Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: cmM15G3lPYmMq/Z00CUaS8QH5T3Qz+2XJhnD8hhdADU=
Subject key identifier: A2:9A:C3:9A:B8:A7:11:52:9D:07:B2:AE:17:09:C5:31:EC:CB:09:49
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 019CAFB607012B14C2F7172DD0F9DD6C1944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 1123
Signing time: Mon 02 Mar 2026 18:01:07 +0000
Manifest this update: Mon 02 Mar 2026 18:01:07 +0000
Manifest next update: Tue 03 Mar 2026 18:01:07 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: CZ+Jjlh8SX51q4GdEnm0PcOm0QF35Hmvz3MBuMfVjuE=)
2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:07:01:2b:14:c2:f7:17:2d:d0:f9:dd:6c:19:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Mar 2 18:01:07 2026 GMT
Not After : Mar 3 18:01:07 2026 GMT
Subject: CN=a29ac39ab8a711529d07b2ae1709c531eccb0949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:e4:05:44:95:48:80:92:0e:73:dc:46:4e:
b6:ca:5f:b8:d3:b0:df:2d:90:ea:7a:25:68:95:a3:
b9:0e:e3:a6:40:0e:6b:21:9a:9b:5e:91:c0:5a:4f:
e5:93:9b:5c:a3:97:eb:9f:4a:ed:a4:7c:12:da:d1:
17:95:17:52:e6:10:cb:85:24:a2:88:7c:b5:59:51:
dd:1f:d7:ba:f2:92:09:07:e6:a2:d0:9d:77:a1:04:
e2:15:a7:e7:47:0c:1a:22:ab:55:12:63:df:47:67:
c6:80:94:24:85:c9:78:79:19:c1:23:c0:e4:6b:ad:
1f:29:e3:3e:7e:46:fc:59:41:57:dc:78:1a:00:f1:
42:54:8f:a5:d2:b6:89:a5:05:f5:34:8d:64:41:d3:
52:82:da:52:31:0f:da:fe:56:07:37:a7:4a:bc:16:
18:d9:3e:1f:68:b7:66:34:ea:b3:9a:a8:b8:6c:c0:
9a:14:1f:be:51:75:ce:33:c2:b7:b5:49:d6:1c:d1:
eb:7a:71:d4:9c:4f:fa:5d:79:15:9d:a2:47:ae:76:
f8:ad:f9:a2:33:af:2d:b7:99:e0:da:8a:b5:37:f7:
d9:b0:5b:64:31:21:bf:ee:2d:fb:11:57:2d:2f:e3:
45:ec:19:20:15:8a:7a:e7:60:b9:a6:34:bb:08:8a:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:C3:9A:B8:A7:11:52:9D:07:B2:AE:17:09:C5:31:EC:CB:09:49
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:29:81:e1:f2:72:91:86:ab:89:f4:41:13:fc:60:08:44:
59:99:ff:cb:24:d5:83:0d:c4:8f:8c:9c:35:13:14:ff:36:e9:
17:32:85:07:a8:13:2f:61:ce:b1:c3:cb:62:50:9b:75:54:de:
00:7e:f6:9d:18:68:fe:5a:70:02:e3:5a:eb:fb:57:84:66:4d:
a2:be:95:9a:b6:d3:0f:cf:53:ca:36:4a:23:8f:c2:43:44:41:
7d:79:87:2d:cb:31:b3:a3:6e:a7:21:e9:0b:78:c0:38:b7:36:
8f:bd:40:d5:f7:87:3c:bf:25:f2:54:26:2c:a6:d4:e3:9c:60:
b9:3c:2c:15:5b:6b:53:f2:f8:ad:95:4f:2d:1a:de:5e:8c:fa:
11:c2:47:0e:80:9a:43:97:7a:51:aa:e6:a0:60:65:d9:23:1f:
ba:e0:65:8e:eb:23:2e:05:c7:46:3f:4d:ab:9d:d8:07:b4:69:
64:d1:88:af:8b:d7:24:bf:23:0a:99:4d:f7:b3:f2:aa:62:f4:
f4:5b:0d:5c:b5:80:3a:c5:a0:8f:44:00:aa:55:aa:53:03:64:
4d:bd:10:f5:a6:c8:00:b0:79:12:01:58:e3:9c:aa:83:3c:f7:
2d:4e:f0:04:26:b4:51:d2:c0:38:2e:79:ef:aa:c4:fd:5a:fb:
26:af:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:07 2026 by rpki-client