Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: 9dKpxzn13RAqyNsaK/Si+KDGiQ8973C4eumGQH7lglw=
Subject key identifier: CB:1F:1D:B6:C2:3C:2B:FB:43:E7:53:47:16:26:F9:84:D5:3C:F0:FD
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019D25F17AE461AFDCC35B14F8AC05B228A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 0269
Signing time: Wed 25 Mar 2026 17:01:15 +0000
Manifest this update: Wed 25 Mar 2026 17:01:15 +0000
Manifest next update: Thu 26 Mar 2026 17:01:15 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: DvCD2xSfv7yvH0kvR3oxwP1LwB5/3sfkeTKWsCJBbYg=)
2: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
3: rxT-eoR75onud9U3--RgqGGLVNo.asa (hash: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7a:e4:61:af:dc:c3:5b:14:f8:ac:05:b2:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Mar 25 17:01:15 2026 GMT
Not After : Mar 26 17:01:15 2026 GMT
Subject: CN=cb1f1db6c23c2bfb43e753471626f984d53cf0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:0a:8c:b0:5e:fb:ee:58:38:ce:70:70:32:
4b:c4:60:7f:cf:c1:59:51:ea:5b:f0:9e:49:f6:0d:
64:d9:6b:3f:24:d3:19:46:0a:e9:de:a6:db:d0:b8:
2a:09:56:54:e2:1b:e6:9d:f4:43:c6:83:f0:bd:c4:
6e:69:4f:78:d6:de:b3:c9:c0:ce:ed:8a:39:a3:c4:
93:67:b4:12:d8:f0:0c:94:0c:61:34:12:9d:5e:a4:
95:b6:ab:da:a1:b5:de:4b:e1:8f:b5:12:41:d7:ce:
e3:aa:28:15:03:d6:1c:6c:16:8e:67:b3:d4:23:5f:
5e:16:70:c6:eb:9e:07:a8:ce:44:b3:55:a4:ab:e0:
43:70:ad:ca:f5:a1:ab:ab:f0:d8:f5:fa:7f:b5:12:
81:a6:c3:3f:d0:66:4b:ca:5a:97:63:45:50:f9:4f:
7c:48:75:93:d5:b0:20:2f:fa:77:77:21:2d:e3:9e:
d6:79:5e:86:4b:43:54:af:59:08:3b:93:51:91:cb:
df:1a:c4:3f:5e:2a:92:b9:e1:7e:0c:76:4e:7c:da:
67:2e:b1:06:c8:ca:f4:ee:c3:b0:cd:50:ea:2a:02:
e1:c0:b7:4a:1e:7e:33:6c:f2:c4:3c:8b:60:e5:d3:
59:92:4b:bd:08:aa:1e:c1:77:2e:c2:a1:7c:5e:70:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1F:1D:B6:C2:3C:2B:FB:43:E7:53:47:16:26:F9:84:D5:3C:F0:FD
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:87:8f:fb:b1:8a:8b:37:3d:73:5a:52:4b:cf:28:aa:d0:62:
bc:95:9e:56:c5:49:1f:c6:e9:85:d4:30:3f:b6:7f:da:73:f7:
a9:e2:04:cd:70:ed:18:f8:ac:2c:b3:ee:3a:73:2e:f2:97:73:
64:cd:0a:a8:55:b6:1b:51:da:09:98:2d:67:13:b4:02:da:a3:
c1:35:d1:39:48:0d:f8:dd:fe:5b:58:58:34:3b:8c:21:22:ea:
1e:a4:73:ff:0e:1d:0c:17:12:d1:f9:7a:23:54:e0:14:47:27:
f1:0e:3b:98:f9:c0:64:48:30:e7:f4:4a:5e:ed:04:38:af:a3:
64:e5:82:77:a7:50:b6:33:1f:0b:ae:87:8f:b5:20:64:43:71:
7c:c2:38:4c:3c:91:ad:d8:f2:de:a3:ed:e7:90:bf:f6:b3:d5:
7e:0f:80:8f:4a:cb:d2:08:6c:06:ef:27:0c:da:dd:c3:fb:2b:
c6:8d:60:8a:39:19:e9:31:4d:3e:ad:4c:e8:96:ae:27:1b:27:
45:91:cc:51:cb:de:09:1d:ee:7a:7f:46:a3:97:fa:70:fc:25:
de:7e:5a:51:6b:2c:66:7e:9e:25:77:79:e9:24:59:2f:bc:f1:
45:72:be:d1:ac:98:32:6f:fa:40:25:45:c2:db:68:12:8f:45:
8e:64:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:07 2026 by rpki-client