Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: 3U1///05PecySv6QwgLYstyhpahuyu57YJRjyjxUx0Y=
Subject key identifier: D7:29:57:E1:05:C0:08:43:9D:97:44:6D:F1:47:07:CF:38:3B:3D:8C
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019CAB6B12440D57F4899BDA6A988528246D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: 2W41DB8m20tmAfMnFcdfQgZsdomTQL4cYS/6VgJ7kL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:12:44:0d:57:f4:89:9b:da:6a:98:85:28:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=d72957e105c008439d97446df14707cf383b3d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:61:ff:8a:d6:de:ad:96:4f:ce:0b:d3:a1:
5b:08:00:a5:09:a3:a7:94:34:39:93:1d:f3:55:9f:
70:e8:85:91:ed:35:bc:58:10:82:8f:d5:de:81:d9:
0f:5a:c9:c7:ac:a4:95:6c:a0:4b:cd:b5:51:b0:03:
83:5d:9c:3a:bd:39:2e:29:91:ba:df:93:5a:8d:1a:
72:ff:c2:f0:8b:77:09:0c:fe:26:5c:ad:e3:0a:8f:
b5:e0:91:2d:3e:ef:53:63:b8:c0:79:31:ff:85:e4:
d4:c2:54:ca:7a:9d:78:f5:eb:b9:88:e9:1a:b2:5a:
11:ad:7f:b4:44:80:51:3d:c9:ca:a4:6d:ac:f2:50:
4b:0b:2d:c0:7c:4d:42:b9:eb:52:0d:3d:57:d7:ac:
a9:15:30:d8:dd:ab:98:d0:6e:a2:d9:e0:fd:8d:79:
18:a8:8d:5a:2f:f0:60:35:e9:60:2b:9d:ca:17:c4:
fa:72:45:3a:80:45:e2:22:e9:a1:de:0b:fb:9f:ca:
50:92:19:9d:b7:cc:d5:b5:bf:91:11:bd:94:99:6e:
3b:3f:d5:7a:09:a2:1e:b1:df:0a:68:5b:05:d9:00:
50:0c:77:ea:4e:ec:79:5f:42:02:f3:c3:2d:aa:dc:
ab:44:2e:cd:d1:ec:31:2a:59:62:f5:17:8b:31:f0:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:57:E1:05:C0:08:43:9D:97:44:6D:F1:47:07:CF:38:3B:3D:8C
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:87:75:e6:41:df:3f:9f:dc:3b:4e:de:e3:ad:f6:9f:a3:bd:
e2:ee:c3:0d:c5:d2:d0:7e:fe:22:23:82:41:32:e0:4e:f7:5d:
9b:fc:96:87:11:f1:97:df:c5:b8:c8:a6:bc:d4:47:bf:d3:11:
71:86:9c:19:53:44:ae:7c:85:a2:34:30:db:92:96:08:70:47:
a2:0d:4e:77:2a:1b:c5:f3:aa:b7:05:87:e8:2e:7a:da:04:50:
e8:b4:c8:7c:b7:13:1b:30:b8:38:3c:db:5f:fc:a4:e5:7c:55:
31:36:da:b4:bd:11:4b:cd:b6:42:b5:f9:27:18:b0:fb:61:07:
cb:7e:30:07:5d:ce:5f:81:cc:fa:7f:91:e3:25:72:33:0c:1f:
1c:d0:b8:eb:22:d8:8e:10:3e:39:4c:64:88:a5:f1:13:89:b2:
e7:fa:22:d8:16:92:e3:98:5a:22:b6:ec:8d:bd:12:10:64:01:
1d:8a:c8:19:9e:a1:8f:9c:3f:e8:f6:02:69:81:5c:c5:3f:bd:
52:bc:f8:db:41:e0:62:39:0b:72:92:47:c7:33:68:aa:64:5e:
2f:d9:8c:25:b9:cd:6b:77:92:bb:d0:06:06:ee:c6:7b:1c:96:
76:80:28:40:1b:f4:18:99:78:58:6f:4e:a1:28:fb:2d:0c:48:
3f:de:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:37 2026 by rpki-client