Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: M7NKFuQGr0Em6xH28R5DyXxfW9lBv57HkNxyM0d/LDg=
Subject key identifier: 64:AB:91:0A:0F:F9:2C:40:78:CC:8F:2A:2E:57:41:BD:46:7C:52:04
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 019D265F397CF8E6134B4808D4837C8FB27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 19:01:07 +0000
Manifest this update: Wed 25 Mar 2026 19:01:07 +0000
Manifest next update: Thu 26 Mar 2026 19:01:07 +0000
Files and hashes: 1: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: 8E9ZutybJnEId/EKb5zIjBy9wKPPEh94NBgkeDcFoO8=)
2: ih0pzXO8mqkzc3x2UoefcFyc-tM.roa (hash: Uy5EOXK7Ia8DPFixLWpbgwz0Q6FOdgA2l57Zdh/p9Kk=)
3: mATboytCwcfVcr9XMxZhnCNuehM.roa (hash: CSLxUhKEA5+LpJXjF03TzcnktKHmPFZOf51CwhIx1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:39:7c:f8:e6:13:4b:48:08:d4:83:7c:8f:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Mar 25 19:01:07 2026 GMT
Not After : Mar 26 19:01:07 2026 GMT
Subject: CN=64ab910a0ff92c4078cc8f2a2e5741bd467c5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:b8:cc:ff:07:3a:70:58:76:ec:e0:d2:36:
37:85:d7:4e:28:10:61:e4:a4:76:84:53:43:cb:b7:
5a:95:78:ca:dc:42:01:e7:8c:ff:a5:a0:55:0f:67:
4c:6f:6a:a3:8c:85:8b:4e:ba:32:e3:61:b9:07:04:
74:1c:9c:f3:80:76:da:2e:19:5c:77:88:9f:20:49:
9d:1b:4c:b2:e9:ab:2d:4d:71:90:4f:4d:d1:82:78:
0f:c5:be:eb:a9:59:1b:ba:8f:f7:95:5f:38:ca:9c:
69:5c:0f:a3:98:c4:6d:d8:3f:f1:fa:76:8a:fd:00:
a1:1a:8e:ee:14:1f:bb:7c:48:af:31:cf:7a:43:04:
2e:25:8b:9c:16:39:47:4e:fd:f2:71:3b:ef:9a:ed:
c5:57:2d:48:82:95:e4:e3:c9:39:9a:5f:6b:f3:a2:
c2:0a:fe:12:86:7e:63:c4:12:90:5e:fa:c4:ff:3a:
f9:b7:fd:f4:c6:14:00:ff:00:cc:49:d6:38:fa:76:
84:9e:c5:b8:f0:3a:c0:48:0a:38:2d:e8:28:23:34:
5b:42:02:34:55:89:66:40:b0:dc:03:73:98:4f:35:
45:d5:37:ba:9f:3b:3c:99:f1:67:56:06:76:37:6a:
31:1b:16:4a:47:09:8d:b4:72:2a:c6:b6:b4:a7:c3:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:91:0A:0F:F9:2C:40:78:CC:8F:2A:2E:57:41:BD:46:7C:52:04
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1e:46:bc:b7:8f:29:41:75:ae:fd:b9:4e:b3:2c:8b:3b:43:
8d:fc:b6:c3:b8:7f:62:38:5b:e1:6d:46:34:13:c3:9e:22:51:
27:e2:1b:36:bd:c8:ff:ee:09:98:a4:94:d5:af:3e:e9:99:8e:
21:4b:9c:d9:e9:49:69:fa:07:db:35:a5:88:df:e1:d8:5e:62:
31:f4:60:19:35:9a:39:e7:67:21:48:3f:5d:74:53:18:27:41:
27:c1:2e:0b:1f:d8:99:e1:d9:5a:76:f2:9d:b2:a9:28:a4:cb:
fa:5a:eb:63:7f:9d:5b:83:e5:b1:2b:0e:28:bd:7d:f3:39:ea:
1f:8b:44:42:c2:ae:e1:12:f4:29:32:d8:97:8c:9c:67:e9:b1:
14:7b:fb:01:d0:32:38:99:06:8a:13:cc:6f:35:c8:1d:9f:b9:
c6:c6:98:f7:3b:da:43:2a:5e:be:b5:08:48:1d:ba:75:cf:c4:
d5:55:89:53:f7:38:88:be:33:91:5d:95:60:e1:3a:67:58:b7:
36:2c:76:b4:45:7e:bd:4d:9c:d7:81:78:4f:51:4f:f3:2b:a4:
d2:a9:b4:2b:f2:1c:54:7a:e5:7d:16:13:90:f8:de:1c:b2:16:
38:c2:b8:de:db:26:55:9f:5a:13:d7:8a:ba:bb:81:b5:d6:00:
3a:b8:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:27 2026 by rpki-client