Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: 9bbotEGanJysFfE0pKs4COMQL5HdEIsDakb34S74Kj4=
Subject key identifier: BF:FA:3B:CD:0E:97:89:C0:3B:D6:D8:A8:FE:50:B0:63:C3:3F:6A:18
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019CABA1FB82253BD2D486CD826FB703A838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1615
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: soFnlJSj/WTD9w7PzQHWE6Im7U0rrqnBxP3Qzj9AXL4=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fb:82:25:3b:d2:d4:86:cd:82:6f:b7:03:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=bffa3bcd0e9789c03bd6d8a8fe50b063c33f6a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:fd:c5:85:4c:f4:2a:a7:4b:89:10:19:ef:
7f:36:40:1d:f3:4d:0a:af:83:6b:1b:77:12:72:f4:
de:8f:ea:92:67:5d:36:9c:cc:87:56:e6:54:e3:ee:
92:b4:eb:b9:38:22:39:bc:39:cd:e7:74:e1:0c:01:
b7:f8:1d:3c:e7:95:58:f5:a4:c7:cf:3f:e3:52:dd:
41:a0:a1:f7:8d:e0:86:92:c5:72:8c:5a:f3:d9:1f:
36:e7:fe:9f:9d:2c:51:30:6a:52:88:6b:a4:e2:ce:
d4:54:7c:8c:fd:1e:ff:c9:be:37:a0:fd:38:df:8b:
56:24:f6:80:fa:c2:90:13:3f:df:95:6d:b4:ea:98:
10:b0:76:d1:e9:53:73:96:65:6e:da:10:4e:6e:bc:
7e:8a:dc:15:ea:7b:5a:31:4d:70:b6:c8:59:99:7a:
4e:38:dc:48:5c:b0:66:09:fc:e0:df:48:d2:5b:fe:
37:a6:71:75:75:99:7b:31:16:44:c8:cc:79:03:59:
ee:ac:7e:76:a2:16:0c:63:ea:a8:d0:f6:c8:fe:ed:
43:47:0c:a6:58:35:8d:e0:66:7a:fd:85:cd:85:bc:
a7:10:83:5c:70:96:50:68:b2:25:c2:71:e6:84:1e:
a4:3d:87:f2:e8:4e:3a:24:01:8d:16:f9:c1:04:1f:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:3B:CD:0E:97:89:C0:3B:D6:D8:A8:FE:50:B0:63:C3:3F:6A:18
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:a8:a0:6e:02:df:9d:27:c3:6c:e7:52:12:32:4b:b4:7e:
62:ed:3b:f7:d1:73:44:a2:f8:fd:72:c7:f3:f3:09:cd:43:73:
f8:62:f3:ff:38:e0:af:03:8e:ef:4b:79:ff:0a:07:90:ba:a0:
d2:ef:fc:18:79:6a:dc:19:30:90:7e:f4:8b:f2:1b:8a:99:1b:
5a:1f:e4:83:55:79:7f:7c:8d:85:47:cb:c5:15:c3:5c:81:74:
1f:f8:de:07:ba:ef:6f:52:38:67:e2:f5:8a:21:ab:6f:47:64:
28:cd:d3:66:92:49:c1:82:c4:35:78:7f:c2:a3:d3:57:39:13:
73:f7:52:23:a7:97:d1:a0:28:3f:7a:19:db:a5:f6:47:5b:7b:
78:60:ee:94:3d:ff:10:9c:24:a9:20:56:1c:3b:d5:00:40:a8:
c1:1a:fb:c2:3f:9c:55:86:d8:14:d3:53:e2:6d:20:30:ae:ba:
3f:69:24:24:c2:96:e3:cf:43:bd:63:c1:13:23:8d:10:7b:9a:
dd:55:3c:95:2c:dc:cb:51:7a:8a:8f:1a:aa:44:f7:ce:28:78:
94:40:bc:c5:a8:fc:6d:d4:7e:ed:e8:04:ba:c4:8a:aa:3a:86:
0e:33:22:cf:64:14:de:bc:d2:d5:4d:b5:0b:24:b9:b6:0a:5a:
8d:24:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:32 2026 by rpki-client