Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: 0uPYkDKEK9DSR4AmDQad6fBIuGjBE339UnBnJGAqlhk=
Subject key identifier: 93:06:D5:BC:77:84:1D:53:FB:22:D8:90:D5:28:4A:56:8F:D0:F4:3C
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019D27A92CA7F8942848C1F5D699138F4B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: rGd1bCe3z8mhfg/KYAEIq60AQA5OZHODEKbBUwBmFz0=)
2: Afljxr8ZnlyJfn0MjgcAP3_UzNg.roa (hash: kphgkoE3iStHTSUsNJCX6GQ8XFaW4TlqKZ0slrAU88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2c:a7:f8:94:28:48:c1:f5:d6:99:13:8f:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=9306d5bc77841d53fb22d890d5284a568fd0f43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:f8:32:4d:ea:80:e2:76:c5:4f:27:1f:07:
d7:91:15:5c:24:0c:46:b2:ce:2a:63:61:52:e2:6b:
5d:c1:44:d8:2d:68:48:2b:5d:b1:4d:5b:9d:0d:d8:
9e:b1:91:34:b9:3c:c7:7d:32:66:9f:63:df:82:5f:
df:23:33:54:bc:5c:5f:48:93:bc:6e:63:0c:7d:18:
df:36:d3:15:87:f3:4e:0a:61:98:e6:ff:4b:3a:d0:
f3:69:10:fc:81:12:c8:d1:15:b1:33:b3:75:a6:09:
aa:db:bd:9b:df:f7:34:05:1b:68:58:10:d7:36:cf:
d6:ba:aa:f9:78:ab:56:ac:14:3e:84:bd:56:c4:98:
7d:e5:b9:b5:6f:40:91:0a:b3:0f:ab:75:3c:d3:11:
dc:eb:90:01:83:61:7c:bb:ea:cb:b4:e0:80:61:7b:
84:88:2e:8f:c2:cd:83:b1:c6:2a:c0:a2:37:c6:1f:
2b:77:bc:cb:17:7c:c8:1e:ee:32:a7:05:d9:aa:f2:
36:6b:e4:6c:a2:18:97:a3:7c:9a:f1:cf:0a:00:d6:
da:bf:f0:47:59:a3:43:d5:09:ef:ed:46:c9:06:a9:
3e:89:c7:95:9d:8e:30:dc:bc:6a:6d:a3:9c:39:85:
8b:03:57:6e:9a:dc:0a:0e:19:1c:3d:85:1a:9b:69:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:D5:BC:77:84:1D:53:FB:22:D8:90:D5:28:4A:56:8F:D0:F4:3C
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:44:59:54:ba:3f:3c:8d:b8:30:e3:94:04:8d:15:62:d6:
df:02:27:89:a8:28:46:5f:1c:d7:27:52:6d:dd:63:2a:3a:da:
a9:28:e5:6e:3f:8a:20:4a:c6:b3:ab:1d:1a:85:1a:85:d3:e3:
89:26:f2:2c:1b:7f:7d:53:72:04:a3:81:a0:cf:f7:6c:04:f2:
a1:7d:6a:f4:85:19:a1:6c:13:60:23:e7:ed:ad:2e:b1:1f:d5:
54:20:22:23:25:9a:52:bd:80:51:b4:8b:a4:ce:e5:4f:d4:c4:
92:64:a3:d8:07:03:63:67:5e:3e:a9:51:7d:e3:31:b0:4b:52:
35:1b:91:af:30:a7:46:a8:d4:73:44:8d:fa:5e:08:d1:37:56:
c1:31:80:ee:67:17:c6:ad:8c:5f:82:61:e9:ce:bc:b4:e1:51:
89:49:33:3a:5a:d3:a1:fc:e6:d8:49:73:7d:8a:2f:60:fc:08:
21:05:42:78:da:1f:4a:7b:44:3e:93:47:41:e9:eb:66:72:d1:
af:c7:49:5a:f4:98:dc:3b:0c:20:83:b5:d6:54:e0:3b:8e:d9:
f5:f8:7a:fa:34:ca:36:bb:c9:46:cb:e0:17:88:c2:40:f2:73:
57:f8:e0:6a:81:d3:90:64:35:f5:aa:37:fa:66:7f:ae:0b:8b:
93:a3:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:54 2026 by rpki-client