Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: BdW0KxFMWS9U+b/Bppm3HHK9U3n2B54f2Zla4Iuhnws=
Subject key identifier: 24:49:F3:9D:C3:13:85:6A:86:90:F5:AD:1C:3D:6C:DD:46:12:16:AE
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019D28F20685314879D6A4A3C26AB10AAD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 1233
Signing time: Thu 26 Mar 2026 07:00:43 +0000
Manifest this update: Thu 26 Mar 2026 07:00:43 +0000
Manifest next update: Fri 27 Mar 2026 07:00:43 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: 57XJGaEis7eQRxAeEkj8YV1aDiOjdPgyKCmKcMzdz0A=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:06:85:31:48:79:d6:a4:a3:c2:6a:b1:0a:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Mar 26 07:00:43 2026 GMT
Not After : Mar 27 07:00:43 2026 GMT
Subject: CN=2449f39dc313856a8690f5ad1c3d6cdd461216ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:87:9a:6e:9f:90:0c:07:aa:e3:f1:78:a5:
06:36:fa:dc:92:b6:0d:f8:84:d8:63:10:9c:6d:fd:
39:bb:79:6b:b3:2f:f4:7e:60:10:e7:b6:e0:60:88:
22:17:07:69:30:1b:28:82:5d:b0:dc:01:97:c6:f7:
4e:b3:d0:64:83:a7:f6:2a:26:66:74:40:36:85:fd:
70:0d:8f:76:30:e1:39:b2:32:b1:cb:94:20:1b:c4:
7a:c8:9b:be:d5:78:be:75:93:a2:ee:28:a1:4b:48:
c2:56:a8:c8:44:01:fb:12:48:dc:a6:70:ca:b6:53:
3c:6e:07:55:f3:90:7b:6f:84:3a:ea:12:b9:be:9c:
1e:ba:8b:f3:a0:a3:8e:46:1b:91:7d:75:11:b4:6c:
2d:cd:1b:92:98:34:ff:fe:bb:9e:35:6c:50:c7:ea:
2a:53:22:87:b8:5d:b7:a9:e6:6e:88:8f:68:e4:59:
54:39:47:4b:45:68:d6:ad:62:fe:5b:c0:f7:e0:bf:
07:9c:97:c5:10:69:0b:f0:97:ca:b7:a1:76:b6:78:
1a:52:28:49:1c:64:52:46:23:a6:94:e4:9d:02:55:
2a:bd:a7:d9:99:e2:6e:e9:14:ac:29:28:05:a6:bd:
3f:77:69:2a:04:95:8d:cd:4b:64:23:a5:a5:df:49:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:F3:9D:C3:13:85:6A:86:90:F5:AD:1C:3D:6C:DD:46:12:16:AE
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:eb:43:40:eb:ca:9a:39:b5:ca:87:6c:b7:c3:4b:45:34:
5e:49:44:11:fd:69:b5:79:2f:b5:11:aa:e6:81:d3:c1:c3:23:
68:24:83:33:d3:13:85:c4:bd:7d:1e:f1:de:ae:90:c5:a5:82:
d0:54:60:ce:fd:c8:3d:75:c9:71:5e:57:70:9d:35:78:d1:e6:
7c:a5:09:8d:fa:97:95:d3:f3:26:5e:1b:ad:65:b8:2f:3b:33:
f4:26:be:6d:bc:72:d2:6c:58:8b:d6:7b:a5:9e:75:1b:66:36:
73:e9:66:ab:fd:b0:fc:74:85:59:13:c5:87:e4:80:a7:6c:f1:
ce:fb:2f:96:bd:db:9b:ba:0a:5b:86:86:39:53:46:b4:88:f0:
ad:ad:38:dd:ae:45:4d:03:86:8e:19:14:9e:f6:bc:8b:ed:84:
c2:ce:e1:4c:61:3f:be:11:96:19:59:78:a7:fe:7f:1f:00:8e:
4d:87:64:f2:83:a2:e6:67:9e:1c:68:e1:4a:45:56:b3:34:ab:
35:5d:f4:a6:b2:d9:f1:e1:07:03:28:34:56:64:79:0c:95:9c:
7d:25:ed:53:2b:bf:be:e9:a8:2a:a2:76:42:ab:9a:34:b9:94:
38:85:02:8a:ff:af:12:46:61:bf:e8:59:69:0b:66:80:96:58:
95:1a:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:18 2026 by rpki-client