Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: 4Jnxepccv7GBfRg0MSfprTnmr4zUVKSFaykuekjEBmw=
Subject key identifier: 18:E0:D9:EA:04:ED:E5:47:B9:32:A3:12:2B:F6:8A:A6:FB:E3:F8:82
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019CAA589028B4310B8BF850EB9986A4EF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0C71
Signing time: Sun 01 Mar 2026 17:00:56 +0000
Manifest this update: Sun 01 Mar 2026 17:00:56 +0000
Manifest next update: Mon 02 Mar 2026 17:00:56 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: Lr5QCMPNc5N/4boLMI9qQB5MZ2zRR9z22iTFqkqYVLQ=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:90:28:b4:31:0b:8b:f8:50:eb:99:86:a4:ef:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Mar 1 17:00:56 2026 GMT
Not After : Mar 2 17:00:56 2026 GMT
Subject: CN=18e0d9ea04ede547b932a3122bf68aa6fbe3f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:2b:d6:ca:4b:ec:3b:0e:2a:94:89:5f:50:
76:ff:25:d7:6b:25:08:73:7f:1d:d2:95:17:1f:56:
6a:43:11:20:86:5b:cf:6d:1b:b4:b4:e2:69:b8:6d:
e7:a3:92:1e:8c:26:05:7f:ca:d0:f4:6b:02:eb:20:
53:17:7f:71:80:41:a5:3e:c3:b2:dc:5e:ea:e4:a7:
b0:db:02:a2:d9:4c:c2:0c:86:7c:c8:ea:80:39:3b:
8e:a5:46:76:0a:73:7b:38:bd:f3:6f:92:b0:27:c8:
cb:6d:a3:31:eb:75:81:eb:cf:bb:e3:69:f9:17:7b:
50:22:e1:ae:c9:fb:1e:99:39:30:eb:c2:74:57:ce:
fc:69:94:8f:9c:7f:df:69:22:71:7a:4b:86:29:77:
95:f3:29:b0:de:41:87:41:1f:ac:77:81:df:f9:61:
41:2c:2e:07:9b:3a:28:86:37:04:5c:29:99:85:f6:
04:19:f8:6c:2f:20:d5:52:34:d1:b6:9f:be:91:de:
07:99:35:68:7a:5f:57:1b:18:84:6f:fe:9e:d0:06:
28:3d:c0:61:2b:d7:f5:ac:90:90:64:2c:76:96:fa:
d6:e4:09:b2:6b:7f:61:cd:a2:c2:ca:6b:65:77:04:
59:db:4a:7c:e4:d8:24:92:20:2b:63:83:4f:7e:f8:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:D9:EA:04:ED:E5:47:B9:32:A3:12:2B:F6:8A:A6:FB:E3:F8:82
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c2:ef:dd:8f:f5:f1:3a:f2:a5:4e:9b:1c:a5:aa:44:f1:b9:
7a:c5:a4:b5:5d:41:fb:8f:5f:67:7c:19:d6:38:dc:a0:a4:0e:
94:b8:0a:03:e4:f5:17:0e:84:b6:5b:6d:49:f7:eb:d6:02:fe:
d7:c9:fe:ca:48:a0:09:31:65:67:55:17:bb:58:aa:4a:dc:94:
51:61:79:6f:4b:77:19:fb:e6:56:fd:f0:ff:de:47:54:83:a4:
74:e6:c6:a6:58:43:8c:af:89:bc:06:f3:4d:40:b1:6d:3b:9d:
c6:bc:aa:89:46:e5:10:07:6f:ad:b8:3d:b3:f1:a9:e6:9a:3d:
85:aa:d6:3a:4c:c3:05:46:c7:98:4d:57:c1:15:7c:3e:e4:3c:
72:9a:6c:c3:ea:d9:12:c3:7a:1b:3a:45:16:ca:c3:3e:5a:d2:
fa:09:4b:b8:be:65:39:6d:2b:6a:be:fe:a5:ab:0d:eb:c1:e5:
0d:20:3e:18:ca:85:7e:fc:95:18:67:17:e7:15:b7:95:b7:af:
0c:22:be:8f:da:1a:c8:ee:d4:da:ce:7f:ac:75:15:1b:2a:99:
04:a9:38:80:d9:a3:50:25:28:94:16:09:d7:15:da:bc:2b:8a:
c7:d1:82:ff:d9:ff:f4:09:21:95:de:87:f6:7e:c1:ec:80:f7:
e5:1f:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:06 2026 by rpki-client