Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: IkSIeaNIGhXTjO5OL9jPAfH8yz1IsFpee/bCJQgXSKQ=
Subject key identifier: 7B:6D:77:A6:71:6D:FE:5B:C3:5F:2F:7B:B6:66:F7:09:B1:0B:60:5C
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019CAA8F6E35BF5391ACB1BF53285F978ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: dfm04mkaJPLp0MtWpyEWlyAM3ES7bWXkd0DTtJArX6Y=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6e:35:bf:53:91:ac:b1:bf:53:28:5f:97:8a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=7b6d77a6716dfe5bc35f2f7bb666f709b10b605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:67:14:1a:f8:bd:f5:da:fb:f3:45:7a:bb:
25:89:e8:c6:b8:92:ad:fb:a9:fc:65:30:9c:5e:c7:
1c:ba:55:28:08:ba:50:f9:77:d3:47:db:e7:2e:27:
17:e8:85:13:ac:68:6f:49:3a:18:45:6b:20:08:b4:
cc:83:f9:11:de:bc:0d:69:60:dd:6c:c2:2d:27:9e:
55:78:d6:c3:6f:43:87:50:5c:ad:68:20:67:47:96:
88:55:b3:1a:93:7b:17:bc:a9:74:bc:82:b1:d9:ad:
9f:2a:87:e3:75:a6:6d:8c:c2:be:62:80:4d:fe:92:
08:c2:92:ea:d1:6d:55:0f:08:1f:25:bb:f6:f9:7f:
15:7c:4e:92:f5:8c:4f:f5:ee:41:26:b7:7b:f8:50:
a6:57:71:17:3d:14:e6:73:b6:38:ae:1b:f1:ce:59:
c6:4e:c9:8b:39:c5:a8:f3:db:81:5e:1a:60:d1:9d:
4d:02:3c:a7:e2:79:bf:bd:b0:d3:26:20:13:4c:da:
d3:e9:7e:02:a4:aa:cf:51:0b:63:e8:48:89:39:ab:
cb:f2:de:7b:d4:07:7e:3d:c5:d6:86:eb:83:a0:26:
fe:ae:b2:a3:af:df:eb:e7:b1:77:81:f2:aa:10:95:
9e:7f:7f:6a:b5:96:79:ad:cd:df:c8:1b:2d:e1:c8:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:77:A6:71:6D:FE:5B:C3:5F:2F:7B:B6:66:F7:09:B1:0B:60:5C
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:0a:99:19:1f:4d:ec:f7:5d:85:8b:3d:59:d4:a9:99:7f:
b7:6a:db:f8:a6:b3:60:4e:da:ac:b4:9a:f9:52:f7:bb:83:06:
34:e7:3f:ad:54:b5:b2:c2:2d:f5:48:bb:3e:2b:ee:a3:0d:ee:
81:f5:47:27:40:a0:08:66:9c:e9:4c:71:b1:20:ba:47:b5:22:
af:33:cc:de:e3:19:9f:10:ce:1f:7e:5d:83:0a:da:f8:04:5b:
fd:0a:64:33:13:2b:a6:33:ef:ca:0c:30:de:ce:9c:54:d5:9f:
e8:a0:07:bb:b7:4b:cd:06:99:89:96:73:a8:ea:c7:75:9b:16:
67:76:a9:53:38:77:cb:b4:0b:9b:34:3b:bf:2a:63:85:d2:99:
87:cc:e0:0e:70:6c:ee:fa:57:92:21:31:ba:a4:49:b1:3a:82:
9c:1d:6f:a1:fc:f6:b2:24:26:d3:81:02:56:07:c4:48:51:53:
67:99:8a:9b:d2:8d:42:75:37:0e:ff:6a:10:2d:84:be:67:79:
19:3f:05:e1:2d:2b:ad:de:dc:c4:7b:27:42:74:2a:48:f9:3f:
e2:de:c1:3a:b3:66:43:6d:44:26:bf:b0:ee:1c:7d:c9:51:7d:
01:2e:cb:0c:39:f1:4a:93:fc:85:aa:3f:98:95:8b:66:5b:46:
9d:8c:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:16 2026 by rpki-client