Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: jOXlIC2bzBfxf7a6fqbSxl9InMhrKOt4kQelEHX0nik=
Subject key identifier: 6A:42:96:60:B3:5D:98:EB:78:EA:F0:11:D4:C2:FD:E1:EF:FA:12:DF
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019CABD90A104DFC2DCAC82C4A92D38D7987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: li/cKmIyG2s1FjVxmiK95LSAJpLmXs+a3yg104oJY9I=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0a:10:4d:fc:2d:ca:c8:2c:4a:92:d3:8d:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=6a429660b35d98eb78eaf011d4c2fde1effa12df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:76:ab:d9:7a:78:41:b7:68:4d:23:9a:cb:
bb:7e:e0:0e:b0:b7:6d:1e:3f:96:3c:08:9a:fa:47:
bd:46:8c:ec:61:03:c6:da:da:ac:69:f9:cb:14:32:
71:04:4b:e8:4f:88:32:65:c1:74:42:17:87:73:57:
64:e4:47:6c:37:d1:69:ac:ee:34:e9:8d:24:55:77:
9a:ce:31:1c:db:90:e9:f9:ee:22:c3:6d:b5:e3:3f:
71:eb:ad:fd:58:ad:ba:08:06:06:5d:a1:ba:52:f9:
b5:0e:d8:bd:41:1f:4a:56:59:65:a9:d3:2b:6a:9d:
ea:91:13:a8:e2:00:f3:85:1c:8d:b8:e1:a0:67:c8:
e9:cb:bb:5a:c4:3f:cd:43:cd:06:c1:7e:92:bd:6c:
ad:17:19:ef:4f:4d:e0:dc:ea:9a:bd:91:c0:c8:4c:
e8:b9:8d:af:72:da:b0:41:cc:84:0f:4e:80:d1:ee:
5b:ae:40:dd:d9:e1:9d:da:5f:ab:da:db:60:be:b2:
26:96:29:2c:82:7c:7f:b9:62:82:e5:83:20:9a:78:
e6:7d:b0:51:e0:32:64:91:c2:40:3b:b1:41:12:3f:
06:c4:0b:fa:f6:4d:74:5a:32:29:e7:ba:4a:89:e3:
71:79:16:c3:3e:1c:b5:25:79:7a:20:29:05:17:71:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:96:60:B3:5D:98:EB:78:EA:F0:11:D4:C2:FD:E1:EF:FA:12:DF
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:59:aa:88:28:0f:78:63:81:90:21:dc:b4:6f:61:cb:ad:0a:
88:c1:5b:5f:8c:52:ed:3d:1e:96:41:bc:3c:52:67:d6:cc:9c:
7b:39:a2:a6:fb:9b:4d:d2:52:68:38:4f:be:52:b9:58:f7:33:
ca:30:94:6e:e1:e9:30:93:0a:c3:30:6a:40:35:36:d5:45:cd:
1b:56:08:2e:d4:83:c5:50:f2:cf:58:83:36:38:b0:82:49:d0:
de:ef:bc:6c:13:ee:29:6e:85:84:80:0a:6b:f1:08:31:b2:7b:
70:dd:b9:33:e3:66:c4:b3:22:ce:f9:95:25:87:f4:5a:d9:07:
4e:9c:f0:a6:ac:24:8a:53:6e:4f:e4:da:dd:12:da:0c:a4:be:
12:58:75:2d:28:d5:79:4e:87:70:6e:bd:3d:89:3b:1a:87:19:
7b:e3:47:5b:2d:59:9c:97:4f:58:16:59:3f:0c:55:3d:88:06:
bf:57:d3:9d:a9:3c:9e:a8:44:b9:6c:91:0b:99:81:19:59:0d:
2a:23:ba:1a:f5:37:93:26:47:0a:46:55:9d:35:00:c3:f7:e2:
7c:53:cb:28:d9:0a:ed:70:55:5f:d5:3f:78:a2:64:85:4e:4d:
46:15:2e:7b:4e:af:05:ef:b1:2e:25:73:10:95:00:a2:5c:dd:
2b:e5:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:53 2026 by rpki-client