Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: 67rmgaCOFg58bAtqPx2eQsH0knqz6azEjbWt6G5Xn38=
Subject key identifier: 0B:3B:18:4E:0C:27:3F:C8:29:2A:A5:1B:8C:AC:17:92:5C:0D:5F:F6
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 019D26967086826983FBD3B5A7E452B2BCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 0A1A
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: St0HaR9s5a1COHcIM0Bw2IManfuVp9VI8m84m9Eh894=)
2: zlePSr6zYlrhgCFQW-qZhuoxEwk.roa (hash: ebo4B4GxIfR5oraws5Tn/cPpRYE1VsqUuELBHVvUXok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:70:86:82:69:83:fb:d3:b5:a7:e4:52:b2:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=0b3b184e0c273fc8292aa51b8cac17925c0d5ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:ef:39:34:9b:19:11:de:3e:ec:9f:cd:21:
cd:3a:0c:6e:b9:d5:7b:f9:9f:02:05:1a:e8:7d:df:
23:9e:a2:d7:15:35:18:88:92:b8:42:4b:0b:5d:23:
e9:6f:a8:88:a9:50:14:70:00:a3:ad:42:a8:c0:5b:
89:0b:96:38:ec:f8:bf:f5:56:a4:08:3e:a5:39:88:
b0:ee:d2:49:44:6c:44:57:eb:cc:8b:8e:25:5f:19:
9f:b8:54:b5:89:9d:d7:cb:b3:73:e3:e1:dc:8b:21:
8d:55:99:a3:58:c6:2a:af:b7:e7:f8:95:9d:f5:b1:
d0:e0:57:4e:ec:14:e5:bd:6e:cf:b9:54:29:99:89:
df:75:49:db:0b:0d:00:d7:05:74:f4:e4:83:1d:d6:
b7:0d:f7:ae:45:1d:eb:f3:27:b9:72:c7:7a:a3:46:
1c:5c:d9:77:6a:44:8d:2f:76:90:d0:a0:15:81:9d:
ae:11:85:0d:5f:c2:1e:68:6e:6d:61:15:31:30:99:
ef:1b:3f:07:64:1a:44:23:31:d6:aa:dd:df:3d:02:
bf:e5:63:7a:e7:40:83:77:17:04:cb:e9:07:1c:41:
7e:89:e8:ba:5c:4b:f3:61:ac:26:4b:a0:82:3f:c4:
1f:0f:4e:d5:a9:31:be:32:f8:aa:ed:27:d8:56:f5:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:18:4E:0C:27:3F:C8:29:2A:A5:1B:8C:AC:17:92:5C:0D:5F:F6
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:8f:68:94:0c:9a:7a:b1:7d:b7:3f:5f:00:78:aa:ff:58:
92:47:71:03:0c:a9:7b:bc:15:95:9f:b3:65:ca:e2:52:f1:48:
47:25:b4:1e:0b:cc:17:3f:7a:e2:cb:47:b6:75:7c:f5:3a:4a:
04:0a:f2:af:ea:6f:28:c5:55:fb:5c:8a:63:52:53:fc:a6:f3:
c7:16:f4:bc:68:98:f7:7e:53:f2:60:cb:e5:3b:0c:fd:e4:5c:
66:b7:66:24:03:34:e7:e1:73:d4:35:67:2a:3a:8f:85:5f:a8:
82:fc:4c:70:7c:25:d1:de:be:7c:a2:3a:e5:03:de:2c:54:4a:
30:6d:a5:32:c7:d4:9b:fc:7e:9a:03:47:03:39:2f:e3:3f:b7:
64:2e:5a:f0:d9:f4:92:75:a8:1e:18:c0:7e:d7:12:ca:98:75:
59:0f:b2:6f:77:f5:1b:88:71:d2:89:a0:d2:20:7f:ae:cf:b9:
bb:01:35:c5:5f:d4:16:68:c6:b3:a6:d6:9d:1e:62:6f:1f:e7:
6c:0c:50:a3:5e:7a:30:d0:dc:8b:2c:58:4b:0f:3c:b2:c6:a4:
2f:e1:59:3d:cd:2f:3c:1d:9f:27:00:45:35:42:0a:9c:e8:c8:
39:64:23:d0:d1:f2:5d:74:21:1c:83:f6:1c:af:e5:57:51:ec:
64:f2:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:34 2026 by rpki-client