Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: B9QxsfhTghLcs6ksYWb6KnK2KQvvhrvsU81Wfw6yNno=
Subject key identifier: FB:C2:55:97:2A:B7:CB:56:5A:11:E6:B6:3C:86:DE:8E:75:10:6D:86
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019D2929A5EB32456E1CEE74D0B4A4DB44F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 0521
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: P+KNCILL20tjBKLe6GeZdJ1O0XAz+f9hhEqcT+ecYlQ=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a5:eb:32:45:6e:1c:ee:74:d0:b4:a4:db:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=fbc255972ab7cb565a11e6b63c86de8e75106d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:dc:1f:16:19:92:ac:2c:36:ee:1e:fb:ae:
70:4c:7f:64:2a:09:20:1c:ef:73:3a:8e:39:7f:6c:
28:e8:38:1e:35:7d:16:f5:fc:cf:24:b3:80:99:58:
85:ca:4e:84:fe:8d:03:6b:e4:41:04:d4:c3:df:f6:
83:a3:c8:34:9e:a5:b0:e2:30:41:f1:7b:64:58:c9:
7d:05:05:81:d4:13:ca:5f:ba:20:0b:cc:63:72:fb:
ce:b3:00:c9:67:4c:63:f5:6c:17:94:27:47:5b:4f:
d7:14:13:70:09:69:69:38:bf:2b:dd:d1:0a:73:64:
d8:4f:41:9e:1d:6f:0f:f1:2a:b0:3b:bd:e6:e4:77:
0d:90:c0:2c:63:0e:7a:0c:c1:de:17:d6:d8:70:89:
da:c7:b2:aa:d6:14:a4:42:ca:9e:79:25:c4:dd:87:
f1:eb:23:db:24:5e:4c:fa:5f:b6:b8:39:da:6e:c7:
f0:5a:b3:f0:da:e5:ad:2b:10:57:39:e9:4c:fd:c1:
c2:ec:87:73:cf:7d:61:58:b4:70:d0:cb:14:10:ef:
58:91:9d:0b:51:56:37:d0:96:53:00:a6:84:4c:b7:
ee:b2:9b:07:fe:54:c8:d9:bf:b5:91:0f:ce:23:b7:
01:a2:88:37:d4:75:b2:c8:00:2a:26:e1:13:03:c6:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:55:97:2A:B7:CB:56:5A:11:E6:B6:3C:86:DE:8E:75:10:6D:86
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0a:9c:46:54:a0:f2:7f:d1:c0:38:68:43:e3:2c:15:11:0e:
8b:92:d5:d9:c0:d2:77:c2:40:4a:d4:e6:4e:d2:f0:94:fd:eb:
68:b1:fd:f2:27:9e:0d:3e:0d:31:a8:53:a0:1a:e9:11:74:cd:
d2:a8:fe:9d:6d:ad:38:02:bf:73:c9:7d:b0:b4:d0:86:84:f3:
4a:ac:a6:37:5d:5d:9f:ff:b4:92:e5:ce:a2:b7:bb:23:72:f0:
89:54:dd:40:79:8d:4b:0a:3e:c0:10:db:b2:bd:23:b6:5b:b0:
6d:27:f5:a8:da:61:7a:e1:76:05:95:4a:2f:d0:43:0d:f8:e7:
71:89:71:f0:9e:70:ac:06:2b:60:98:a9:03:cf:fc:ea:9e:57:
9a:3f:b1:e3:20:d2:30:02:80:d9:ad:33:58:8e:07:16:e5:58:
19:14:d0:99:30:cc:e8:51:70:2e:4f:b0:0d:42:21:97:36:02:
b8:0b:9a:9a:25:3c:3f:f3:3e:bc:63:33:8f:b7:fe:1a:98:13:
ad:05:1f:71:01:73:9e:04:27:8a:d2:7d:63:40:91:ba:3a:59:
4d:cd:4e:7c:fb:ff:ae:41:d5:8f:8d:e0:3b:d1:89:68:08:73:
d5:25:2a:22:b9:fc:38:75:95:1a:e8:3e:36:74:fb:47:0d:a2:
50:0d:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:20 2026 by rpki-client