Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: tzdKOyzWQEPuWyClVwJdUtQmbXMxzrQKOcUxMMC0gfs=
Subject key identifier: F3:71:E2:8B:86:0E:FF:78:C7:5D:D7:93:2D:F5:F4:30:E8:B3:F8:11
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019CAA8FDA31119FAE9EF4B78CB8A1BA6838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 172D
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: iQNNzDqWuog6a3O76jQUD5zSzf5OFx1hvxp2HyaTJnc=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:da:31:11:9f:ae:9e:f4:b7:8c:b8:a1:ba:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=f371e28b860eff78c75dd7932df5f430e8b3f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:34:2a:d8:2c:c8:21:d2:80:17:e5:b5:0a:
9d:f3:74:76:b5:78:14:ea:68:2b:80:a5:96:36:b3:
87:8b:e7:ca:16:fb:a5:7f:8f:f8:28:bf:23:ef:7f:
af:95:ad:79:68:76:aa:20:f5:b9:be:c4:6d:ec:3f:
8e:08:9d:03:a7:75:8b:a4:bf:22:3f:db:3e:95:fd:
18:c7:99:07:17:ab:fb:68:37:27:64:83:70:b4:c0:
13:f5:75:ed:fc:0f:48:4e:26:38:6e:c4:57:0f:86:
3a:80:6e:f7:68:94:45:12:8f:cd:66:ae:2a:48:2d:
74:97:72:77:e9:f8:16:8c:86:6c:b7:3f:88:56:03:
7c:a7:37:22:d4:5d:fb:21:4c:e2:5a:63:03:b3:1e:
0e:c7:9a:f7:28:f4:76:d8:d8:38:28:2a:f9:6f:f0:
2e:7d:6d:41:05:bf:15:81:db:d6:a5:1a:10:8a:f9:
c0:39:85:72:ff:3f:34:52:37:f9:79:1e:b2:d0:99:
a7:af:ae:df:94:ca:f9:98:eb:36:62:82:ae:7b:e5:
a8:bf:a0:18:f0:fb:3b:91:8c:2f:34:13:38:78:18:
e2:05:ad:9c:42:6e:c8:ab:59:10:55:e7:3a:87:16:
ee:6c:7a:e5:a7:90:96:6e:22:fe:8f:55:ac:c8:fa:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:E2:8B:86:0E:FF:78:C7:5D:D7:93:2D:F5:F4:30:E8:B3:F8:11
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:94:b1:30:a3:3e:a9:dc:27:a4:58:d2:50:a3:b4:1b:02:
ef:cd:a8:b1:15:82:7b:87:39:ac:a7:10:12:fa:9f:b5:f8:08:
43:65:80:53:a8:37:80:49:a8:91:63:8a:c3:29:d5:ea:7a:ae:
b6:15:5c:06:ec:1e:37:79:49:1a:be:f2:f3:91:bd:3d:a0:fe:
1e:5b:08:c2:2e:43:1a:14:7d:50:b2:86:62:56:86:a7:b8:e4:
43:19:a0:43:30:16:8e:cf:5b:6e:7a:0c:6a:41:86:78:2f:83:
87:e1:7f:30:36:4d:35:b7:03:e0:31:f7:e5:58:4f:45:f0:d4:
fe:ed:e4:1b:f1:b3:9e:1d:fc:86:f7:74:26:4d:05:21:25:20:
1d:07:00:3a:83:ff:c3:91:3e:96:61:c1:e6:e3:04:d2:8e:8b:
1f:11:cd:84:f1:ea:e3:0d:ac:02:63:10:d1:12:8b:2c:d1:a5:
98:9d:81:23:92:06:5b:56:fd:7c:28:31:33:d0:ee:6c:60:53:
c2:24:d4:e8:bc:6c:b2:be:32:83:70:ec:b8:2f:92:13:88:48:
75:3b:13:e9:e6:47:9f:22:03:bc:62:b5:14:8a:76:a6:a5:b2:
a2:9c:cf:c1:68:c8:ad:25:45:af:ae:d2:8b:23:63:01:ae:e6:
bb:69:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:06 2026 by rpki-client