Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: qUnwYhofsu1/9DHP/r1nEs/I+pPCz4ngJxBSYBKCqt4=
Subject key identifier: 8E:93:54:24:3D:67:62:3D:BF:B9:38:27:1A:99:49:5E:6C:CC:94:87
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019CAB6B17494E31A944C83B6656E440D468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0507
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: hEW9TJNbcECZSC1Zp8ZptpxzAG+/JsT3tk5SbEpID0k=)
2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:17:49:4e:31:a9:44:c8:3b:66:56:e4:40:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=8e9354243d67623dbfb938271a99495e6ccc9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:a5:db:e3:bb:32:34:b6:43:27:91:1a:b8:
ff:2d:ea:8d:1f:8d:31:83:a4:f2:6a:ca:8c:1f:31:
a1:5f:ee:4b:27:21:91:fe:fa:89:c1:24:1e:8f:72:
50:08:0a:e6:8d:0d:da:be:81:65:29:0a:86:38:d5:
35:01:58:4d:dc:b0:a4:44:28:da:e7:0e:fe:3a:83:
67:ab:26:7c:3a:dc:71:17:1e:29:3a:b6:bd:68:c0:
06:ce:b1:7a:72:6a:ef:0f:67:b8:67:d2:15:53:8c:
ef:b8:0b:fb:a0:95:bf:af:5d:b0:6f:9d:1e:0f:57:
0b:e5:0c:c2:9c:fd:44:0f:32:70:5e:66:36:76:63:
68:f2:82:a6:ad:ff:53:31:65:e4:f0:4d:b1:ac:10:
b6:81:69:18:35:57:d9:c3:46:e8:c1:5e:7a:57:ba:
a6:7e:b7:bf:eb:6f:72:7c:0d:27:58:2f:a8:38:20:
e0:38:6a:f3:25:33:89:31:9c:00:db:55:b9:5a:c7:
3c:25:f8:6d:18:1d:5a:99:15:6b:09:9a:93:a5:ca:
e4:ca:4e:8e:07:31:88:05:8e:61:06:38:aa:a2:d8:
28:6c:08:d1:f5:08:28:ac:87:22:9c:df:1d:ba:0b:
c0:a1:96:1a:7f:75:4c:d8:63:95:cd:87:4d:c7:3c:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:54:24:3D:67:62:3D:BF:B9:38:27:1A:99:49:5E:6C:CC:94:87
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bf:7a:9c:d9:0b:bb:5c:7a:ee:3f:50:05:2c:18:92:ff:5d:
b5:1d:9d:2b:1f:0b:fa:4e:91:7c:89:e5:6d:b2:55:8a:86:bf:
8a:ba:8c:62:2c:36:4e:fc:e0:9c:a6:d6:17:ea:d4:e8:29:58:
78:45:b5:fc:a7:3a:05:f5:27:2f:ab:51:72:a7:a3:3f:c3:dc:
0e:6b:ab:52:e5:22:5d:dd:03:53:1d:88:b0:64:11:70:75:14:
47:3e:b8:d2:55:05:68:e2:5d:2c:5e:b4:ca:e6:83:18:70:95:
73:77:c9:82:a8:d9:79:48:27:f6:b8:df:93:c0:48:41:49:1d:
03:22:72:73:65:45:6f:32:8f:8b:d6:d1:96:19:15:62:2a:8c:
41:18:67:1b:fa:a8:db:a5:fc:6e:98:6d:97:78:89:af:cc:43:
41:5f:e0:83:dd:66:64:e5:93:cf:2c:26:46:1d:cf:20:64:ae:
c7:d3:30:b4:bf:f7:44:90:35:33:71:e3:88:08:9b:79:f9:88:
2e:41:5b:91:62:9a:a7:52:0a:92:8d:d6:9d:1b:f4:06:9f:58:
5b:ac:0e:e7:a1:01:34:da:5d:e1:98:a8:e1:83:e7:33:e5:0d:
5e:11:b1:3a:03:96:b6:28:e1:84:3e:9e:97:60:ee:ac:e5:51:
a1:d7:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:32 2026 by rpki-client