Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: W+EHGMGdDOafd5QyGb+6Ad+JkjIVRFsLkFXBxfLcLc4=
Subject key identifier: 3E:58:8A:18:D3:2D:83:8B:A9:4C:6B:41:82:C0:B5:81:11:5F:3D:1F
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019D2583A5EABCE9C4EEBB46CFFBA53C9BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:17 +0000
Manifest this update: Wed 25 Mar 2026 15:01:17 +0000
Manifest next update: Thu 26 Mar 2026 15:01:17 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: yd5vszgjeHO468JdQBFBWlNNwA1RXDf5HYogYnjW3jM=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a5:ea:bc:e9:c4:ee:bb:46:cf:fb:a5:3c:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Mar 25 15:01:17 2026 GMT
Not After : Mar 26 15:01:17 2026 GMT
Subject: CN=3e588a18d32d838ba94c6b4182c0b581115f3d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:62:c0:d8:ca:e1:97:a9:70:ef:2a:65:c7:
15:d1:bc:10:c1:30:07:93:41:57:70:53:f5:4b:4e:
37:32:62:f6:9e:f2:11:4f:b4:54:e2:c7:05:24:88:
4c:b8:a6:47:44:26:3c:cb:bf:84:5c:5e:b7:73:a0:
cf:65:e4:77:6a:fa:2e:fe:8e:19:67:d3:0e:f6:d3:
d1:cb:54:68:c8:33:15:78:03:5c:0d:4e:42:f5:a8:
d4:cc:00:d7:45:9b:42:30:ba:22:9c:e0:75:36:aa:
b6:09:51:fe:62:1f:69:f9:29:80:fa:b2:b1:62:86:
d1:03:25:e9:eb:ed:a1:51:92:a7:45:57:3e:ec:29:
63:ef:d4:a3:89:60:04:00:a8:bb:28:e5:fc:fb:c5:
4e:d2:fc:3b:3a:0a:e9:75:d2:7b:85:c5:03:4d:4f:
6a:c5:f8:6b:34:1d:01:aa:16:a0:35:ad:6a:8d:2a:
e8:98:c7:1d:63:e1:0b:1b:24:6f:ad:d7:c6:72:bb:
60:9b:c5:b2:91:48:8f:76:d7:5e:95:5a:b1:7c:58:
74:36:13:c8:c6:39:b1:86:d9:d2:ac:55:f2:bd:b4:
f1:75:86:3a:a2:58:82:72:e9:b4:8f:ca:6b:e6:25:
0b:c9:0b:40:31:d2:44:74:d8:4a:42:24:f3:71:24:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:8A:18:D3:2D:83:8B:A9:4C:6B:41:82:C0:B5:81:11:5F:3D:1F
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:72:98:0c:48:6a:f3:91:36:27:11:df:71:64:6c:bd:8e:
6b:4e:09:43:b9:6d:16:1c:9e:79:64:40:48:63:2c:68:86:d1:
11:28:e9:62:13:44:b9:00:7b:e5:c1:5f:d6:21:8b:72:3c:dc:
13:7c:69:0f:0f:02:0a:e9:a7:1a:b9:a0:12:ab:2b:53:e1:58:
93:b6:82:32:4a:46:87:9e:99:0f:a2:7f:fb:25:88:44:d9:53:
54:82:60:89:46:22:32:d5:a1:bc:ab:04:f5:f5:f9:fd:b6:55:
2b:b1:af:2c:29:3d:45:44:7d:a2:c9:f6:67:ea:ad:e6:e7:52:
f2:f9:fb:31:3b:05:0c:24:3e:82:da:12:07:f2:bf:ad:57:f4:
09:89:16:23:48:a1:0b:79:fe:76:0c:3f:73:9f:db:27:d6:d4:
17:d3:2c:64:d9:67:ec:ba:e8:31:e1:06:e1:ce:a3:2f:ea:41:
90:34:08:96:c7:14:a0:f4:b7:14:5a:cc:ac:f1:0c:42:0e:9d:
73:db:a3:e1:6f:2a:03:bf:f5:84:79:ad:3f:de:42:d9:94:c8:
17:c2:bf:57:3e:d5:cc:66:6b:a9:4a:5f:da:14:02:be:a0:ee:
72:f9:15:6d:15:a5:dc:6b:51:ba:ad:31:4f:0b:f5:45:68:ba:
88:df:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client