Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: LSRXQfVfpZj2g6TDjyxdQYd4NST321nX6lPoq02ZU5o=
Subject key identifier: 51:19:65:93:64:CA:1E:FA:DB:81:1C:46:69:75:AA:9A:2A:B7:59:54
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019CA9EA8071EA5458D1BE544AA2B19B80B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 0902
Signing time: Sun 01 Mar 2026 15:00:43 +0000
Manifest this update: Sun 01 Mar 2026 15:00:43 +0000
Manifest next update: Mon 02 Mar 2026 15:00:43 +0000
Files and hashes: 1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=)
3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: j0MYa1PqG3SZuGwKC2QEs1lfEz36b9N7g+cml9hhFCE=)
6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:80:71:ea:54:58:d1:be:54:4a:a2:b1:9b:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Mar 1 15:00:43 2026 GMT
Not After : Mar 2 15:00:43 2026 GMT
Subject: CN=5119659364ca1efadb811c466975aa9a2ab75954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:fd:4e:58:5d:aa:75:56:88:07:1c:23:68:
22:20:6a:b8:ee:01:d2:ed:eb:1a:ad:f5:41:51:f5:
a5:19:89:97:96:86:ab:d6:93:90:32:24:06:f1:15:
d2:87:e7:99:6b:49:02:42:d0:be:4c:d5:0d:28:d9:
ab:64:5d:32:4d:93:4f:24:88:94:4d:2e:4a:28:12:
2d:03:fc:22:b7:7b:40:a4:b1:3f:17:0a:a2:dc:44:
df:bd:cc:d3:4d:9f:78:63:ca:73:61:69:f8:13:2a:
6e:f9:51:66:52:c6:f8:43:52:70:d0:c2:9b:b0:b6:
56:7e:b6:52:12:97:7a:38:b3:2f:32:f6:0e:f8:05:
82:71:fe:e0:4f:83:4b:36:82:fd:b3:00:c6:8a:d2:
57:ef:b3:1c:23:4c:66:19:50:52:40:53:94:d1:28:
4c:26:4d:20:e5:ad:23:db:9d:44:b9:02:9a:93:12:
48:bc:d9:85:1d:72:f6:9c:6e:e2:0a:d7:ef:3e:d3:
1d:38:f3:b6:5c:ce:61:59:9a:59:76:11:1e:23:38:
f7:2e:83:8d:85:75:f6:b1:45:2e:9a:41:68:fb:89:
15:f9:c6:69:af:1f:68:96:2f:51:dd:d1:2e:bf:96:
15:f5:e7:3d:27:34:16:b7:ae:14:32:96:f9:60:57:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:65:93:64:CA:1E:FA:DB:81:1C:46:69:75:AA:9A:2A:B7:59:54
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5d:74:23:39:89:4e:0f:2a:6d:1e:68:68:44:cc:4b:d5:57:
97:4e:c0:b6:62:1c:c5:e1:59:d2:51:01:5a:3b:d4:fc:af:15:
01:ef:45:d9:9c:31:01:ab:d1:05:79:0e:f9:7f:dc:0a:3d:ec:
50:6c:58:4f:c0:52:1a:b3:52:bf:e6:46:d8:36:e6:42:31:0a:
a8:d5:8e:d0:97:62:88:d5:d0:69:67:dd:2c:fc:db:51:fd:44:
7a:1b:72:0d:3b:27:d7:1c:70:f8:29:fd:b1:17:4d:9a:c2:3a:
d5:21:07:90:8f:70:14:b1:0c:56:8a:97:d1:03:37:e0:2c:96:
ac:b7:ad:cc:b3:ba:b3:8f:3d:46:4e:40:1e:d6:3e:aa:3b:7d:
88:8b:61:e3:26:1c:7d:cb:e7:51:89:33:21:17:b0:a0:e1:c8:
b9:f8:aa:a0:20:52:d9:28:95:96:a4:a9:b3:71:6b:e2:7e:b9:
72:a8:40:4a:69:4a:d9:20:58:bf:ce:3a:73:de:cc:4b:ae:30:
00:0b:a0:c3:c3:36:7c:9d:62:81:76:5f:49:42:ef:fe:68:cf:
a2:69:d2:1d:59:9a:91:18:d6:a8:38:e1:ec:a2:e6:8e:79:2e:
d7:94:43:17:bf:3d:e7:8a:12:34:7d:1b:af:eb:56:0b:ec:0f:
2a:09:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:15 2026 by rpki-client