Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: o0XyAsPyLXus3NxdZx2OAo6WQJf9nOJluVjNpcSpMpc=
Subject key identifier: B2:AB:15:0F:C0:2A:18:70:C5:00:AF:07:14:73:BA:5F:59:D1:33:67
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019D9B8755B6AFA27BA7A73C1EFE24212554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: CC
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: 0L6DfWnq9/6+iVehppHHnX6gPQYbZWZN23mJ7uAw24c=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:55:b6:af:a2:7b:a7:a7:3c:1e:fe:24:21:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=b2ab150fc02a1870c500af071473ba5f59d13367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:65:c3:d9:30:68:db:e4:76:cb:a1:09:77:
0f:6f:58:43:0e:75:b5:8d:27:c3:98:55:17:ca:72:
a7:03:92:54:cd:26:ab:97:dd:10:62:6f:49:28:6e:
d1:b1:c9:e3:ba:1f:1e:02:d3:3f:8b:14:58:e2:34:
0b:61:c5:6c:cd:bf:3a:cc:21:92:be:7f:73:27:70:
c3:8a:67:41:9e:fc:25:14:e1:0a:f2:27:03:ca:9b:
9e:c8:f1:63:64:1d:ce:3b:db:58:3f:6e:53:66:fc:
29:7e:9a:18:1c:8d:7b:5b:50:fd:11:68:0d:b9:bf:
fc:74:37:1a:2f:67:a2:f8:f1:88:b9:d9:0d:e4:98:
98:37:25:54:de:c2:7c:89:3f:7f:f3:d8:56:e2:35:
75:83:15:8d:4d:1e:69:34:b2:44:ad:b6:28:b3:ed:
4f:f9:1a:60:db:7f:36:39:83:ca:b4:8a:e3:1b:3b:
ef:18:09:6a:f4:bb:38:e4:3a:8c:86:c1:72:ae:a4:
01:2d:66:7c:09:c6:19:bf:ee:3a:b0:84:dd:da:df:
16:46:ac:75:69:84:b7:93:7d:72:c4:fe:b3:94:9a:
85:3c:07:43:d6:23:29:f5:87:c9:97:58:3b:87:a2:
87:38:3f:f0:68:e4:1d:c9:39:89:2b:cf:21:47:15:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:15:0F:C0:2A:18:70:C5:00:AF:07:14:73:BA:5F:59:D1:33:67
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:79:89:20:10:0c:82:d8:79:b5:ef:07:c8:1c:65:1a:b4:d0:
ae:5e:27:af:3b:d0:bf:a2:f3:ad:af:4f:ea:a2:0f:b4:c9:c5:
ed:9d:4b:fe:aa:d5:48:87:33:44:53:ca:19:52:9f:60:35:7a:
9e:29:b6:42:01:0d:ee:26:53:6f:c0:32:fd:2c:50:76:43:1b:
87:55:c0:7a:f4:42:ac:c2:b4:cc:2b:5b:ef:c3:67:8a:75:9e:
69:c5:2d:e9:ac:17:5d:bf:fc:dc:c3:93:49:03:f1:fa:66:04:
89:fc:11:8e:17:6f:16:96:ed:9f:f7:ea:30:be:78:8a:b3:56:
c2:db:06:de:37:32:8d:d2:9e:70:bd:42:5c:04:ff:87:18:aa:
ca:95:d8:f6:9d:f6:2c:f3:5f:18:00:5d:89:66:7e:9a:ed:73:
5e:6e:09:62:c5:07:f6:b3:5e:c8:d3:49:28:80:68:51:32:12:
de:4e:5d:b9:6f:07:5f:40:2b:07:1e:3d:49:66:3c:7a:e6:b2:
3a:a6:52:89:62:cd:d3:66:87:5b:3e:67:a1:0c:3a:c4:83:7f:
1d:52:75:99:12:f5:12:0a:58:34:74:fb:95:b6:21:8f:a2:8b:
b6:13:69:19:2f:79:eb:e6:0a:92:04:a5:41:f6:e0:53:3c:13:
03:b5:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:10 2026 by rpki-client