Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: TJ6HmkI24naMhR5aeyNZDfrBOovGxu0dlquasNzYbSU=
Subject key identifier: 0F:B0:23:DB:B8:E5:C7:91:8F:3A:6A:09:DD:B8:2A:A5:31:3E:63:BC
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019D2928F828E9AF6F22F426167CC4EE461E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1656
Signing time: Thu 26 Mar 2026 08:00:43 +0000
Manifest this update: Thu 26 Mar 2026 08:00:43 +0000
Manifest next update: Fri 27 Mar 2026 08:00:43 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: 3PRLbs7Rkt3CifgkrmzAvXW+nbDgqcCf/isIxqdccvk=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f8:28:e9:af:6f:22:f4:26:16:7c:c4:ee:46:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Mar 26 08:00:43 2026 GMT
Not After : Mar 27 08:00:43 2026 GMT
Subject: CN=0fb023dbb8e5c7918f3a6a09ddb82aa5313e63bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:17:77:27:a7:0a:84:ad:09:13:92:6f:af:
0c:b5:61:f9:bd:ec:14:2e:7c:16:c2:88:4b:17:60:
a6:a8:e2:68:1b:63:47:7e:da:db:13:bb:3e:1b:58:
99:f3:2e:9c:63:2e:aa:9e:b7:81:66:82:fb:7f:87:
7c:2c:03:1d:7b:23:25:e0:be:d3:1b:a4:f4:b7:43:
21:a2:aa:14:48:d0:2c:f4:3d:d7:a6:38:0b:fa:d1:
ac:37:05:b9:2e:59:2e:61:f0:2f:22:e4:93:68:d4:
a3:bc:14:00:ca:c5:ae:5e:b9:ec:db:40:31:e7:cd:
44:67:a6:08:24:18:e5:06:cb:d6:2b:f5:32:f8:b6:
a3:4c:f1:e7:48:df:46:72:fd:03:b6:8f:52:51:97:
84:49:d6:c9:af:ac:a5:c9:66:ab:c9:ea:f4:6e:8e:
20:5a:d6:3b:6b:7b:f9:40:87:59:d3:49:6b:47:79:
b3:4a:18:eb:48:8c:3a:b1:25:15:1a:e3:c4:a4:de:
0e:0c:42:57:01:21:c3:ff:d3:0c:e3:51:20:b1:fd:
50:e5:62:de:66:14:7a:d1:1c:41:f2:a2:a5:67:60:
7c:a0:19:3a:f5:77:a5:8d:67:1d:31:ff:90:0d:25:
7a:b5:b5:ed:43:3b:10:ed:b4:e4:c0:43:d6:c1:36:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B0:23:DB:B8:E5:C7:91:8F:3A:6A:09:DD:B8:2A:A5:31:3E:63:BC
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:d1:29:62:03:e8:0d:b5:ee:c4:41:5f:47:78:86:c7:4b:
77:19:3f:e4:06:14:99:41:f7:70:82:d1:2d:4e:ab:22:e3:e8:
57:e8:70:a7:1b:78:3d:20:1d:cd:eb:53:c8:64:52:5b:1e:e1:
07:fa:1a:dc:68:1f:2b:a3:f9:f2:86:15:b1:d6:67:45:72:60:
12:d0:00:4a:51:5c:bf:f6:07:ac:b9:80:3a:b8:4b:83:75:ea:
65:fd:36:da:5b:26:d6:86:ae:05:f4:c6:92:ed:ce:e3:f6:55:
31:77:98:93:f9:bb:2d:d8:e0:22:26:d1:b5:b1:22:d6:cf:09:
0b:ba:4e:46:2b:77:a7:a4:9f:25:d6:35:32:5d:6d:ac:b2:fd:
fa:99:26:1b:96:16:b1:a0:76:b1:5f:12:49:96:2b:20:83:e5:
b3:ab:14:31:37:83:8b:2b:33:82:cb:5c:f8:0d:a1:ed:20:19:
3c:dc:af:e6:0e:6b:6e:b4:17:d2:cf:0c:7c:75:2d:25:2c:a5:
c3:96:a8:a7:bd:18:7a:ef:21:65:5f:7c:06:88:8a:e1:95:44:
26:22:a7:95:f0:2d:6e:a1:fe:43:8c:90:93:8e:4b:d1:20:d1:
7c:1b:bb:41:08:15:a9:b6:24:fc:4f:1a:e6:2a:20:37:e1:ea:
db:49:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:07 2026 by rpki-client