Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: 7EgkWDFpiUS78lHyn25Z3F4GuRgs0PXtNN6aGwslj4U=
Subject key identifier: 87:FE:F7:14:2E:E4:CB:FE:1D:16:08:69:CD:ED:8D:22:41:32:3D:D4
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019D265F898A095DF5F76D7FA26C6B9075EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0627
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: b+g7EvnzxlGx/s5jzj8MvNbWt37+SmywUKAR/l0PKUE=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:8a:09:5d:f5:f7:6d:7f:a2:6c:6b:90:75:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=87fef7142ee4cbfe1d160869cded8d2241323dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:12:72:11:f0:5b:40:12:07:19:cd:52:ec:
9c:b1:e4:0a:51:27:91:ba:fe:c2:bc:37:bd:e0:97:
36:83:e5:f2:18:c9:09:ff:b8:ff:8d:c4:5b:62:bb:
ec:86:4f:19:76:f1:32:54:f9:ed:76:c3:d7:fc:a7:
14:e1:a6:92:23:e6:84:c4:46:7a:97:ae:d5:64:23:
c9:45:cb:fb:55:a3:2f:60:76:1b:c6:e9:31:d0:c5:
ae:a3:eb:55:c0:64:9c:f9:e9:51:b3:a4:b9:92:c0:
77:0c:a8:09:90:30:07:54:6c:2c:73:24:f7:1b:aa:
d9:eb:6d:b4:3a:bb:31:26:1b:45:95:ff:7f:48:81:
8c:53:d3:67:5d:87:dc:04:b2:de:4c:d9:a5:86:97:
a1:2a:35:a4:bb:43:a4:51:20:71:02:38:ca:01:25:
f6:81:fd:dd:e2:8f:ea:04:ab:be:91:fa:0c:81:72:
ae:d3:ee:c5:9f:e7:11:8f:f4:93:a2:0f:33:d9:d7:
51:ba:b4:29:a0:c0:c6:71:a2:8d:01:4f:00:40:8e:
d3:d4:26:b3:76:96:95:35:a2:97:f4:90:98:d0:f9:
aa:fc:20:5d:6b:0e:5f:f8:b7:33:57:0d:61:db:8d:
94:93:05:ed:40:c4:0a:e4:94:86:17:b8:a6:ee:34:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:F7:14:2E:E4:CB:FE:1D:16:08:69:CD:ED:8D:22:41:32:3D:D4
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a7:02:4a:61:f3:8b:da:2b:45:6c:80:35:af:ce:e9:90:0b:
59:72:01:5e:9c:2a:96:ca:e5:86:3d:aa:8f:c1:f7:97:d3:fc:
9c:ef:87:ca:63:da:5b:fb:f7:b8:14:01:13:83:ca:c1:b4:6d:
0f:15:00:12:25:2a:e5:50:89:35:e1:d2:52:02:5b:2b:79:29:
61:c7:63:97:3b:5b:31:11:7a:ad:e1:22:d3:69:11:3e:71:9a:
28:10:89:22:12:c1:be:65:12:b6:c1:95:43:30:c5:ff:40:8a:
3e:48:fc:69:f0:7c:5a:27:14:cf:31:20:8f:9c:61:fe:e3:1e:
27:c5:52:47:79:7e:60:37:f9:64:af:0b:05:62:a7:48:2c:1a:
4b:d0:49:be:db:3b:77:b3:99:90:94:a5:52:eb:11:eb:90:0d:
df:e9:f7:2b:58:da:20:e6:3a:55:e6:43:56:ae:75:a6:6e:48:
8a:9e:27:81:dc:e4:f4:c5:15:2c:41:13:fe:d2:3f:63:8f:3c:
33:82:f0:5d:f7:97:2e:16:21:45:c1:db:c2:69:3b:1a:d3:f5:
ae:a9:56:4b:53:ae:d9:da:6a:5b:66:c2:e6:00:43:97:59:a9:
69:4b:29:6d:c8:65:fa:fb:d2:49:66:61:0a:e4:e5:6a:dc:59:
8c:2e:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:11 2026 by rpki-client