Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier: N6QKzVF/mHV5jYzrYmhdzV2iYZJznZ8LzA5HuSjOlWk=
Subject key identifier: B2:00:BE:BC:AC:E1:CB:07:2F:FF:57:7E:1E:64:4B:89:FE:2B:34:B0
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial: 019CAA587CD2895C32653AF17FE0FB6809DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: x9db8XFbykVGHOvPw7JqNOT+1uzEz6PLULEJt1GamDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7c:d2:89:5c:32:65:3a:f1:7f:e0:fb:68:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=b200bebcace1cb072fff577e1e644b89fe2b34b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:bb:6e:f8:81:5a:af:96:56:68:a3:32:d8:
a5:7b:d9:8c:61:64:50:ac:a7:58:37:74:aa:73:6e:
d5:6c:c6:a5:3d:98:9c:82:c4:35:4f:f6:e4:c4:a7:
05:e5:d3:4a:c8:ab:9d:a6:20:86:c4:a0:33:78:cb:
b2:85:06:04:43:01:09:b5:1e:84:95:c0:1d:3b:c0:
4a:24:db:9b:34:0d:d8:9f:6d:6b:dd:a2:e9:aa:30:
ab:30:75:55:a1:2d:af:53:0f:fb:9f:6c:f7:da:13:
76:f9:05:4a:d4:3a:8e:c4:11:67:61:6e:53:fc:ec:
2c:f7:79:0b:d0:48:0f:78:61:10:9f:c0:5c:b1:76:
51:f4:72:cb:73:b0:79:5a:bc:eb:f3:3d:97:60:17:
31:47:cb:47:3a:c9:8b:f9:8b:79:d5:3e:4d:3f:27:
ee:8c:cd:83:ce:2e:2b:ea:60:6b:8b:79:5b:55:83:
bb:5e:1c:8c:f7:07:52:ca:8e:a9:b3:a8:46:60:bb:
a4:e6:fd:5e:98:a5:e6:4e:7a:9c:af:5f:ad:e9:8f:
8d:36:eb:04:cb:96:29:95:80:50:44:8a:89:a1:7b:
76:02:c6:4a:50:6a:69:d3:e1:b6:17:9b:a8:00:cc:
ea:04:b9:cc:33:1a:d0:01:e6:bc:9d:9f:b0:7f:dc:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:BE:BC:AC:E1:CB:07:2F:FF:57:7E:1E:64:4B:89:FE:2B:34:B0
X509v3 Authority Key Identifier:
keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:4d:a6:47:17:4b:f5:93:ac:ac:1f:30:24:9b:d1:71:f0:
d6:9a:da:64:76:4e:0c:26:a7:13:ed:e7:46:a0:b0:c2:fc:ad:
eb:0a:18:36:5b:43:31:26:f0:38:b6:6b:74:99:08:26:85:bd:
ca:52:44:2a:5a:82:c6:8b:89:80:10:d2:53:ef:8e:16:d8:c1:
40:44:31:ab:96:c1:83:35:d4:7b:90:3e:e6:55:86:cc:6a:70:
97:75:d7:a9:c9:31:61:9a:d5:d2:32:b9:ca:21:28:d0:5a:d3:
9a:73:f3:fd:4d:f5:ec:d3:1c:25:90:4d:e0:e7:e0:31:35:a9:
ce:98:ed:54:91:7a:d3:e1:da:3d:3f:6c:d8:16:b5:6d:b0:ed:
86:fa:7d:26:8e:7c:07:f3:3f:c7:eb:73:1d:0f:9c:42:b5:5a:
a7:95:0b:c8:6e:21:6e:a7:cb:2e:16:93:c8:b0:84:d8:ca:11:
92:54:0e:b9:bf:44:38:d0:39:b2:f4:8e:6e:cf:5f:6d:99:0a:
1c:e5:96:1b:16:9c:4b:17:2d:10:62:d3:43:4f:c6:b1:76:5e:
39:2d:ac:e4:63:fb:f2:8a:5d:0c:60:07:be:6b:68:2c:3b:f4:
1a:3b:e1:d9:fe:fc:b6:b5:18:76:2e:71:7a:6b:50:2b:04:5f:
23:a7:16:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:18 2026 by rpki-client