Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: cY05uBPI6648y7qawiArbOxcsqVh+kqwhvV1nzl/8RY=
Subject key identifier: 48:B5:8A:9B:2A:74:4C:72:14:14:92:8C:2A:9A:5E:02:FA:A4:EB:B5
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019D28F288539EC580F47784406C68584AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0CE0
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: UGBKraPe5MGF4WSRWvVzKuvNIV4Hgee33EgSM4q8y+o=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:88:53:9e:c5:80:f4:77:84:40:6c:68:58:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=48b58a9b2a744c721414928c2a9a5e02faa4ebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:e8:05:6a:99:8d:3e:36:5e:65:6f:5b:06:
f2:c8:2e:b3:79:08:81:53:a9:2c:f2:a1:0f:08:b2:
57:61:80:83:04:97:05:86:9e:27:84:78:bf:3c:a8:
c2:b2:3d:25:20:c0:c7:77:ac:c0:63:a9:68:43:43:
af:89:6d:5f:26:ce:0c:d5:89:8a:b3:4d:17:ee:dc:
c7:37:e1:85:83:01:b1:6c:b6:fb:e5:0e:9d:da:0c:
90:12:ea:fe:99:4d:5b:a0:e7:7f:46:7b:07:44:65:
59:4f:7a:a2:0b:f0:f6:ac:8b:8b:31:34:31:50:e5:
f4:2c:76:ca:19:bc:19:04:fa:d7:fa:29:9c:4e:d6:
36:e0:5f:a8:f3:97:ab:a2:14:4f:cb:76:cb:30:01:
04:d2:08:2e:f2:bf:64:6d:23:24:a4:83:e3:20:17:
5d:f9:cb:27:37:69:4b:38:4c:12:dd:31:02:9a:1b:
7a:ff:7b:6c:47:45:82:b4:1d:28:19:90:04:e6:2c:
1e:92:b5:80:d6:fd:bc:88:dd:9f:9f:b9:26:58:c7:
ed:a9:ed:53:98:8e:e5:40:28:71:dc:b8:08:e4:17:
be:fc:aa:ca:82:81:d8:7c:bd:48:53:2a:b4:90:74:
82:34:d6:07:1e:f0:e9:56:f9:d5:03:f1:80:5e:b4:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:8A:9B:2A:74:4C:72:14:14:92:8C:2A:9A:5E:02:FA:A4:EB:B5
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:15:95:d2:9f:43:a7:bc:f5:8c:e6:fa:03:7a:66:de:ec:82:
2d:61:a7:05:20:c0:6f:93:4a:3c:f7:be:36:b7:8f:05:0c:e1:
73:3b:15:8a:ef:2e:5e:58:ff:b4:34:c1:22:29:3b:3e:70:ea:
c9:fd:68:74:94:f1:ad:5d:a5:18:0b:18:66:49:4d:38:6c:2c:
f8:2c:88:9c:7c:b4:f4:cf:f0:ef:bc:95:81:19:6e:aa:66:64:
00:7e:65:d9:a5:28:88:74:ec:13:96:46:46:44:3d:76:14:25:
43:4e:a2:cf:b9:82:1c:ee:0b:d7:92:a7:94:1c:de:ba:ba:02:
93:5d:6d:4a:a7:3b:13:59:0a:24:9e:23:a0:af:fd:4e:c1:81:
cd:f0:7a:ab:c0:f3:42:82:92:ff:fa:6d:f1:ed:2d:63:f3:62:
b8:16:b3:9f:6e:23:7d:b9:77:a1:74:a4:66:dc:c2:26:5b:a5:
c4:ce:33:a4:57:04:2c:00:77:9c:0f:87:a0:cf:9e:59:b8:5e:
c8:d6:31:4e:16:6f:39:06:e8:24:f1:1a:40:d4:ee:3b:a2:22:
5c:b5:42:c6:89:d4:b0:07:87:f4:73:6b:e4:12:28:61:e4:92:
c8:9d:d2:7b:55:01:ed:26:2e:40:3a:6f:3b:17:1f:a0:b6:26:
45:ce:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:43 2026 by rpki-client