Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: SzF3gSM+dWgIK4VkX8HpN5+7rVvK2TOp2bY0i3Z+/kw=
Subject key identifier: 18:B1:D4:78:CB:58:1F:49:5E:CA:D5:DE:A6:B3:1E:27:FF:CF:00:02
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019D2703C071E1BFFB96022EB9A5CDCF03AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: iMgKzh+UxLWJu4qgqunZglbqecFS1uwkWAts1MQAVnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c0:71:e1:bf:fb:96:02:2e:b9:a5:cd:cf:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=18b1d478cb581f495ecad5dea6b31e27ffcf0002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:ce:80:8a:d7:28:5a:a8:1e:67:bd:79:a0:
58:4c:b7:72:cb:67:78:7a:26:01:81:c0:d3:f4:9b:
0a:88:33:9a:bc:29:10:b4:6a:0b:59:08:73:0b:c9:
60:ae:ce:97:a9:17:45:78:5a:53:44:94:d3:54:b2:
76:54:50:de:e5:f9:fe:b1:b6:47:04:74:2a:02:03:
f7:39:7f:75:0e:06:4d:a6:a1:29:dd:dd:6a:22:9b:
49:58:f1:6a:2a:0e:5b:44:6c:68:3f:b9:85:81:bd:
8d:45:dd:39:fe:27:8d:f0:fa:8c:f5:4b:1b:37:c1:
5e:3b:b2:1a:de:ae:81:f2:e1:04:6a:89:09:c7:5d:
e4:35:1b:72:0f:3c:95:0f:f1:db:aa:55:f8:64:dd:
62:d4:d4:29:21:31:77:2e:ac:8d:90:87:ac:83:42:
1d:9f:c2:5d:d2:1e:af:fd:95:f0:c3:14:34:a3:c9:
92:2c:ca:38:c0:30:18:c1:94:b9:11:e3:be:d4:54:
83:a2:eb:a1:cb:ee:3a:84:26:cc:9e:10:55:73:33:
ed:d8:ea:cb:d7:89:3a:fb:5b:80:94:6a:5a:f7:ba:
84:20:6f:3d:f1:78:79:62:76:ad:d9:84:a3:5f:ac:
a9:18:ad:6e:3b:cd:79:09:47:61:97:34:13:61:44:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:D4:78:CB:58:1F:49:5E:CA:D5:DE:A6:B3:1E:27:FF:CF:00:02
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:08:dd:d2:25:90:d4:62:02:b4:b9:fd:a7:66:3d:4e:46:
ae:36:45:8a:2a:ba:7f:e2:3f:1c:79:61:ce:d3:11:ce:54:4b:
0c:1d:0a:cc:0d:77:d1:31:de:28:c0:19:89:f7:1f:a1:37:1b:
26:d5:98:17:f0:e4:68:68:72:ca:7d:72:b6:a8:f2:09:9b:52:
29:0e:ef:c2:8c:21:9a:bb:36:dc:5e:6e:9e:dd:bc:ae:9f:6f:
aa:12:9a:f9:16:a2:e8:2a:93:2b:44:54:0c:57:98:3a:ce:b8:
41:e1:7f:f1:92:bd:dd:51:7e:19:18:1c:7d:ff:aa:5b:2e:22:
4b:86:79:5a:22:37:4a:cc:8b:af:96:0f:02:b7:a2:35:69:41:
fc:f6:29:45:76:dd:5f:dd:5a:7c:44:74:a2:ed:96:6a:22:09:
54:bf:be:72:66:21:70:ae:9d:fc:e6:7f:3c:70:16:c0:6f:85:
dc:85:39:ad:21:3b:b0:be:5c:c9:9b:d4:f2:97:c6:33:0b:14:
cb:11:3d:71:e3:ce:6b:fe:37:57:9a:90:0e:57:82:63:9b:3d:
a2:9d:9f:c1:f7:74:cb:c4:37:84:e7:43:d9:01:0b:72:e0:20:
f1:20:c3:9b:04:e4:73:5d:e6:b3:cd:e0:87:05:4c:6f:33:22:
62:62:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:47 2026 by rpki-client