Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: tnG2T99RE6LrNoO8oVSHQsoYjI6gEP+JIZgC3U+4488=
Subject key identifier: EA:6B:FD:AE:BD:EB:CB:B6:EB:BA:1C:F7:FB:D0:C7:AC:E7:DA:2D:24
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 019D3451E9AE29CD3AC111361286348EA019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 12:01:16 +0000
Manifest this update: Sat 28 Mar 2026 12:01:16 +0000
Manifest next update: Sun 29 Mar 2026 12:01:16 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: GejMx1OjndNmV+E9skXN7rx0gumtJcQkrHBzxEsDN2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:e9:ae:29:cd:3a:c1:11:36:12:86:34:8e:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Mar 28 12:01:16 2026 GMT
Not After : Mar 29 12:01:16 2026 GMT
Subject: CN=ea6bfdaebdebcbb6ebba1cf7fbd0c7ace7da2d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:7a:90:2f:c7:98:e9:90:d0:c9:54:22:51:
05:48:9b:77:01:4d:a8:3c:73:c7:71:dc:e7:0a:68:
96:94:40:29:b5:18:e4:65:2e:e7:50:13:54:1b:68:
c7:4f:0e:35:98:43:d1:2f:bf:a9:c4:26:a9:b7:4d:
8c:ee:ef:f9:ce:ff:d7:63:ae:4d:24:3e:c9:5e:1a:
77:bc:16:f9:1c:2f:0f:bc:f2:45:04:11:cb:36:97:
d9:d6:5f:84:e3:a7:e1:7f:c0:19:79:cd:4a:42:c6:
ea:b2:93:5b:da:be:e3:ff:e7:d8:3d:51:24:af:dc:
f2:5c:a4:90:4b:fe:ab:68:6d:81:48:32:2d:56:a6:
f4:8d:7f:71:a2:8c:84:a9:ee:ec:0b:22:3b:95:5a:
29:8f:b8:a6:72:30:6a:c7:a1:f5:64:65:df:64:ef:
93:0d:4c:c8:33:f3:17:81:4e:30:de:08:ff:77:0e:
90:b7:80:14:eb:88:60:25:12:b3:b9:91:06:5b:77:
81:6c:bd:4d:ac:02:14:9a:8b:15:dd:00:cb:69:ff:
ca:c6:bc:43:e7:87:b2:5a:90:04:61:4f:79:97:e4:
35:53:db:4e:a4:1e:2c:0e:95:1b:54:f5:36:68:0c:
a2:3c:13:22:d6:f5:bb:a2:7f:0e:20:3e:ce:b6:15:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:FD:AE:BD:EB:CB:B6:EB:BA:1C:F7:FB:D0:C7:AC:E7:DA:2D:24
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:e9:6e:4a:4f:1c:2b:0d:7e:3f:ec:f3:e8:67:2d:5c:5b:
38:c4:67:07:6c:ee:84:65:23:1b:a8:83:90:c5:56:20:17:22:
67:be:6b:ff:10:40:50:59:1c:33:c3:f5:aa:bd:22:1e:a4:c7:
b6:a3:00:07:df:33:6d:d0:40:47:1d:0a:16:2b:d0:96:b3:6b:
15:29:c7:48:25:ea:95:4b:6f:06:24:28:1b:0d:d5:0e:67:c6:
14:09:94:9a:10:87:fd:39:9b:79:17:6c:45:c9:58:4c:90:1d:
0c:31:fd:76:f4:67:65:15:20:27:cd:4a:3c:6f:7a:f9:99:e0:
2f:04:71:3f:12:7e:68:c5:b7:6a:af:50:71:e3:4f:17:61:38:
26:c3:ba:1e:23:5e:fe:84:57:07:b3:f9:37:f8:e6:43:ec:52:
0d:73:d1:24:f3:f6:02:87:9d:d1:d4:96:22:34:35:6f:b0:9c:
47:63:88:4d:6e:fc:9a:e2:e0:ef:7a:c9:4a:ae:dd:ac:9b:40:
80:a9:78:48:b0:80:90:4f:71:c6:31:11:ba:8f:6e:72:89:d4:
d8:10:1f:1c:5f:96:7b:2b:b5:6f:ff:8c:e7:db:fc:6c:e5:90:
b1:89:85:be:c7:82:7c:d9:e8:a9:15:ae:c9:18:ff:47:11:f5:
cb:f4:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:36:28 2026 by rpki-client