Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: IbtJq04Wd1Hwadt5siAvZwHHgjZ0sfNinZHplFup44I=
Subject key identifier: 06:2B:FD:DB:3C:A3:43:0D:93:7F:B8:2A:E8:3C:7B:16:01:11:71:36
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 019D28846FFBA22E015EA3CEDB13DC89AE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: VXLDDqjLGCjoAXZMCLjJp4kxZhzHh7aCNn0Fk9ssW28=)
2: 4uZV0ecDQCsLSsVXEupDSaa2T3I.roa (hash: MAPL4inDc1NqzrZUNgjEgak9EE9tXeKLQhKgPP9NyZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6f:fb:a2:2e:01:5e:a3:ce:db:13:dc:89:ae:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=062bfddb3ca3430d937fb82ae83c7b1601117136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:79:77:42:2a:71:87:aa:7e:98:b8:61:13:
20:b7:ee:b1:cd:52:b6:23:80:29:62:56:e4:f5:35:
f3:9d:dd:ab:23:f6:7b:06:dc:6e:8b:b7:ff:9e:39:
c2:a6:bd:43:e8:73:f4:5a:b4:86:66:a7:99:da:b1:
d4:a8:9d:cb:ec:19:eb:5c:ca:ce:9c:15:84:ba:70:
0b:9c:bf:82:c6:d1:63:02:81:68:3c:d1:f6:16:04:
0c:5a:57:53:ba:44:28:77:e6:6f:5f:42:94:b5:d7:
fe:74:5a:29:fc:d3:10:49:9c:eb:4c:42:26:d8:39:
74:eb:28:94:02:05:ad:dc:eb:9a:93:37:29:1c:73:
eb:12:86:8e:b0:c6:a5:1c:e4:cb:88:38:9f:a3:1c:
d2:e7:04:31:16:00:a6:e4:64:41:63:4c:bd:e9:a6:
1c:e4:66:bc:ef:1a:03:68:1b:32:92:f2:6b:79:fc:
10:7e:f5:eb:0a:c6:e9:d1:3e:6e:53:05:e9:80:b3:
77:82:55:9c:56:a2:8f:a0:b7:24:05:da:80:9c:85:
70:46:56:c0:2e:47:80:cd:e5:f3:77:2c:e2:cf:0f:
ae:e8:cf:94:d7:72:22:cf:b4:cf:55:b5:c7:4d:08:
e4:e1:0a:2c:6c:79:6e:e2:c8:b5:41:9c:83:4a:86:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2B:FD:DB:3C:A3:43:0D:93:7F:B8:2A:E8:3C:7B:16:01:11:71:36
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:2f:45:5e:57:a1:91:8c:61:24:c0:3b:06:52:7e:34:28:
11:65:c4:5f:e2:e1:12:e5:1a:ed:e0:2e:10:9d:f1:ee:52:a1:
13:a1:c2:f6:cc:d4:94:00:f3:1c:83:21:00:df:42:54:44:71:
c3:2d:09:d8:ec:de:12:e0:da:0c:b6:65:35:f6:fd:c1:3a:e2:
a2:d4:91:2f:09:93:b7:d4:1c:18:f0:d3:c2:0a:64:a1:39:4d:
82:4b:67:a0:ae:ba:50:4a:40:f0:b3:25:a1:8e:74:79:a1:92:
ac:a1:2d:19:b0:fe:7a:74:b2:0b:3b:1b:8d:86:c0:18:e9:4d:
d6:44:d6:98:f7:e2:86:68:50:9f:a2:04:5b:1d:a3:8e:99:bc:
8e:f8:40:39:bb:9b:a6:55:d2:f9:64:11:09:1f:57:5c:d9:42:
40:8d:5b:20:67:19:71:23:a2:78:64:8b:27:25:66:5c:81:4e:
6d:29:0b:7f:43:09:55:3d:b9:eb:67:41:99:2e:21:a6:8f:ba:
15:2a:5b:36:70:82:46:5b:3b:da:1e:45:d4:a2:29:a6:82:44:
08:8a:3d:dd:bf:89:5d:01:2a:ce:e1:48:3c:03:bf:0d:28:f5:
8f:45:5e:f7:06:59:6d:47:50:56:ef:bf:fc:a4:c9:bd:8b:a5:
f1:44:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:26 2026 by rpki-client