Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: 35Smc8MXchlXdIxDj6eLRcTgOmel1yQvkGjojujn0RI=
Subject key identifier: FE:34:AB:B7:E3:CB:3D:4E:1E:9B:D4:E6:A5:45:41:94:D6:0B:88:BB
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019D26CD007F8A379DDC2446A1ED705AEE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: lryvzg5YBNQjnfwdzAkgYc10IZysoP+w2W+mNfTiaEw=)
2: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (hash: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:00:7f:8a:37:9d:dc:24:46:a1:ed:70:5a:ee:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=fe34abb7e3cb3d4e1e9bd4e6a5454194d60b88bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:8a:f4:32:37:74:8d:38:24:44:c0:17:aa:
4a:92:5b:fc:ea:a5:0e:2d:92:9e:64:4c:fe:3b:5e:
37:84:29:e9:87:26:84:22:fc:c6:0a:76:61:2c:e2:
c9:ec:82:8d:68:d0:3e:21:a5:e7:b4:d0:01:8b:46:
bd:18:97:69:e2:d9:d0:e1:22:c2:99:16:3e:3d:1d:
d8:46:9d:bb:97:0d:b8:a3:9e:fc:23:da:88:a3:e3:
a0:bc:c9:00:39:ca:d0:41:f6:bb:2b:c2:30:d9:ce:
a0:37:03:57:12:dc:be:6a:98:ae:34:6e:24:12:9b:
14:3b:29:de:2d:3f:68:af:f8:f7:88:09:68:41:83:
c4:75:64:cf:2f:2d:83:ba:bc:dd:3e:8c:61:e9:1c:
57:18:78:34:c5:5c:2e:6c:0e:14:45:63:13:4f:4b:
9d:77:63:9a:ac:b0:2b:ab:1e:96:a6:b5:eb:2c:69:
db:86:0b:19:ea:5c:76:78:e3:57:d0:2e:5f:09:ec:
d3:45:bd:be:ff:95:c8:a7:2b:83:42:e6:79:aa:e9:
32:55:44:60:ea:2f:ae:d1:93:03:3d:a2:87:22:01:
73:c5:b6:2a:44:ef:0e:34:d5:79:d1:84:9d:9a:55:
dd:a8:8c:ad:ca:62:02:ff:ef:57:95:6e:7e:3f:92:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:AB:B7:E3:CB:3D:4E:1E:9B:D4:E6:A5:45:41:94:D6:0B:88:BB
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:24:87:b1:67:7f:73:e5:75:3d:20:74:82:8c:4e:35:36:
db:b4:2b:99:62:f6:07:80:3c:88:b0:0f:dd:e5:d2:8b:de:01:
dc:4f:17:4d:ab:ed:2b:db:91:85:00:f7:98:4a:24:43:59:27:
f4:e3:73:c5:3b:ed:28:8c:52:87:e6:39:36:89:aa:f6:ca:b8:
55:82:b5:99:60:39:a0:f7:7b:75:c1:23:2a:94:a8:fa:d4:b7:
2f:a1:00:cd:ff:c6:59:48:1c:7f:24:89:3c:aa:9f:23:b1:d4:
86:e5:3a:61:0a:01:01:0d:b4:7e:da:7f:94:d1:df:b4:80:6a:
4c:53:0d:37:d4:25:b6:55:07:bd:57:8f:8b:3c:49:cc:f0:af:
d0:58:a0:97:f7:e2:a4:5e:48:87:18:58:09:fa:0b:b5:ff:b6:
b3:ca:1c:a4:8c:b3:e6:40:f8:99:ca:e6:de:38:9f:2e:47:d6:
9f:c1:ec:15:c8:b8:57:08:84:26:0d:9a:fc:b3:eb:49:92:6c:
72:81:c3:cb:b2:e8:26:fa:14:40:df:46:55:4b:39:34:76:60:
1d:d4:22:0f:f7:37:60:a8:fa:3f:93:04:dd:17:2a:42:db:9d:
40:bf:2f:80:a4:1e:40:66:25:d7:c1:b0:73:45:01:47:5f:f9:
2b:72:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:06 2026 by rpki-client