Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: r4D1//XqwvAIqkverYEQhJg/RnsBZJtMBxkkrCLFhO0=
Subject key identifier: 5D:55:1C:E1:49:9E:8E:B6:DE:9F:2C:55:AB:D9:0B:66:45:7E:21:32
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019CABD8E8D3A176CC6FC43302278A1EC9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 063C
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: gSfg0c1DRll6BfZny1eqgnSV/OLKqDxxX+y84AdEsNk=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e8:d3:a1:76:cc:6f:c4:33:02:27:8a:1e:c9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=5d551ce1499e8eb6de9f2c55abd90b66457e2132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:30:5f:de:12:5f:f8:4b:d0:9f:ff:e1:aa:
f0:ce:c0:c3:03:63:cf:a4:97:4f:81:0e:2b:8b:ec:
74:40:68:25:6e:1c:bc:22:9a:80:50:00:ca:d4:44:
2f:4e:c5:fa:d0:07:68:a1:82:f1:68:40:08:51:d0:
09:f8:94:97:23:30:08:8c:61:4c:72:4c:2f:b9:1b:
97:30:ee:fd:18:59:8c:5e:13:57:9c:6e:7e:d7:c0:
28:80:a2:6c:70:48:46:28:3a:b5:fa:55:99:c6:5f:
c4:59:14:7b:b1:12:fb:61:8e:1c:e6:3f:ea:ae:b8:
83:bf:39:7b:eb:69:eb:ae:56:74:7d:83:23:99:4f:
a2:14:d7:56:1b:f7:be:a6:1b:5e:61:2c:bd:15:e8:
88:37:af:0b:c8:79:7a:7a:3b:da:7a:17:80:69:de:
86:ba:a6:5e:be:24:8e:3c:92:d7:46:fa:db:88:f6:
02:ac:09:65:7a:ff:7e:35:59:6a:ca:54:18:02:cb:
cb:77:73:5c:aa:8d:ef:81:2a:65:6a:12:c7:87:cc:
e4:b7:18:29:6b:e6:b8:7e:8c:9b:bc:79:6e:df:05:
42:77:fb:26:ae:df:85:09:3e:7a:4e:85:61:98:a7:
ff:e4:46:2a:0f:8d:7a:71:70:26:54:d9:7f:76:fb:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:1C:E1:49:9E:8E:B6:DE:9F:2C:55:AB:D9:0B:66:45:7E:21:32
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:3e:be:62:a1:30:0d:71:ad:5d:3d:1f:8d:67:7e:5a:31:
b5:bd:df:a3:6b:56:1a:28:7f:5e:f2:1f:7d:39:d3:ac:26:bf:
e4:79:38:c9:e9:c9:5d:10:65:03:f1:f1:13:ca:9b:73:36:24:
ff:e1:f1:59:3c:34:4e:df:d5:ac:e1:37:6f:8e:80:6b:90:60:
1d:42:7f:9e:a9:7b:b5:d9:94:7f:46:b5:96:a2:ae:1a:27:e3:
da:59:1f:cb:c2:6b:21:f2:0c:2b:2d:14:46:88:57:dc:a3:4d:
1d:6f:92:33:7e:a7:d3:95:3b:cf:81:2e:5d:f2:42:f9:26:98:
7d:6e:5a:70:41:81:d0:f1:82:b3:9e:ac:28:b4:27:5f:eb:96:
64:36:6b:70:0e:0f:35:6e:03:02:55:b1:8a:1f:2b:cf:e0:00:
57:18:26:d6:63:93:ac:fb:a7:59:bc:2d:38:66:1a:cd:72:f2:
13:f7:36:87:18:d9:37:07:8f:74:30:9c:fc:b9:3c:4e:a8:3a:
e1:6e:90:b3:b6:56:d5:7c:6e:59:4b:15:97:48:de:0e:bd:c0:
86:f4:86:e3:d1:79:5a:ea:cf:1b:55:45:5e:5e:c7:ed:de:53:
3b:a5:09:d9:e2:fd:1d:13:1b:3e:db:26:77:9c:85:a3:14:bb:
99:d3:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:23 2026 by rpki-client