Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: +828TRnAnoce7mgSwrPDc1u6rScmORVuAxll+ide/VY=
Subject key identifier: 22:8E:84:6B:F1:CB:A0:AE:BB:2C:90:B8:2D:C5:F7:C8:7E:35:2E:B3
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019CAAC7013D9D4961EA009224A9BF23A923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 05E7
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: El09CAIGpFJstqP50lLvXqxKX67+oTBMThLOiEfV+pY=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:01:3d:9d:49:61:ea:00:92:24:a9:bf:23:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=228e846bf1cba0aebb2c90b82dc5f7c87e352eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:e2:b1:67:6f:ae:41:c9:6c:4a:1f:db:31:
8a:64:2e:f6:d8:47:73:cb:8d:a8:82:5c:6f:ee:39:
26:04:21:70:17:d7:ab:e3:e6:52:d5:c0:ca:e9:8f:
ac:18:6b:5d:2d:89:62:c6:db:f1:93:d7:eb:e3:8e:
78:ab:c8:49:99:55:58:10:8c:33:29:9a:fa:3b:63:
c2:40:d8:b9:01:d7:32:df:63:2c:42:41:13:10:03:
0e:8e:72:03:d3:cb:36:93:cb:fe:18:09:9d:40:96:
64:3d:4d:5e:8d:57:9d:37:35:bd:1b:73:64:d1:b0:
ba:4c:50:93:50:0e:cd:db:a4:d4:89:31:6b:0b:7e:
03:c9:b0:09:ef:c2:37:bd:0b:2b:f0:3a:10:a6:e3:
0e:18:b8:8f:1e:53:39:96:9c:c6:fe:e4:1a:01:3c:
e4:91:c6:de:1e:fb:e0:58:ed:4e:d9:cf:7a:c6:03:
01:c9:36:2a:ec:aa:bd:27:1a:58:98:2b:25:67:6b:
95:21:64:41:5f:05:4d:a5:39:b9:10:7a:0f:5d:18:
be:f7:7a:ca:cf:49:e1:e1:91:c0:3a:e3:e8:91:a0:
15:9b:d9:33:04:f0:51:84:63:95:a8:85:bb:0e:dd:
2c:86:18:29:3e:39:07:ec:42:0d:02:ab:c3:a0:90:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:84:6B:F1:CB:A0:AE:BB:2C:90:B8:2D:C5:F7:C8:7E:35:2E:B3
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5b:b9:91:61:26:62:db:80:f8:d6:fb:79:8a:10:34:a4:2f:
0d:24:52:4b:79:fc:07:28:7d:9d:b5:07:6e:c0:22:ec:41:db:
84:ab:41:2d:24:fd:d5:c6:44:d7:c2:39:6d:b5:5a:fd:ae:5c:
81:5c:94:02:4b:5c:b0:40:86:81:bb:84:61:0f:dd:32:4d:b4:
04:9c:6a:83:29:f7:d8:e6:b5:47:41:20:aa:1a:54:26:77:f6:
15:63:79:83:19:a5:6b:f6:17:d1:c1:db:76:b1:49:b5:a3:f2:
6b:b9:77:03:a4:2c:77:5f:18:d3:de:68:cb:6b:0e:54:23:5e:
43:ef:2a:3e:8b:51:10:2f:1d:99:6c:57:78:3f:68:e2:7f:b5:
fc:a0:f6:07:a5:68:eb:af:47:f9:45:fa:5c:f8:f2:62:f6:0b:
27:10:d2:d8:49:c4:30:63:a1:78:4f:ac:37:5c:e0:4e:7e:0a:
e4:06:de:20:c0:09:83:52:0f:b8:ac:87:f8:ac:0a:9d:df:10:
67:4d:68:b7:c4:2e:ca:80:ae:84:af:95:fc:ce:8d:b0:ea:c6:
8b:12:c5:2b:00:e2:9a:8a:1a:2a:20:62:5f:87:3a:fa:28:5a:
0b:46:44:47:c5:40:b5:ae:2b:0e:03:b5:03:d9:e3:fc:59:49:
d7:ef:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:49 2026 by rpki-client