
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: 1uCssxz06VX51WKasNh6kDphd9ZGNhd0WSC66zfX7hY=
Subject key identifier: C9:B5:45:DD:56:23:82:45:36:76:14:25:A5:09:08:F8:E7:96:EA:E0
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 019CAB33ED01B8131A773C12B2071688D2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 1868
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: 5VYYpdj071UMJ35atnAnCExvHYNknYBd4odYKZ+ZxzM=)
2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ed:01:b8:13:1a:77:3c:12:b2:07:16:88:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=c9b545dd5623824536761425a50908f8e796eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:8c:fe:1c:04:38:57:a8:d2:c7:66:3e:7b:
82:69:e3:d4:8b:93:cd:59:6f:90:49:3f:35:ff:8f:
bb:26:87:da:f4:85:30:de:fa:a2:6f:f3:8f:ff:ae:
a2:a7:db:ae:87:f5:5a:7c:00:1a:80:63:d5:96:3c:
1d:a8:fd:0c:02:9c:1e:c2:2b:b0:70:14:49:4e:3a:
7e:b1:91:60:22:1e:37:09:c8:43:ae:fa:06:09:95:
65:c2:69:b2:52:1a:fd:24:bd:ce:aa:0d:c4:13:e1:
70:ec:a7:56:67:0a:ca:af:37:e1:2c:5c:6c:cd:fd:
9d:3b:90:90:49:24:a0:65:f0:ab:20:0f:11:bd:09:
86:40:b9:6d:b6:42:57:86:b0:46:db:b7:3e:3a:6c:
eb:a5:7f:70:ad:7b:69:64:5a:8f:36:40:5f:bc:fd:
3c:8d:61:0c:95:8f:e9:cd:88:5d:f8:3d:69:c6:0b:
96:6a:40:52:90:01:8f:e7:16:87:31:61:6e:53:6c:
ec:15:c3:69:33:64:50:14:07:6b:a0:cd:47:6a:2c:
b1:7b:d2:93:e1:81:b4:74:1a:57:53:ec:59:60:ce:
5c:77:aa:a9:17:19:35:40:5d:c9:86:9e:c2:a7:d2:
51:a2:65:bc:cf:af:14:ed:a3:53:2d:e5:11:18:56:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:45:DD:56:23:82:45:36:76:14:25:A5:09:08:F8:E7:96:EA:E0
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:cd:ce:0d:5e:0c:bc:6f:c6:bd:63:2a:dc:bc:dc:46:b0:01:
d2:3a:ea:01:8d:ca:1d:8b:f6:04:70:00:c3:34:22:25:1d:8e:
de:9b:e4:1a:17:b5:47:f4:d9:8b:0c:4a:d7:de:a7:ae:4d:6d:
de:46:05:9c:d9:33:cc:1c:fd:28:11:65:19:bd:e9:af:8a:71:
22:ea:6a:47:45:c3:12:41:e3:af:78:ca:69:14:f2:9e:1d:1d:
b3:34:65:47:cb:90:90:77:28:81:34:37:8c:3b:52:26:ea:6b:
16:e1:b3:84:78:94:ce:9f:95:f4:b7:1e:de:c6:1d:5d:20:ea:
46:75:6b:99:6d:74:be:35:d8:1c:ee:4c:f5:92:40:60:39:a0:
14:3c:bd:4d:6f:32:c2:8f:e9:1a:72:17:59:d0:73:f5:44:a6:
27:27:23:6c:40:c7:2c:04:3c:7a:3e:0a:4f:43:ac:29:bd:bc:
eb:d3:2d:ac:19:a4:6b:fb:25:f9:7d:4c:96:d5:fb:3f:80:11:
78:7d:33:90:e1:97:db:0c:c0:91:7f:6b:0e:4d:31:2e:26:d9:
1c:59:2c:d5:96:f3:51:98:2b:10:96:06:9e:bf:e2:0f:36:00:
4e:55:40:52:ee:34:ff:bc:7f:eb:1c:e0:d3:78:16:ba:06:57:
12:b3:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:39 2026 by rpki-client