Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: FB9KQ5HBLgVVv7tbLw8GJubJq9LJoSV+UuRPI+t9ElM=
Subject key identifier: 28:BF:B0:A3:92:C1:F2:CB:5E:69:52:BB:B3:E6:F6:FE:C9:9A:3C:83
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 019CABD9BDCE6193AF3DE9368B7EA6C6DE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 07C5
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: lPhICk6uR7v6OrKOMuBcLyGqnGOr9RJFsdBhCj9GpvY=)
2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bd:ce:61:93:af:3d:e9:36:8b:7e:a6:c6:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=28bfb0a392c1f2cb5e6952bbb3e6f6fec99a3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:1a:1b:9a:e0:95:34:63:91:0a:7b:82:e6:
95:ea:f9:60:b9:a7:55:72:3b:8d:8b:1f:fd:78:ec:
0b:16:ae:87:ea:4a:a9:09:b8:22:86:35:a1:74:a5:
c1:3f:cf:ee:79:71:c5:e7:ec:1f:ce:da:3c:70:1d:
63:f8:12:7d:da:d1:e0:ca:34:98:47:97:6d:66:44:
4e:66:de:06:17:d1:02:9a:47:b6:28:47:87:f0:bb:
54:f6:b3:92:7e:fe:27:ee:cf:e1:d9:42:bd:63:8b:
9d:20:dd:ae:e8:a4:37:42:46:87:0c:f7:73:69:b4:
3e:5d:89:8a:40:e2:00:f4:e2:82:ac:58:19:db:43:
66:16:21:5a:42:98:86:19:97:9f:93:0e:0e:e9:e9:
de:39:05:6d:c0:6e:46:31:27:ee:3f:95:78:70:ba:
72:ea:8b:bc:34:51:07:41:17:e7:fc:78:33:85:32:
cf:34:8a:4e:de:25:f2:58:16:b3:44:49:40:d7:3c:
22:56:6d:95:e5:0d:82:9f:75:b7:ce:1a:b1:89:82:
4d:9d:c9:8a:be:46:db:b2:8b:65:55:1c:77:b6:d9:
26:0c:2c:60:86:25:32:88:d0:79:fe:d1:a7:c6:37:
3c:f9:f9:5d:7c:36:e6:7a:5a:c2:d6:72:0e:55:6f:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:B0:A3:92:C1:F2:CB:5E:69:52:BB:B3:E6:F6:FE:C9:9A:3C:83
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:62:eb:88:82:37:d8:58:88:ae:bf:57:f3:bd:d4:a4:9a:
a9:d6:0c:9f:db:41:ab:cb:7a:94:cd:ef:b7:54:da:67:e0:c2:
f0:a6:84:f1:e1:3e:0d:48:45:9f:b0:31:38:ff:86:6e:7b:c3:
61:ec:c0:3c:07:38:55:63:f7:9a:90:f3:24:ac:6f:6c:bf:28:
eb:44:05:f6:35:be:62:46:48:bf:ae:9e:40:e5:a4:8c:b6:35:
9f:e7:4c:2b:ae:fe:dc:f1:04:a3:49:98:66:49:e1:3b:8b:47:
b9:90:0c:cc:dc:3a:e1:61:7c:38:33:ec:38:d1:95:cd:59:b6:
1a:b5:d8:cb:bf:f2:d3:80:36:3e:42:78:3a:61:e1:02:0a:43:
36:51:64:c3:1a:65:08:0f:3b:0b:d2:7e:b9:0e:a5:5a:fb:e9:
3e:4b:16:73:c7:73:62:6f:25:51:58:28:1c:44:37:24:6a:54:
5e:01:91:ed:77:74:cd:0d:d3:f3:03:e5:e2:d5:33:fa:bf:61:
9e:32:ce:22:13:89:6f:b7:a2:4b:b4:02:97:f4:99:bc:f9:4b:
13:34:7d:6e:4f:18:40:9b:11:80:e5:e5:a1:f7:aa:44:c9:3d:
68:20:c4:91:02:15:2a:ef:d0:d7:98:e0:02:41:1a:0e:b0:7b:
f3:2d:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:16 2026 by rpki-client