59:db:
67:f9:e3:80:dd:6c:e7:c1:bb:50:17:4a:d3:2e:d8:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:6A:8D:1B:54:7B:38:44:68:9F:8F:7D:2B:26:46:A7:E3:F5:03
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:f6:97:d0:9c:33:44:a0:e3:a0:a4:a2:8f:2a:4e:4c:42:
af:bf:e5:9f:a9:a9:5a:3d:90:fb:75:a4:13:37:19:0c:10:ec:
e3:61:1b:63:1a:25:32:a7:ee:8b:9a:0e:36:db:ac:2d:03:dc:
8c:c5:ff:c7:42:d8:32:d7:5e:a7:ae:3b:9d:fe:2c:37:ec:8c:
78:8e:c2:51:1a:7a:1a:0e:56:f8:6b:28:cc:c5:64:5a:5f:11:
17:fd:4c:e5:9f:b3:ad:5f:3f:c2:00:e9:bf:b4:76:20:12:f1:
e7:ad:7f:12:68:ca:a6:12:30:4a:1b:90:78:cb:03:22:9e:be:
1a:7b:45:84:5a:6a:3f:c7:42:d9:77:d1:cf:34:ec:97:e9:a3:
bd:49:68:d3:82:7a:c3:c9:b1:3d:ff:34:f4:3c:d5:5d:c5:6d:
16:d6:16:65:2b:19:b2:39:b7:87:16:8f:b6:44:f2:6f:49:20:
1c:b5:40:15:c4:18:8e:06:cf:51:1b:7b:02:50:33:e8:93:09:
ea:31:67:33:99:fd:4b:78:cd:9a:8f:e4:1b:c7:16:b4:0c:6e:
1e:69:88:7a:2d:54:74:7f:e8:51:a5:cb:45:f1:83:6d:fc:da:
89:4b:4e:72:96:c3:4c:fa:98:da:d4:1d:ba:43:a8:ef:a4:34:
de:18:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:26 2026 by rpki-client