Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: HEmAXpYCGJ3eYyLEYhvRt9itxqaSXvyyGkqJ7d0DqOU=
Subject key identifier: F7:4F:EE:28:C2:7B:B5:F2:C5:E2:B3:8B:F7:80:A5:4A:0F:93:B8:35
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019E1C46D6848037E4A8717CCB8F2DA43548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 13:01:04 +0000
Manifest this update: Tue 12 May 2026 13:01:04 +0000
Manifest next update: Wed 13 May 2026 13:01:04 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: zaaWZ0SJynUuhYk2fkwee4lt35pTXVpFRcPWWm0qhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d6:84:80:37:e4:a8:71:7c:cb:8f:2d:a4:35:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: May 12 13:01:04 2026 GMT
Not After : May 13 13:01:04 2026 GMT
Subject: CN=f74fee28c27bb5f2c5e2b38bf780a54a0f93b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:27:2a:b2:f8:73:f4:3f:8d:31:15:d3:fc:
da:f9:34:1e:49:58:d1:84:75:80:7b:2d:f9:10:27:
d4:7e:1b:39:36:df:9d:e2:3d:2a:a2:42:ce:d7:fe:
69:5c:8d:d3:36:a9:2f:54:41:27:bf:a7:36:ab:1b:
88:6b:0a:3d:7f:4c:d2:70:6c:e5:2e:7e:b3:26:c1:
86:12:16:4e:79:a0:e5:4f:d2:d0:19:cf:61:55:00:
4f:75:17:ec:5a:49:fe:35:87:ae:49:c4:88:b2:ea:
f2:d1:c8:78:a7:82:ed:01:36:e8:4f:8b:ce:62:08:
37:1e:85:33:5e:06:20:e6:c2:50:63:38:e4:1c:d5:
b1:25:c8:cc:1d:8b:5b:bf:b7:58:0e:9e:59:a2:0e:
1d:4b:ae:b3:00:04:1e:c2:7e:bf:fa:3a:25:3e:5c:
de:d7:e9:34:b3:d6:cf:3e:87:e7:40:cc:b6:66:16:
64:85:23:74:87:19:e3:16:1b:0e:3f:6e:89:fa:29:
71:37:04:2b:cb:a8:07:05:17:bf:34:6c:53:ff:de:
82:36:c2:7f:54:2e:b0:e1:4d:ce:3e:7b:ce:7a:55:
ca:04:f8:de:62:cc:d6:9a:89:a0:0b:94:53:9f:91:
68:97:f3:3e:e5:fa:4d:bd:d5:db:68:00:1d:94:60:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:EE:28:C2:7B:B5:F2:C5:E2:B3:8B:F7:80:A5:4A:0F:93:B8:35
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:73:e3:83:fd:ab:3a:46:7f:27:1a:cf:6c:4e:08:fd:c2:
db:ed:66:4c:00:56:25:47:73:14:58:8c:ae:10:fa:42:88:43:
96:ba:63:fc:bd:9f:59:0e:e0:98:a9:68:23:62:52:15:6d:03:
ff:29:72:1f:40:39:c6:06:57:cc:a2:05:b7:27:39:3f:d2:a1:
9f:f3:b9:3e:63:95:0d:27:fd:c6:fe:79:31:0a:8c:9b:b4:3a:
51:91:69:98:fc:e8:da:1b:ad:3e:2f:9f:84:81:37:3b:d2:40:
10:68:90:ea:ea:ac:03:b3:b8:c4:9d:1f:c1:f6:87:6f:38:aa:
99:68:89:ba:b8:36:ad:a9:0d:08:d1:91:2b:c9:02:29:33:66:
60:3f:fb:de:90:ab:bd:fe:0d:2c:93:1b:b0:86:4f:3f:e1:d9:
17:44:68:23:fe:fb:31:db:b4:15:07:26:d6:1f:18:18:5b:ba:
fb:e6:62:4b:49:f6:ab:1b:58:43:40:26:1f:8e:ae:42:ab:b6:
0a:bf:2d:cc:83:76:44:05:73:75:f5:d0:24:bb:f7:86:dc:53:
11:97:dc:49:6d:74:35:12:4f:4d:0e:71:5b:59:39:c1:33:4e:
5d:7e:57:d2:2c:76:4e:fb:04:5a:d1:92:ab:83:81:6f:88:2c:
d3:6f:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:12 2026 by rpki-client