Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: gLZfeJOyV68g3uNwToJ7sTS0dwTPFcFz+QncVREKvfM=
Subject key identifier: B7:D0:D0:33:40:46:BF:93:75:F9:0F:05:28:A6:75:12:93:EB:D9:D1
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019D9A3E45B8768C04C1907FEF7AC2DF9C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 0663
Signing time: Fri 17 Apr 2026 07:01:05 +0000
Manifest this update: Fri 17 Apr 2026 07:01:05 +0000
Manifest next update: Sat 18 Apr 2026 07:01:05 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: 9oAbKD3ymjZ6mCFp9gwGTky4m5mddEA7ycky4UmTF1c=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:45:b8:76:8c:04:c1:90:7f:ef:7a:c2:df:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Apr 17 07:01:05 2026 GMT
Not After : Apr 18 07:01:05 2026 GMT
Subject: CN=b7d0d0334046bf9375f90f0528a6751293ebd9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:9e:12:60:2e:ed:0e:d6:68:7d:78:e8:cb:
6e:3c:88:04:c8:78:7a:fd:0d:0b:03:e5:9a:29:a5:
b8:9c:ea:dc:0d:2c:87:19:38:78:0d:8a:5e:1b:ad:
35:e6:3f:02:3f:fe:97:2a:76:e6:45:56:cb:ad:d0:
b2:29:ef:2c:06:c4:58:23:6f:e3:c0:77:46:1d:88:
7a:68:96:3c:39:98:63:a1:40:48:ba:6b:fd:54:ec:
36:c6:d4:5f:64:26:0c:02:96:fa:84:28:cb:93:3d:
6e:67:12:6f:fc:64:4d:33:11:26:18:2c:ef:15:73:
e1:18:b8:59:bc:42:b4:07:7d:aa:e0:ca:07:6a:f0:
12:ac:8f:21:6d:b8:02:62:c2:d8:c0:eb:af:c2:55:
b8:2f:16:5a:40:c6:15:f0:d3:17:60:30:9f:93:fe:
9b:1d:43:93:57:11:87:8c:a1:29:a7:73:f0:ca:75:
f9:a7:23:0b:7c:42:01:c1:7f:29:33:8b:16:48:2c:
7a:e2:8e:03:3f:e3:fa:0c:7f:0d:df:ae:44:f0:ad:
9d:53:d8:dc:2f:a4:a6:f2:87:1e:fc:85:54:28:6a:
af:a9:a6:80:42:ae:dd:83:e6:d7:e3:e6:31:fc:6a:
7f:86:53:9c:15:60:53:a4:6d:60:8a:10:cd:a1:0c:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:D0:33:40:46:BF:93:75:F9:0F:05:28:A6:75:12:93:EB:D9:D1
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:39:79:2f:8b:50:28:a3:dc:bb:03:e3:12:d1:6a:a1:a3:e5:
d0:d6:38:f0:17:83:65:bb:f7:b8:47:ce:e7:da:17:1c:a9:e3:
7a:31:7f:6f:ff:c5:85:c5:8c:fb:d6:e5:bb:85:9e:71:b5:33:
d0:ec:c3:3f:ad:7b:05:29:be:7c:f8:78:0f:24:76:19:d7:41:
88:f1:6d:c1:0a:b2:52:8b:5e:be:49:0a:15:fd:93:ae:19:e5:
c5:9f:a4:34:de:30:59:e6:95:10:38:20:b7:98:63:e1:9a:42:
e4:06:83:06:8e:90:42:c8:86:55:6b:97:5d:d4:0f:f4:e9:42:
82:49:cf:72:64:d5:53:50:a0:11:d0:b8:cb:32:b0:a6:3d:2d:
99:40:53:3e:5a:15:47:10:c2:ea:bb:09:46:6a:f0:18:c3:e5:
10:a0:e1:58:b7:e7:4a:eb:02:22:2e:a7:d6:3d:3d:a8:f6:a2:
22:f6:6b:55:06:6c:8d:17:60:45:ed:cb:d1:b2:7b:4d:eb:93:
4f:10:46:4d:8c:64:20:b7:e0:a7:bc:7b:a8:87:03:77:7d:c5:
1e:9b:6e:78:2d:ac:54:be:31:86:ca:7f:f4:33:bd:9b:23:27:
55:12:37:c8:40:2a:35:33:1a:06:2c:99:a3:2d:f5:21:c5:cd:
31:ee:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:29 2026 by rpki-client