Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: sv2zEvOq2JS4WUA/vcoC1ZKsALCdFw0oiatALrUf11w=
Subject key identifier: D0:2D:BA:27:E5:59:74:7A:2E:F4:EE:A5:62:E5:39:B4:3E:4C:36:B8
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019CACEB4F35534AE8F62F4E1200CF94276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0D2F
Signing time: Mon 02 Mar 2026 05:00:28 +0000
Manifest this update: Mon 02 Mar 2026 05:00:28 +0000
Manifest next update: Tue 03 Mar 2026 05:00:28 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: s+/2fmYF538gY/vQJiFgTOtGXLx6nQbITJ5BJrFl18M=)
2: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (hash: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc=)
3: xjDEGzwGWC32KNbYgkAYk69skio.roa (hash: k8gKJxzXreZ0dQt23gwa3WP6vJjAJk09SNp21SFCKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4f:35:53:4a:e8:f6:2f:4e:12:00:cf:94:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Mar 2 05:00:28 2026 GMT
Not After : Mar 3 05:00:28 2026 GMT
Subject: CN=d02dba27e559747a2ef4eea562e539b43e4c36b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:8f:e2:42:8a:80:fd:6c:1c:0c:51:5d:c3:
66:9c:eb:f6:0d:80:b3:d8:cc:cb:56:6b:62:19:d9:
27:67:6e:91:2f:82:0e:13:c8:d6:ba:59:31:64:61:
76:72:34:af:20:91:3c:f6:f7:9f:41:57:9f:e2:09:
fc:9e:fa:81:90:23:89:6e:33:82:77:53:9b:61:0c:
b6:cf:ce:f6:90:fd:c4:e8:a4:38:38:34:54:56:31:
51:c0:46:fa:7d:10:6b:f1:45:17:bc:a3:51:2b:9d:
29:44:55:28:28:b9:1f:33:06:ed:c1:fe:0f:9d:d9:
fc:4d:09:19:e3:93:bb:32:e4:96:d6:61:a3:8e:39:
27:af:9f:b3:0a:18:e7:48:59:53:b2:4a:00:b4:03:
1d:3f:a6:2e:4c:7f:87:a1:ef:1a:9d:1e:70:fc:f7:
21:54:ed:ce:ac:37:9e:fd:e5:20:27:57:50:ab:d6:
1b:e8:91:54:ac:ad:4c:e1:3a:3c:15:f4:75:c7:82:
b1:ff:ea:2a:05:29:d7:fb:bf:6b:31:4f:95:00:e1:
dd:8c:15:8f:34:af:37:c3:a8:38:cc:9c:d8:4f:0b:
10:e9:bf:da:91:91:80:96:87:8f:16:0e:20:68:a1:
01:00:e9:64:ba:b8:b1:69:08:15:5b:28:71:ff:08:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:BA:27:E5:59:74:7A:2E:F4:EE:A5:62:E5:39:B4:3E:4C:36:B8
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:96:37:58:c8:f5:db:c2:de:be:cc:0e:54:40:a9:66:0e:
52:9d:03:34:1b:4e:fe:f9:93:e0:c7:ff:68:8f:da:94:79:8f:
19:eb:ba:b9:ca:b8:64:94:df:bd:ea:8e:3a:bb:ea:0f:ac:8e:
f1:41:fb:48:f0:bb:09:2b:6b:54:f2:a6:8a:3f:3c:ea:54:42:
1a:fb:ce:8d:8c:7f:b6:a8:c9:91:75:9b:ed:f1:eb:d8:8d:b9:
08:cb:b1:6d:58:bb:66:71:98:37:aa:d6:f2:08:4a:e5:c8:1c:
4e:2b:7f:59:2a:cc:a0:ed:3f:ed:ad:0d:b8:23:8f:7b:d5:d0:
0f:c2:5b:ce:8e:ca:af:91:97:82:28:7d:ef:cf:7a:0c:d1:5c:
fd:12:c3:94:95:f6:87:e7:82:a6:fc:10:13:4c:50:11:eb:26:
ab:b6:bc:72:9d:04:fe:70:27:f8:1a:54:1c:5e:a4:85:f4:c1:
ea:9e:52:c6:30:ae:8b:59:3f:53:e8:43:21:78:b9:b4:f8:a5:
53:3d:ef:f6:e0:17:70:73:75:ab:0e:33:7a:71:96:46:e2:7e:
18:82:10:ec:22:62:f4:c1:0c:84:06:3d:98:b0:9c:5b:8d:61:
60:b9:1c:73:78:af:ae:ac:f2:e0:6c:36:c3:3f:33:3d:29:ca:
cc:37:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:47 2026 by rpki-client