Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
File: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft (raw, json)
Hash identifier: AbvNYYvZfoU/u1Qundxb2qWGuEhOjc0wl3qvmN79rlc=
Subject key identifier: 85:29:2E:7C:68:60:18:13:92:CB:B3:89:6E:9A:E3:F5:85:9D:C1:5D
Authority key identifier: FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
Certificate issuer: /CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Certificate serial: 019D254CCD3313013657861FA6C40257F40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
Manifest number: 9D
Signing time: Wed 25 Mar 2026 14:01:23 +0000
Manifest this update: Wed 25 Mar 2026 14:01:23 +0000
Manifest next update: Thu 26 Mar 2026 14:01:23 +0000
Files and hashes: 1: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl (hash: hKTRac+G5/5ISb0ky+FqmigCPLmZcPS+pTPfCyqfkK0=)
2: sjcD7P1b4OH3bAoChPJ2EGVO_80.roa (hash: 3ibINEJI2J0CI3oq9fJ1To5iRpHn9oYrPYwzYRGItP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:cd:33:13:01:36:57:86:1f:a6:c4:02:57:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Validity
Not Before: Mar 25 14:01:23 2026 GMT
Not After : Mar 26 14:01:23 2026 GMT
Subject: CN=85292e7c6860181392cbb3896e9ae3f5859dc15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:b5:2c:12:a0:f1:40:a1:59:69:9f:22:28:
ca:ed:c2:40:35:bb:fd:78:25:e2:df:e2:f3:ec:9d:
8b:71:3d:85:4f:22:a3:df:ef:eb:c8:4d:5b:7a:64:
db:f1:21:d1:ed:e9:b5:ae:47:30:a7:46:c2:0c:2d:
34:23:fd:95:80:30:e2:f2:dc:80:94:f8:19:27:14:
09:4b:23:47:d2:5e:3f:d9:7f:94:20:4b:f3:0b:9f:
a1:c1:5e:73:91:78:b8:e7:2e:39:a7:b6:3b:ea:67:
ff:e7:89:f8:7a:0a:9b:4b:e1:ea:ea:78:e0:14:fa:
19:03:4b:b4:a1:d4:64:42:96:01:45:f0:fd:c8:6f:
21:51:64:e3:43:d9:36:7c:95:61:1f:e8:24:90:8f:
4c:3e:fa:55:22:a1:19:1f:dc:7c:d7:5f:f7:31:06:
7a:dd:6c:8a:36:5d:d5:04:53:72:d5:d5:40:ef:ef:
8f:d5:49:ad:12:5b:e5:81:0c:a8:8c:c4:d4:95:24:
54:a8:c6:56:e5:0f:c0:f4:20:2e:84:41:2c:88:fd:
2d:d4:d1:8b:2c:d8:2d:5d:43:52:ab:a1:47:02:20:
ce:ba:fd:8a:c9:43:e3:1f:bb:e3:54:18:da:de:ee:
a0:e5:f7:f8:2d:63:d2:08:e4:93:f9:27:93:d7:c1:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:2E:7C:68:60:18:13:92:CB:B3:89:6E:9A:E3:F5:85:9D:C1:5D
X509v3 Authority Key Identifier:
keyid:FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:d2:9f:bd:fa:2f:36:1b:01:90:b7:3e:e4:84:ce:e4:c7:
2b:4a:da:b9:36:38:3d:27:ea:0b:46:c1:4a:6c:ec:48:d1:95:
b0:57:5c:23:0e:be:7d:48:3c:3c:f9:0d:5c:94:a3:98:3d:6e:
bb:d3:d3:12:84:74:f5:41:5a:1d:aa:11:33:c4:89:3d:78:81:
1b:25:4f:00:96:73:7f:50:0f:a1:c8:68:62:4b:34:b2:a6:af:
69:b9:0d:f0:e9:c7:1f:b5:ac:83:9c:dc:7b:aa:d9:16:c8:ae:
d6:cf:6d:b7:12:16:60:4c:0e:4a:94:3a:1a:e3:d5:06:c5:bc:
e6:34:1a:a9:3a:ab:4e:d2:46:f2:7d:3a:8f:74:6c:71:de:86:
3d:f2:d7:be:7e:a9:a7:47:59:7e:95:9b:85:d4:0f:6f:68:a9:
35:fc:c8:3f:74:9a:54:55:3f:e9:d6:d5:80:7e:3c:f0:1f:e8:
0e:ca:01:4a:7a:f9:e7:74:72:b0:ea:87:8f:28:f2:86:b4:bd:
67:1d:f9:a4:a8:a2:5e:56:df:37:36:c8:29:7e:fc:10:2c:65:
13:70:cd:a9:e9:1a:d6:03:3f:7f:0c:b6:cb:ae:be:06:31:b1:
70:46:ab:83:10:18:3c:9a:94:3d:f0:77:7c:6a:8b:a9:66:db:
01:a3:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:49 2026 by rpki-client