Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: OCsQO3UY/KLV4BZ6aRVO0znPOIexJslYqH6w+lkusvg=
Subject key identifier: 42:22:4F:94:C3:E2:11:54:A1:D3:2A:09:90:68:8C:E8:12:2F:12:0D
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 019D33079BE2E2FA60351BF0463FE0C121BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 080B
Signing time: Sat 28 Mar 2026 06:00:29 +0000
Manifest this update: Sat 28 Mar 2026 06:00:29 +0000
Manifest next update: Sun 29 Mar 2026 06:00:29 +0000
Files and hashes: 1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: 7aItlHeh6Kvg3Y4zRK0XMHEgt7cIkoKNFg6Tm7KO07U=)
2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:9b:e2:e2:fa:60:35:1b:f0:46:3f:e0:c1:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Mar 28 06:00:29 2026 GMT
Not After : Mar 29 06:00:29 2026 GMT
Subject: CN=42224f94c3e21154a1d32a0990688ce8122f120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:a1:40:8b:a5:a0:50:7a:ff:4e:7b:ed:dd:
3c:4a:59:89:f0:6f:7a:fd:4e:bb:68:de:4e:77:3c:
a0:87:01:2d:1c:90:6e:d0:6d:04:8a:ee:10:c4:97:
99:2e:ae:ef:ed:c6:a6:65:7d:4b:d3:ef:d3:c8:3c:
a9:7b:e3:b3:2c:00:11:19:c0:dd:da:72:d8:1c:4c:
b0:09:81:e6:62:55:0d:26:c5:94:be:ed:40:fd:50:
9f:49:94:71:a1:6d:eb:f8:e2:3f:0e:c5:91:1d:24:
ce:69:83:c5:da:44:34:20:2f:70:1b:85:ff:61:72:
7e:8d:41:7d:ca:09:34:32:d5:4b:9d:d4:11:a7:43:
5c:d4:4f:95:ae:7f:27:6a:dd:e1:9f:ee:2d:37:3e:
61:f5:a6:93:87:a3:26:a1:79:63:5f:9d:92:5f:d1:
5b:7d:ff:c1:2b:f6:26:41:83:5c:e3:40:1e:e0:f2:
53:77:30:64:db:77:11:20:4a:5d:a7:42:4a:0c:ae:
99:5c:11:db:4e:53:47:42:56:e1:d8:68:e2:fa:e7:
ae:79:82:5e:73:92:66:e5:44:55:4b:b4:90:20:a5:
4a:8c:98:84:90:1b:e0:35:b3:f4:6b:85:46:6b:75:
1b:0a:2b:29:f0:98:70:93:ab:17:0b:f4:7d:81:af:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:22:4F:94:C3:E2:11:54:A1:D3:2A:09:90:68:8C:E8:12:2F:12:0D
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:7b:b6:1b:a9:40:c3:1c:30:c4:f5:20:98:f8:3c:50:a9:
fe:21:f1:79:47:09:a9:44:f3:e1:18:f9:75:d8:b8:63:e0:b6:
72:a0:a1:4b:bd:dd:92:11:46:de:e7:6e:27:2d:cf:73:57:a3:
b8:7e:8e:5c:84:a0:30:36:bd:97:23:1d:37:40:4e:3b:a3:94:
f2:c0:f2:ff:26:3e:03:16:66:d1:b7:d5:9b:ff:3b:aa:bd:0c:
05:a7:ff:e3:03:d6:4a:6e:8e:c6:d5:75:e5:4c:35:88:72:78:
00:cb:d6:d2:c0:66:fd:b9:05:fe:49:d2:c9:37:10:b1:1e:cb:
6b:a0:3e:4a:23:18:61:de:15:bb:15:d1:60:07:04:a5:eb:1f:
b7:84:0b:d1:30:0b:8e:74:79:60:a9:ac:74:c4:79:ce:ea:e2:
93:2a:f3:ab:a8:86:ed:43:69:4e:50:6d:6b:b0:be:09:48:7c:
2e:42:a1:7f:30:8a:d6:c8:82:14:53:10:4e:49:7c:79:a1:f2:
ee:f1:31:0b:e5:e5:25:6a:f0:6e:e5:7c:15:f1:55:40:d0:2b:
c8:aa:45:82:c6:de:0d:62:69:25:4d:97:d0:91:41:98:42:97:
44:e3:25:16:a4:dc:f6:ba:40:00:e0:c1:d6:a6:ab:84:62:dd:
f1:e3:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:56 2026 by rpki-client