Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier: RmfsmT5is69BkJeJY/wWnqDKZZaLi6dL0GW5laFruWs=
Subject key identifier: CD:6E:26:48:77:BB:95:F7:4C:C6:59:2E:72:51:B9:37:99:4C:78:5B
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer: /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial: 019D284E28E9D768991677CDD12ACA16B710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: 3X4vsQok36dSCwKVF93HlQT2hR7oBhkqUZfLcyxcqkQ=)
2: MDzL3FdO7fvyyBkKk6vdxUTiCwo.roa (hash: PnGHgebP3UovxlfbIsUeajZPOhGSEQYNlKiEGzPopd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:28:e9:d7:68:99:16:77:cd:d1:2a:ca:16:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02f648de95b88479364346ed01e78769577922
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=cd6e264877bb95f74cc6592e7251b937994c785b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:32:a9:1a:08:e1:a9:36:7b:8a:95:f8:35:
f9:11:43:da:f3:0a:24:d8:1d:e0:60:69:04:bd:8d:
34:79:d6:3b:31:58:4c:38:e3:ab:b5:e0:41:28:f7:
e1:77:1b:02:be:0f:b6:2d:04:6e:90:96:6b:0d:43:
07:db:03:7a:74:28:39:04:5d:c2:75:d7:98:5f:d2:
83:7d:6a:0f:c1:ad:71:60:77:1b:48:3a:78:2c:2c:
e7:c5:3f:84:ca:a7:be:d0:55:3c:a9:a1:77:ea:cc:
25:66:a0:15:6c:c2:27:a1:86:ed:85:b5:fc:8b:18:
7e:7e:18:5d:22:ca:d3:a2:36:a5:72:c6:32:25:df:
69:20:b2:c4:a7:63:a4:47:49:a2:2b:45:90:2e:c4:
71:a5:d3:49:2f:68:8d:34:26:43:c4:df:ac:54:5b:
66:f8:80:05:39:77:87:8f:be:39:85:89:2d:ac:df:
21:f8:1b:06:39:eb:41:a7:b9:4c:db:19:79:09:89:
60:e0:95:35:24:0a:3c:8a:1d:09:62:21:6a:4a:87:
d2:f8:dd:87:92:e1:65:e8:4d:0b:83:36:5b:d7:ad:
c7:14:8e:12:75:d5:f2:a7:4f:2e:85:19:54:f9:3d:
fa:3f:ec:da:6b:4c:0d:ee:7d:5c:fb:1f:c8:a5:c0:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:26:48:77:BB:95:F7:4C:C6:59:2E:72:51:B9:37:99:4C:78:5B
X509v3 Authority Key Identifier:
keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6d:23:69:c2:c4:a9:fa:31:31:44:d3:10:ac:35:31:22:83:
75:d8:5b:61:c6:39:49:16:cd:c5:a6:8a:1b:16:ab:39:87:7c:
3d:57:6f:56:7c:84:7d:9b:4b:7d:08:37:10:80:77:fa:5e:0a:
67:1b:b6:6d:42:4e:c8:a1:fb:51:d4:53:06:24:6c:d8:e3:ba:
cf:b6:71:ea:d2:af:3b:42:c8:89:f7:e9:3c:0c:69:25:28:1a:
45:b8:74:11:11:ba:d3:f8:ba:da:6c:47:c9:00:3c:2b:52:ee:
21:23:d6:30:99:ff:e1:a7:e1:82:6b:7c:c2:f3:3d:58:52:13:
61:c8:69:41:6c:70:5e:23:a1:f7:d2:d2:3c:16:54:3f:13:67:
2b:6c:78:17:be:5a:5f:46:48:3e:94:a3:69:87:59:34:3f:92:
59:7a:0e:9c:90:7e:55:d1:66:2a:b8:28:a5:69:88:d0:11:79:
a4:65:3b:59:21:62:c4:f2:43:50:63:33:8e:a7:ca:f3:42:3f:
a4:17:ed:a8:b5:0a:f0:4b:a8:fd:ee:6f:67:74:85:c5:44:24:
34:8a:42:ad:f3:e4:82:8d:81:37:f9:40:34:45:2d:9a:c9:b9:
cf:dd:7b:ea:e3:e3:a0:76:e7:3e:f2:93:84:92:5c:cb:af:2d:
51:47:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:28 2026 by rpki-client