Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: EqGtZ/qxjwJvT2ZI+FNDu3M4AUc+G/+kekg3HL16KBY=
Subject key identifier: 26:B5:84:6C:06:69:83:F6:C4:3B:F1:9B:1E:3B:59:CB:4E:C6:15:28
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 019CABA253C0BEB9845C5C42E347536EFE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: R2pWyKLQnuJO440HYgHQxABWHb/sPsjELyLcvDK3PsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:53:c0:be:b9:84:5c:5c:42:e3:47:53:6e:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=26b5846c066983f6c43bf19b1e3b59cb4ec61528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:76:cb:0e:94:ee:58:ec:50:1e:99:74:86:
8f:98:0f:35:22:c5:57:80:21:fc:e8:28:1b:51:ef:
9e:43:a6:26:ad:f5:33:37:74:28:c1:34:3b:25:b1:
0c:5c:39:df:da:3c:ec:cd:e7:2f:cc:43:62:21:7f:
ab:bb:ac:50:cb:6b:2e:14:99:ba:f9:ae:3f:4d:aa:
8a:6b:17:0c:8a:70:cf:d8:c4:f9:1c:90:8e:14:0a:
8a:0c:21:f3:00:76:da:47:76:cb:00:0c:79:8e:1f:
90:8b:49:9e:6a:d1:11:56:b8:33:53:d2:bd:41:fb:
b5:9f:bd:d6:f0:34:2f:3b:1b:95:a4:e2:da:29:46:
f7:d1:0e:05:0e:4e:b0:1f:79:ef:a8:32:45:99:90:
a2:8f:5a:33:48:f3:13:f0:8a:41:8a:92:81:a8:b7:
7b:31:7a:02:0d:1c:d0:dd:34:37:b6:7b:19:2a:01:
35:be:f0:35:a1:b9:2a:f2:74:6a:80:ba:3f:23:6a:
ce:5e:d5:6f:c4:c8:a1:5a:8e:25:e0:c0:db:18:9c:
23:4a:ab:73:21:a1:7e:2a:1f:32:7f:c8:87:ef:c8:
ac:a6:f3:72:82:02:39:bf:8f:a9:5a:e7:8e:8c:a8:
2c:18:6c:29:97:a5:f2:54:17:5c:17:82:ab:95:80:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:84:6C:06:69:83:F6:C4:3B:F1:9B:1E:3B:59:CB:4E:C6:15:28
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:30:bb:9a:31:91:c0:2a:8a:96:b8:e2:3a:40:f7:93:06:c8:
c1:76:07:be:6f:a3:7f:80:42:a6:55:10:ff:5e:10:72:dc:17:
f8:9d:f3:0b:83:e9:8e:89:76:44:1d:ee:dd:a2:cd:c5:75:23:
40:1d:ba:08:d0:be:0c:6e:dd:bf:ac:7a:24:8d:bc:a4:b7:ff:
45:f0:0e:74:3c:55:7a:df:57:91:b4:db:4d:01:a2:37:d5:e8:
1f:7a:48:4d:58:bf:a3:df:75:f4:1a:89:33:eb:f9:7a:b7:1d:
a4:4d:78:01:c6:9c:8c:dc:17:d9:9a:70:43:0f:9a:8d:0e:ec:
f7:16:8e:f3:9c:0f:6e:6e:ca:16:56:22:14:b4:e7:ae:24:2c:
24:d2:5c:54:dc:f0:90:ee:86:86:fd:d1:e6:d8:04:26:22:3e:
29:b2:a9:c6:de:26:57:f3:3b:ff:b1:c8:27:5f:91:11:be:7a:
7b:1b:94:14:47:33:86:8a:bb:aa:a7:c1:42:a2:26:1a:6f:42:
77:f6:84:a0:ea:4e:c3:a5:af:3d:63:f9:fd:c9:6a:6c:be:10:
45:be:c1:cb:3d:c5:24:64:ee:17:af:ce:0d:49:1c:22:18:5a:
ff:81:93:6f:34:67:3c:42:e5:6c:62:7e:e4:12:63:31:66:16:
d3:0b:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:38 2026 by rpki-client