Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: Awgin1c3nJZJrmpxOJK1hsySzcwwI4yfSFvYGfJZk48=
Subject key identifier: 48:AD:15:5D:4C:28:23:6B:7F:8C:26:2E:BA:89:78:4D:28:30:33:BD
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019CAA8FA93933736FDF98E5DCE7DC85D455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0777
Signing time: Sun 01 Mar 2026 18:01:07 +0000
Manifest this update: Sun 01 Mar 2026 18:01:07 +0000
Manifest next update: Mon 02 Mar 2026 18:01:07 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: rY483YIiCjcFOO6DEg/aEzCgJnH3s93jC+uQpbCw9pA=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a9:39:33:73:6f:df:98:e5:dc:e7:dc:85:d4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Mar 1 18:01:07 2026 GMT
Not After : Mar 2 18:01:07 2026 GMT
Subject: CN=48ad155d4c28236b7f8c262eba89784d283033bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:a7:43:cf:ed:d0:c8:6a:3d:25:cf:5f:2a:
bd:71:0d:93:1f:76:86:ce:76:25:61:d4:fb:9e:56:
31:b4:dc:70:b4:36:bd:e9:c1:b9:91:9c:66:77:ad:
a7:49:13:ad:21:ee:8b:0a:b2:b9:91:55:d4:af:e2:
23:3d:20:e4:60:21:dc:a4:a4:aa:cf:ac:61:84:ce:
46:a5:e2:1f:6e:0e:02:27:0e:bb:2c:d2:40:39:2e:
0d:28:97:6b:36:8b:ab:e6:df:19:86:e8:de:69:7d:
a0:ed:46:74:f2:a7:8c:9d:2a:cb:02:5e:de:fd:fb:
d4:00:26:c1:9f:b3:8d:35:36:69:b8:c4:e2:a2:7e:
76:75:23:52:fc:5e:69:82:f4:db:22:3f:88:59:e0:
f2:df:9b:69:f2:78:0e:d7:44:b5:5a:08:e6:bc:b4:
c6:b7:25:05:44:3d:90:a9:d5:00:fb:c7:60:5b:c1:
fe:43:39:f9:e7:62:a1:05:1f:09:95:f2:99:1a:6b:
2f:96:c8:9e:75:5e:80:03:c3:67:f3:f8:34:5d:41:
4d:43:0f:dd:f0:e8:09:1c:94:2f:49:7b:3d:0c:c8:
47:2b:02:04:37:ff:a7:90:23:27:96:fa:1e:40:32:
22:ee:f9:89:29:71:8d:8f:fe:4a:36:c7:bb:df:fa:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AD:15:5D:4C:28:23:6B:7F:8C:26:2E:BA:89:78:4D:28:30:33:BD
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:a3:4e:c0:49:cd:0b:db:3f:91:c5:03:ec:59:cb:b9:3d:
53:3e:44:4c:0d:b8:99:01:51:a8:0d:ed:b7:1d:aa:41:6f:12:
e9:38:03:86:73:8c:a9:e0:46:88:8e:b0:20:37:0f:ad:6f:28:
ab:5f:d2:79:d1:66:6d:49:9e:15:07:d3:6c:cc:de:db:15:6c:
9f:69:81:17:59:81:94:0e:86:e8:bd:43:0f:f2:69:f1:35:8d:
b4:59:9f:a6:5b:91:b8:94:98:f2:7e:59:44:28:fd:9b:e3:81:
c9:84:a1:76:8d:65:05:a6:d1:65:3f:85:d1:be:80:a5:97:7e:
0d:81:af:62:8a:ce:47:e3:64:5f:65:86:b8:28:8f:43:7b:58:
94:f9:cd:56:79:d5:0c:c5:e0:ba:ef:b4:33:16:18:25:4f:e1:
5d:36:a7:2d:be:f0:32:f6:2f:58:20:af:49:8e:1c:56:1f:5f:
fd:10:56:0e:b9:21:87:25:3e:c2:b3:0d:23:30:04:8a:e9:d1:
8a:f8:fe:a0:86:fa:1a:8b:a2:ac:e0:a7:99:7e:b8:85:48:e4:
94:96:9f:28:cf:88:96:26:69:5f:9a:1a:2a:53:1b:4c:7a:58:
76:61:3c:b1:f1:5f:66:38:19:c1:f1:fe:43:55:86:62:83:56:
a2:c2:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:30 2026 by rpki-client