Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: OeGeBSbUy6X90lxE8pnnAcdRnd3n7GtbUIksadqFBHs=
Subject key identifier: CB:E1:68:3E:7E:3D:5A:29:19:6D:70:06:F7:26:28:C1:DF:FB:D2:F0
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019D27DFDA297B162760EE5C0A6A854DE4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: CvhIMWjLx9lOA4MNi6ADh9EyKKQZtTiV8VQd9FCcmMk=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:da:29:7b:16:27:60:ee:5c:0a:6a:85:4d:e4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=cbe1683e7e3d5a29196d7006f72628c1dffbd2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:23:41:a4:fa:2b:31:b3:eb:c3:03:e1:7d:
ac:f8:3a:71:a4:20:5e:fb:9d:5e:15:22:01:a5:e1:
10:73:5d:58:f7:1b:36:46:52:21:c7:37:5a:0a:bf:
81:b5:76:64:7d:27:bb:01:0e:31:62:7b:bd:19:e8:
6e:8b:c4:df:8f:08:13:48:e4:e1:95:55:b3:24:3e:
d2:40:9d:21:dc:df:7b:17:a3:7b:f4:b8:c9:e3:06:
b1:f1:da:19:be:6b:3c:81:7a:6a:6d:1a:01:4e:47:
99:65:a3:cd:86:1d:10:4c:52:d7:50:61:3f:0a:02:
29:4c:b0:3a:47:31:ed:c1:59:08:ea:eb:1c:bb:34:
4f:01:82:dd:f6:ce:09:84:25:04:aa:07:8d:19:77:
02:e4:67:79:4a:87:9a:6b:1c:25:68:13:65:f4:55:
1c:03:67:3c:23:50:73:0d:bc:d1:89:a9:4d:fa:b3:
09:7f:e8:df:51:8b:9a:d2:89:5e:ef:e3:73:df:db:
3c:a2:43:67:97:34:d2:b5:8d:64:83:c2:79:4d:00:
3a:02:e1:26:74:c1:c8:50:21:2f:e3:46:a5:fc:66:
89:7d:13:d6:8c:48:0d:5a:ef:60:15:0d:b1:61:2a:
fc:c1:ad:64:b5:fb:3c:0c:2f:e1:f8:4c:1b:2e:02:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:68:3E:7E:3D:5A:29:19:6D:70:06:F7:26:28:C1:DF:FB:D2:F0
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:f5:87:b3:f9:74:a7:e9:3c:ef:ef:31:3f:13:83:fe:37:
28:12:b0:12:a6:6d:5c:9f:3c:ee:2b:44:ef:17:55:7a:4f:49:
ac:7c:52:52:ac:b8:78:84:3a:80:8a:2d:5a:91:e1:b7:b8:79:
a7:60:c1:53:9f:fd:fe:14:4b:af:90:74:3a:07:a9:df:da:40:
4c:00:a6:76:09:fa:0f:a8:9d:bc:b5:11:e9:39:09:84:a5:2d:
f6:6c:cc:c8:e2:bb:5a:5b:69:1a:3a:f8:d2:42:f0:7d:bb:f4:
e3:d3:3d:15:db:90:67:d3:2b:4b:10:48:c9:5d:71:2b:1a:5f:
81:b8:13:4e:80:9b:bb:b3:cb:b0:e2:2e:f8:8e:79:9b:f6:38:
e3:41:70:9b:fc:91:05:8d:71:d2:86:80:35:dd:4b:4c:e8:c5:
6b:bf:6f:1f:3f:a3:9d:c2:69:25:9b:f2:1a:2f:d1:f0:d0:04:
ac:d0:21:f8:3e:92:1d:2c:d4:84:d9:87:2e:19:0d:bd:78:45:
36:01:bd:9e:49:39:4c:bf:53:cc:73:63:2b:52:11:bf:db:b5:
b0:6d:fe:d5:1d:80:54:85:c2:b0:38:22:f8:62:ac:45:7d:41:
f4:c0:57:47:76:69:73:13:4e:23:9e:40:ad:ce:8f:18:8a:4b:
ee:99:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:01 2026 by rpki-client