Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: g9qTbEZfMfrzNy+tTlXhLwWLc2y/nGPHqil/vu1RfKc=
Subject key identifier: 62:18:D5:BD:31:EA:79:B5:EC:52:E4:14:C0:0C:A3:33:3E:66:D5:17
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019CAAC6A017FAA6E706A4B1E80B8EEE01EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:01:09 +0000
Manifest this update: Sun 01 Mar 2026 19:01:09 +0000
Manifest next update: Mon 02 Mar 2026 19:01:09 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: /4B4mXu9hwKhYuw5ghM/HvTpJI2Q2+5sffJ1TFxhHnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a0:17:fa:a6:e7:06:a4:b1:e8:0b:8e:ee:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Mar 1 19:01:09 2026 GMT
Not After : Mar 2 19:01:09 2026 GMT
Subject: CN=6218d5bd31ea79b5ec52e414c00ca3333e66d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:1c:51:cd:7f:63:85:49:8d:ac:0c:bb:d2:
23:96:12:aa:49:bc:8d:31:79:2e:99:bd:01:33:11:
b0:e3:68:8b:fe:2e:2e:45:ff:2f:d3:8d:51:7e:d0:
e1:49:85:84:ca:68:7b:f2:c7:c0:c2:12:6a:61:11:
e0:f7:6f:22:35:82:21:23:ed:cd:e2:f5:87:56:25:
16:78:0b:21:6e:46:b7:df:b7:0a:8a:94:81:6f:2d:
43:72:68:9a:ef:ed:fe:f5:46:e3:99:e0:7c:ef:44:
f4:2a:16:66:e5:fe:5c:a5:84:61:cc:73:10:10:14:
db:57:ec:c4:f9:0d:c0:f4:99:26:06:06:ef:a8:c1:
e0:f6:fa:81:95:54:e1:63:c2:7c:ec:a6:c2:6a:94:
93:d3:26:b4:26:f4:9b:e3:71:7e:71:d7:27:de:a1:
c2:91:c2:36:c0:18:0b:a8:b9:d1:bb:7b:d8:46:9f:
21:65:1a:29:39:bc:00:5e:03:85:13:fd:b0:18:9c:
75:94:f0:c0:44:a0:b9:76:2f:df:ac:f3:b5:6d:b1:
3f:3f:1d:d9:26:5c:0a:fd:e2:34:6c:aa:d5:2a:5e:
57:6c:86:a7:6a:be:16:04:13:4b:96:61:da:7f:f7:
09:f2:11:b2:7e:d1:cf:2e:68:7d:48:31:47:c1:c7:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:D5:BD:31:EA:79:B5:EC:52:E4:14:C0:0C:A3:33:3E:66:D5:17
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:58:61:3f:e8:d7:89:5c:60:df:1a:a3:8f:bd:12:2b:89:
41:45:96:04:a2:ed:89:d3:74:4a:5c:0d:10:97:28:2c:ba:18:
97:fe:41:6e:94:b9:60:fa:4c:bc:01:54:d7:33:62:1b:a2:54:
05:5c:e6:08:35:3d:57:c9:82:9f:14:4f:7f:5f:a9:de:a0:4e:
da:5f:50:fa:ca:fa:ed:7a:65:18:d1:e5:7d:0c:32:8a:1c:7d:
5f:9b:e9:b8:ac:bc:e6:b1:8e:5c:2d:96:b0:93:dd:d2:70:2c:
9f:f7:ea:ff:75:0b:09:06:5c:f0:23:9d:9a:79:a7:b7:48:9d:
a3:f8:11:7f:3d:3c:67:f6:e3:cf:fd:fa:24:77:a6:dc:b7:b8:
fd:66:a0:9d:3e:c6:83:cd:3a:7f:06:5f:5d:ee:64:17:7a:da:
06:23:70:65:39:ed:f1:48:d9:b3:46:1b:93:50:c4:5e:30:69:
5b:75:f4:ef:97:1b:bb:bc:97:2b:7a:33:71:9b:d9:c3:44:ab:
53:a6:7c:7a:74:a5:f3:e6:95:45:14:c1:4e:b5:69:3e:67:ef:
eb:89:f7:19:bf:bf:b3:45:ca:f3:2c:64:d4:c7:f5:0d:a4:a9:
2c:bc:ee:fe:0e:10:a5:b7:1c:18:8e:d5:55:50:cf:d1:8f:40:
e3:56:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:44 2026 by rpki-client