Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: lIVXfVb3thH7k4o8FJ5IzJg/5Tzm1AZ8LHT6ivpbRTE=
Subject key identifier: 71:6D:48:27:BE:B3:51:29:17:D6:8F:10:DC:96:B0:D8:05:61:F1:E8
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019CAB6B56BB0E902344D785996415485B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: t9/Hxb5eO788Zxn6p9ThYIDHUnoa9bfCmz8yC3HXBRA=)
2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:56:bb:0e:90:23:44:d7:85:99:64:15:48:5b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=716d4827beb3512917d68f10dc96b0d80561f1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:b9:ac:cb:5b:65:32:be:d4:d5:3c:c6:09:
b3:fa:65:3d:d1:f9:66:f9:83:a3:36:76:bb:e5:a8:
37:52:5d:6e:7a:05:30:cb:86:76:01:18:a8:82:80:
d9:a7:c3:ef:42:d1:b5:c9:84:b6:33:49:d7:57:f8:
c5:4c:63:d3:3d:8b:27:9b:c5:72:1a:b8:4c:36:bb:
f5:77:48:98:45:9b:f7:88:c2:20:27:74:53:b6:82:
fb:0c:5f:5c:16:5e:8a:56:78:45:96:aa:70:ac:42:
e5:5e:36:5e:39:35:7a:fd:d4:b6:25:25:30:29:1b:
5d:33:e9:86:b2:b5:44:75:e1:f5:6c:91:47:d6:91:
3a:c0:09:05:26:02:74:81:04:3e:4d:27:35:95:eb:
ae:e8:24:5f:d1:0d:01:e7:1a:e8:2b:6e:f1:77:2f:
f5:ff:e6:85:85:c3:96:ca:f3:d5:70:7d:b4:72:be:
59:23:e9:c5:4a:f3:d8:6a:68:54:bb:01:89:b0:4d:
c7:59:5e:2d:68:97:6a:34:0e:90:b1:db:f5:22:15:
84:15:30:62:e8:6a:f4:34:86:1a:4b:5e:aa:37:64:
ac:28:58:ed:45:b6:6d:63:f5:3f:61:2e:1c:a5:f1:
84:4a:96:a3:46:10:0e:9d:6c:4a:ae:ab:67:6c:a6:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6D:48:27:BE:B3:51:29:17:D6:8F:10:DC:96:B0:D8:05:61:F1:E8
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:c8:d8:62:e5:5d:26:dd:f2:bc:9c:38:6b:00:e5:e7:7d:
b6:42:ba:18:92:e1:43:81:95:39:90:7a:25:ac:1f:78:82:df:
e7:c1:02:8b:27:4c:b8:0a:7a:8c:e2:d6:ea:fc:3f:1a:a3:aa:
bb:72:6f:7c:90:a7:71:28:5a:7e:8a:7e:19:84:4f:76:37:a7:
fb:eb:20:cb:38:66:76:20:19:85:97:54:f1:75:71:3c:c3:89:
24:22:2e:61:d3:fa:31:20:c2:84:a6:db:64:c5:83:e5:5e:58:
00:14:e9:6a:bd:59:70:a5:32:4f:f9:2d:f8:34:bd:67:6c:8d:
2f:a8:4b:12:38:13:50:b3:32:98:90:fd:1e:8d:f2:48:62:1c:
c6:7b:f9:c3:8a:ab:e3:67:67:c9:75:b2:87:2d:bb:53:e1:bb:
6f:8f:26:51:f2:89:1d:85:de:65:90:02:78:49:41:04:d4:44:
7a:6a:71:d2:b9:18:73:94:0f:dd:81:9a:30:b0:37:52:0e:40:
3b:69:33:d8:2a:8f:7f:0d:25:a4:07:0a:ed:ef:22:38:80:76:
16:f9:df:d7:df:10:10:96:50:1f:88:0f:15:cb:66:8c:d4:3b:
3b:c5:ab:67:e9:25:4a:db:2a:2a:94:cf:05:4c:97:75:47:53:
76:4c:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:09 2026 by rpki-client