Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: EI/qSdEwQlW60MsyKvRKCE0HwWB4ktU/DoJqS3UuT2g=
Subject key identifier: D3:C6:10:44:D5:39:BC:73:F5:98:48:AF:9A:51:9B:5E:B5:82:71:01
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019D254CD4FFFCD8E40AB39EC165301484C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 14:01:25 +0000
Manifest this update: Wed 25 Mar 2026 14:01:25 +0000
Manifest next update: Thu 26 Mar 2026 14:01:25 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: HoVdMDJU34JRzahnBw0VfWbbBKAf217st7tQ7/erjHo=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d4:ff:fc:d8:e4:0a:b3:9e:c1:65:30:14:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Mar 25 14:01:25 2026 GMT
Not After : Mar 26 14:01:25 2026 GMT
Subject: CN=d3c61044d539bc73f59848af9a519b5eb5827101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:a3:ea:5a:68:f1:63:33:71:51:55:9e:fe:
e4:c5:c1:de:a7:48:0a:e7:8e:df:77:71:03:89:9f:
71:e3:2f:e4:7f:b2:76:18:cd:a5:63:26:a9:9e:53:
ac:cd:39:84:80:84:8c:e9:2e:68:93:64:5d:0b:99:
c1:a4:5d:7f:c2:b7:93:4b:3d:59:8f:38:dc:23:22:
90:9e:3d:2a:96:59:42:f1:98:2f:e9:af:f4:a7:98:
cb:f0:e0:c4:fe:ff:5a:90:1d:09:e8:d2:ce:fd:ac:
b2:35:d3:f0:0c:13:7b:5e:d8:33:09:a1:47:9d:2c:
e8:de:54:2b:20:2d:28:df:e2:a5:c4:76:e8:38:2a:
46:af:8e:0a:0b:83:13:ab:32:f4:da:10:e7:4d:0a:
74:72:b5:b9:f5:79:99:47:37:7c:34:7d:a2:80:79:
5c:d1:ea:d7:47:07:ab:65:c0:da:08:e3:36:0b:b1:
7b:d1:f5:c6:5f:b5:d6:fc:aa:b1:89:f3:2a:c4:01:
bc:04:ad:98:e4:53:ad:84:16:4c:3a:14:2d:ea:ed:
c4:37:ab:61:50:50:ca:d4:26:31:e6:4d:17:0d:36:
a1:af:1f:5d:df:56:c9:58:31:1c:a7:49:70:df:61:
e0:49:7e:e8:48:90:20:85:0b:53:fa:a6:9c:db:07:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:10:44:D5:39:BC:73:F5:98:48:AF:9A:51:9B:5E:B5:82:71:01
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a9:fc:0f:65:91:15:b0:67:a8:d6:8e:7a:85:b9:25:87:0c:
77:41:39:b2:87:22:3c:f3:67:5b:05:d6:4c:49:a5:3b:cf:3b:
67:80:07:33:27:bb:59:b9:40:9e:1e:5a:80:e9:78:71:0a:0f:
aa:ad:e5:fa:b6:3e:e4:a1:ea:4b:5d:66:ec:3b:09:53:bb:c8:
e8:bb:1e:80:5a:42:49:a6:cd:eb:21:36:5d:15:da:bb:5c:bb:
fe:11:3a:80:e5:29:ec:59:93:c4:94:11:52:c8:ad:c2:e7:c3:
fc:06:28:43:22:04:35:97:68:6b:91:bc:fe:9b:d5:40:23:e2:
73:79:57:5c:2b:fd:b4:c3:e8:67:8f:31:8c:0f:b0:92:d8:57:
78:c1:8f:64:dd:fb:45:b8:a0:8b:50:1e:83:e4:e6:1f:50:3f:
16:25:1d:79:9d:c7:09:da:28:4c:3a:fa:16:1b:bc:72:44:3d:
b7:73:6d:dd:44:f5:98:4f:5d:b3:4b:a1:dd:b6:f5:1b:6d:6d:
45:c3:42:42:6e:11:fc:02:56:3c:26:22:59:ea:25:06:59:3f:
34:54:a5:9c:9b:8f:1d:f8:fa:ae:1a:59:b4:12:52:a6:02:37:
39:53:34:ac:41:a8:82:dc:da:a3:bb:3b:29:4a:b0:93:44:d3:
36:02:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:50 2026 by rpki-client