Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: wVk/W37YQK2xLxFmniThdaxyfh6DbjRaVeK4CEYams4=
Subject key identifier: 86:B8:3A:83:2D:63:D5:57:8F:2A:37:A1:29:BE:B4:6F:36:56:12:1D
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019CABD9C3554D0AFC74CCAA9F66634ECB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 3gyn+6+A5/oLprO7LdgkJBkd+oxobM6WjN1cJLj18sE=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c3:55:4d:0a:fc:74:cc:aa:9f:66:63:4e:cb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=86b83a832d63d5578f2a37a129beb46f3656121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:d8:d4:1b:3c:df:7d:07:4e:e2:a7:13:bd:
c5:3d:0f:a9:87:5a:4d:93:ff:7d:39:96:ed:c7:ca:
3f:26:74:3b:83:81:e0:47:78:55:c4:f5:c2:b9:81:
01:3e:51:dc:9a:77:e0:ba:d3:23:fd:bc:a4:db:67:
da:28:22:5f:2d:ea:3a:eb:4b:5a:e7:94:57:6f:e8:
1e:55:4e:1a:a8:25:eb:3f:de:a9:d8:10:cf:d1:df:
16:d7:3c:0e:08:5c:c0:7d:54:a2:55:30:96:0e:a3:
3b:9a:e2:3e:da:15:fa:6a:a8:9f:df:b1:e6:52:e8:
40:63:76:5e:4f:bf:02:85:41:82:79:e8:70:c6:d7:
7e:0f:51:21:bf:9d:96:ee:15:f6:55:7b:db:ab:ec:
2f:4f:57:8e:84:47:9c:d6:7c:6d:d8:bc:7a:59:de:
99:e0:99:f6:cf:32:9e:c2:a4:72:48:89:0f:ca:24:
63:ad:6f:ee:72:9a:d3:ad:13:04:9d:bb:45:9f:bb:
5d:76:26:41:81:85:56:40:08:cf:20:95:b3:7c:89:
da:4b:7e:30:2d:06:53:90:c3:c9:a8:a5:20:5d:de:
16:f0:0f:04:95:81:66:98:75:42:92:b2:15:8f:e2:
ae:8c:74:55:a8:5c:dc:31:84:bd:9e:54:7b:9d:09:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:3A:83:2D:63:D5:57:8F:2A:37:A1:29:BE:B4:6F:36:56:12:1D
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:e6:d8:c4:02:5b:48:54:6b:b0:a8:78:a5:e9:13:47:6c:
37:e0:8a:d9:04:14:bc:db:f5:8c:c3:b1:56:9c:29:84:81:14:
89:30:1f:03:4f:91:a7:34:71:96:03:81:e0:10:3a:ee:04:d7:
ad:be:44:d9:9b:64:bb:59:34:52:1f:f5:a1:21:34:49:ed:2c:
f7:4a:ba:f5:d2:dc:cb:0b:8a:79:22:81:88:3a:f9:ce:1e:d6:
cd:1a:b9:7d:2b:3a:90:71:79:45:91:86:75:ac:0d:25:a5:ca:
17:a1:20:46:7a:78:93:17:d6:d7:35:61:bb:35:0c:98:be:45:
00:ff:31:14:8b:e3:4b:03:27:d3:e3:1e:84:05:18:42:71:1e:
c7:9d:90:49:d2:be:27:9f:b1:f7:51:ff:69:c4:fb:32:8a:95:
dd:24:d8:3f:d5:f9:ef:64:df:46:86:b9:f8:8f:a0:e3:e4:d7:
76:58:a0:87:78:87:a6:81:e0:fa:50:c4:09:c4:14:1e:ae:ea:
11:87:4a:2d:3a:46:53:35:b2:ee:93:79:f3:34:5a:31:e8:72:
43:e1:3c:61:bf:6e:03:b8:f4:b2:dd:c2:5f:39:a3:2b:f5:21:
10:ac:4c:e2:7c:bf:a3:09:b0:e3:e0:fc:72:9b:00:42:e8:41:
61:25:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:33 2026 by rpki-client