Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: jujf66918RFfhlZOx1diSQ1V48JabjAJzSCMXgGSmes=
Subject key identifier: D1:E9:15:53:2B:8D:A7:D4:B3:F4:04:1B:35:61:19:98:57:D9:66:9E
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 019CAB3420F425305F48F0FFF8D79B0C207C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: HiufJJrhyGKy1KJsNi2R+LBVEarNqXaDxdjlnjm0xyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:20:f4:25:30:5f:48:f0:ff:f8:d7:9b:0c:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=d1e915532b8da7d4b3f4041b3561199857d9669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:96:11:b0:10:cc:fe:e4:5e:4a:89:11:49:
48:6d:1e:2f:46:5d:00:b1:d7:9f:20:e2:b0:7b:3f:
82:c3:d3:39:59:12:ab:e8:30:64:27:d9:53:36:0f:
a4:24:66:ad:a3:75:20:a0:67:9e:72:f7:e3:bf:ea:
11:d9:6e:48:f3:6b:a2:07:9c:4b:27:e7:fa:fa:e8:
7e:37:57:19:fb:83:8d:45:e8:ed:c9:60:1a:fe:6e:
fb:66:86:3b:48:9a:90:ca:9b:31:e4:74:f3:df:55:
12:5e:34:fb:1f:17:6e:cc:a5:a7:45:dd:7d:1e:be:
c6:84:e4:8f:a0:bf:1f:3a:18:18:92:5d:0a:20:fa:
fb:5f:93:6d:55:ab:46:3b:fb:82:9f:8e:79:53:41:
0d:1a:72:ae:bc:9c:e4:a6:c2:d7:21:c6:09:07:44:
ee:30:d3:1e:1a:a2:6b:51:1d:22:f5:91:e7:12:d6:
25:16:21:7b:33:f2:a9:06:30:7f:38:8c:d1:31:cb:
b1:e5:06:74:43:1b:bf:58:d9:1a:19:74:ea:2f:a5:
6c:d3:06:09:73:cc:a3:73:15:79:16:32:a6:61:98:
b4:b8:77:18:f4:e2:50:0a:df:75:4b:bd:fe:8d:22:
5b:05:22:8c:46:d5:6a:49:81:c4:67:cf:bb:35:59:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:15:53:2B:8D:A7:D4:B3:F4:04:1B:35:61:19:98:57:D9:66:9E
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3a:8f:0d:0a:0f:b8:38:b6:ed:c7:b5:4f:a5:7e:4b:6c:3e:
5c:fd:6f:08:1f:92:28:77:95:03:92:e0:57:6d:dc:ef:cb:07:
b8:14:0c:2d:48:56:d6:81:a9:24:a3:44:a4:a0:55:6c:fa:44:
19:4e:74:5d:96:f5:81:34:c7:ee:e9:44:b5:68:22:52:f6:ed:
e2:e7:24:27:78:91:8e:8d:e9:9a:11:2f:f3:dd:4a:29:3d:ce:
77:41:a4:a8:dd:da:4b:f8:48:c1:3b:7c:6a:58:f6:9c:7f:76:
92:d3:94:8d:ab:21:12:c8:9e:9e:6b:aa:7f:0d:a0:c6:ca:b3:
3c:10:74:23:aa:d7:93:6c:71:0d:8c:78:5f:2e:a1:fa:4e:d2:
0e:35:eb:a1:6a:f6:4b:18:e5:5e:56:d1:64:cb:1c:93:c7:39:
0b:8e:0e:7c:90:67:99:3c:11:84:4e:e4:4c:19:82:e3:88:8c:
b5:09:39:87:5d:f7:77:c1:f7:3c:1f:22:58:09:a5:e4:25:9f:
29:41:e8:e7:32:e4:ef:a1:92:ee:e9:2f:4f:bf:58:83:ee:5a:
09:24:b5:7c:5e:bd:a6:f1:3f:87:7f:51:56:52:27:5f:a1:67:
2b:8b:5e:51:fa:c1:6c:a9:0b:7b:0d:4d:d5:34:e2:93:b3:ae:
68:2d:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:10 2026 by rpki-client