Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: fqGrqg+KYxgAkWnT9aDdgxWToTBw3MApenBsqZzlY/I=
Subject key identifier: 0D:38:20:4C:F3:54:50:3D:06:AB:67:EF:F4:A0:D8:1A:22:39:AC:EE
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019CAF116AC71D10D437549E1B85CF5BDA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 15:01:20 +0000
Manifest this update: Mon 02 Mar 2026 15:01:20 +0000
Manifest next update: Tue 03 Mar 2026 15:01:20 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: cugLQpkpLDKfrmxotHfnpsixligwXXC1/LgmQheTFfk=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:6a:c7:1d:10:d4:37:54:9e:1b:85:cf:5b:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Mar 2 15:01:20 2026 GMT
Not After : Mar 3 15:01:20 2026 GMT
Subject: CN=0d38204cf354503d06ab67eff4a0d81a2239acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:a5:0f:25:07:67:c6:80:d6:d9:4f:89:20:
6e:22:a9:c2:2f:7e:2d:fa:10:64:5c:d1:f3:2d:e0:
c1:b0:2e:82:2d:47:b7:24:ea:05:6b:0a:82:b1:3a:
0c:68:ce:03:23:a9:5c:6b:ef:ac:ce:da:17:f2:cb:
d8:61:93:4d:37:9b:dd:63:da:8e:0a:84:c5:0b:c0:
cb:c1:54:fd:d5:cb:49:c1:25:cd:4e:c5:e8:b3:d2:
0b:6f:24:ed:64:74:a4:66:54:60:38:26:85:d1:f9:
b5:a9:e4:c7:bd:26:26:fc:fd:4a:27:e4:d4:0c:fd:
c2:7a:b0:32:8d:4a:8b:28:54:53:b0:91:8a:4e:2c:
90:58:02:f5:cd:ba:5f:79:1f:02:1e:70:b4:0a:79:
1c:bd:1b:98:8a:44:fc:7d:4a:28:a1:d1:ff:23:ae:
a0:ab:a6:f2:c4:cc:1e:6b:0e:b4:e4:e4:db:64:ce:
1a:1c:2f:9c:74:1b:28:8a:c7:d4:ce:0b:ec:10:f0:
5e:ef:68:c5:d2:42:37:97:83:64:d5:a1:19:46:13:
f7:24:7b:77:10:83:f3:45:3f:b4:ea:97:f2:68:79:
31:0c:2d:27:d6:1e:36:c6:17:2e:d0:b9:f4:5f:9c:
8c:ad:65:53:08:2b:3c:12:ec:55:85:36:b1:89:e3:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:20:4C:F3:54:50:3D:06:AB:67:EF:F4:A0:D8:1A:22:39:AC:EE
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:f7:d4:49:5a:b2:7d:4d:48:22:b8:9c:27:04:3a:28:d4:
f1:3c:c8:62:fd:e5:3a:4c:89:df:49:74:ab:56:9f:62:2e:0e:
af:f0:2b:0f:d1:d7:b1:d5:71:01:ac:4f:04:4f:9a:2d:c1:ba:
70:27:a5:92:57:7a:f6:da:5b:9b:81:c2:e0:d8:13:66:a1:ed:
1a:67:70:74:d5:ca:21:98:f7:51:95:6f:76:01:b9:82:62:9b:
52:de:8e:8a:fc:40:b4:e4:26:20:44:91:ad:00:4b:f1:ad:9b:
59:1d:57:82:51:6c:bc:b0:ae:bc:40:75:a3:01:89:0f:39:be:
c8:c0:5a:cd:d6:b8:88:da:11:3b:86:38:6c:6f:6e:24:e7:68:
41:ae:d2:f8:68:d4:d2:d4:cf:87:85:42:40:46:0f:f6:58:d3:
e1:95:f9:cb:7a:8c:c3:8d:b8:d0:5d:73:8c:5c:52:5e:c4:20:
2a:e7:67:5c:7e:39:37:c1:39:fd:c4:f6:00:69:7d:e4:69:a9:
33:1f:2b:36:a9:d3:c0:0d:94:a8:65:34:3e:da:29:ac:6b:42:
50:0e:7f:78:57:57:c5:a2:dc:e8:2c:b6:aa:44:70:aa:30:98:
56:21:ac:4c:cc:33:fd:f5:bc:13:e4:3d:8f:bc:ce:78:65:d2:
03:1f:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:56 2026 by rpki-client