Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: dwu3JLrGXmZIjjpAN0Wn2UGozrUE+r0brTTAi7rPHbM=
Subject key identifier: F4:90:7B:8F:1B:21:45:92:52:11:77:C7:20:34:9F:F6:75:A8:70:C0
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019CAA58BF362C1D41DE2D031444DD5A488C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: 5AOkv7Oydf9OqZae2Twz+hhWYXeJaHVp2nC6KITEnbU=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bf:36:2c:1d:41:de:2d:03:14:44:dd:5a:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=f4907b8f1b214592521177c720349ff675a870c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:2e:83:1b:ed:c1:b5:0b:58:e6:c7:28:1c:
e1:a7:e6:e5:02:d3:c3:4a:e2:07:43:d9:a1:76:94:
0a:f7:55:e5:64:75:57:67:a1:09:e4:2e:ee:92:df:
12:7d:8c:7b:0f:e1:1d:ce:a8:f5:f1:79:b6:e9:7b:
0f:7f:e0:ad:2c:d7:39:2e:4c:bc:15:42:e8:4a:c1:
44:93:10:a3:53:a6:c2:35:3b:44:44:c5:41:03:07:
b3:0c:0f:84:42:17:ef:51:67:98:f9:ab:b0:2c:36:
19:e9:cf:64:4b:57:6e:36:7b:87:7a:f7:cb:aa:a1:
38:5c:20:38:84:4c:bb:3e:d4:63:97:88:9d:ab:35:
1a:40:e0:32:2f:22:f3:47:cf:1c:38:88:9c:ad:fb:
6a:0a:d3:fb:29:a1:05:75:89:9f:85:f2:6a:97:62:
f5:ed:69:cb:38:7f:38:d1:85:51:9c:27:7d:d3:28:
bd:c6:9a:4f:7c:a7:ef:b7:1c:a3:42:48:2d:17:71:
66:d2:23:eb:e6:94:cd:85:30:c0:d9:b8:c9:ee:d9:
38:66:5c:ee:91:dc:c3:f1:92:b7:11:4d:89:ec:a5:
3d:cc:01:36:57:2e:d1:c0:aa:6f:f2:be:f2:84:c1:
a4:14:da:82:c4:27:4a:cc:17:f4:1f:fd:47:d7:93:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:7B:8F:1B:21:45:92:52:11:77:C7:20:34:9F:F6:75:A8:70:C0
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:80:b2:48:d3:62:df:e8:4f:14:4c:05:c0:78:b4:24:28:
5f:36:c8:a7:75:c6:ca:72:d9:19:dc:3a:f4:35:44:fa:b1:2a:
80:60:f4:0f:bf:63:dc:9b:7f:a5:51:d2:d7:5a:48:ac:23:4b:
8e:f2:ee:05:2a:78:39:77:64:bc:d2:82:05:eb:3d:49:ea:52:
fc:48:f9:a6:c3:a4:ca:15:02:c7:1b:41:a3:d1:2b:cd:35:3f:
94:6f:f1:88:37:6d:55:58:eb:0e:93:88:53:76:56:c8:6e:36:
f2:14:bf:52:72:c2:c3:d4:21:aa:26:3b:92:6e:59:9a:7c:f9:
a4:0a:77:61:c8:ee:40:3e:fb:d9:85:f6:09:c5:8c:83:60:71:
43:45:48:5a:67:11:c3:cd:c5:87:7e:81:cb:96:c0:59:22:c5:
86:b2:f0:a5:6e:54:52:41:b9:aa:77:c8:4f:87:e6:68:c7:1b:
f0:e4:48:8f:c1:30:fa:63:ac:7f:0c:e2:ce:ba:85:6f:c1:78:
df:4c:63:97:61:3b:ad:73:3e:18:9f:e1:3d:b8:bb:d3:d2:f1:
e4:83:c6:ea:13:2e:4b:cf:8e:87:6a:f6:b4:c0:ff:9c:4a:67:
4f:05:7f:ff:f2:2b:84:03:c9:1c:1d:83:e1:02:39:dd:f0:62:
1b:a6:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:05 2026 by rpki-client