Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: kvkjLCBrZKczlk/oTqTxrxzYSOiHFVyft5lSf77ciZA=
Subject key identifier: 4C:EC:DD:32:2B:34:4B:60:42:6A:C1:E6:79:DA:C8:A1:98:1C:1C:BF
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019CAB6B37C94F54D8FD5246C994FD0326F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 04CC
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: vLZHK56WGuSKlEcuxU97dDFWe7q+IKDIdyKjQGTXoQM=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:37:c9:4f:54:d8:fd:52:46:c9:94:fd:03:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=4cecdd322b344b60426ac1e679dac8a1981c1cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:92:5e:fb:0b:3b:42:9d:b4:f7:21:ba:64:
18:1a:a6:88:7f:ca:dd:aa:7e:b1:40:17:40:05:9d:
fa:3c:51:4f:5d:c2:12:9d:64:c8:47:09:e6:c2:3a:
50:f3:87:51:1d:26:33:1a:2c:e8:bf:b9:b0:bf:f4:
1a:79:ce:6c:b6:be:62:74:fa:b9:e4:52:66:85:1a:
00:97:5e:f7:13:d9:bc:c0:88:ea:aa:a8:7a:a1:75:
b8:b7:fc:60:b6:6e:1c:e5:aa:01:04:09:82:7a:cb:
21:5f:a0:0e:3e:f9:db:5a:12:50:38:8e:29:9e:2c:
58:42:4b:fb:04:1b:ec:4e:4b:4d:b9:d0:12:e8:f5:
a6:34:f1:c1:81:6c:dc:88:37:ac:d0:c7:91:bf:6f:
0d:ed:20:ef:39:c5:f6:68:8f:ec:d3:a2:88:50:8a:
da:bc:2b:d4:75:99:84:00:3d:6a:66:c2:97:6f:6b:
22:ea:82:c0:08:93:6e:35:f2:71:38:09:ed:00:dc:
fe:e5:5e:ca:f9:24:a3:fc:c3:87:e8:bd:10:55:29:
95:f9:2c:9c:79:26:ab:27:fc:8d:c6:ee:8b:17:bd:
06:66:00:21:10:c6:17:08:fb:19:16:f8:08:72:5c:
40:2a:9c:d4:b9:b2:ee:2b:e3:d8:fe:14:83:4e:13:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:DD:32:2B:34:4B:60:42:6A:C1:E6:79:DA:C8:A1:98:1C:1C:BF
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:d6:37:39:d4:9d:cf:be:d0:aa:61:6e:24:71:a2:63:a2:
c3:0b:dd:69:a6:cc:04:4b:72:c2:58:df:a9:d2:be:89:2e:23:
d2:40:28:21:f2:e1:2d:d9:64:fc:ed:2d:ad:a8:11:7c:60:d0:
30:cc:21:10:b9:5f:bf:ee:ce:e7:94:05:55:8d:63:51:8c:2f:
1c:a5:7f:11:09:5a:90:0b:8c:cc:f8:26:25:73:28:ad:95:66:
a2:79:e1:49:59:fa:71:b8:db:c4:23:79:a8:fb:34:27:c5:b0:
4d:c9:e0:50:9e:ba:1b:f4:b5:f6:10:69:3f:8e:4c:bd:4d:83:
5e:61:1c:c4:6f:0e:5e:99:c2:d4:cf:bd:85:25:40:41:62:5a:
1a:11:04:b8:68:ed:b3:e1:a8:86:3e:8d:28:07:e4:58:c3:51:
cb:bb:9c:66:94:1b:21:61:a3:ed:e6:5a:d4:36:06:6f:13:97:
5c:25:d7:16:bc:2f:83:2e:f2:b7:cc:85:18:73:61:17:53:98:
ce:54:ee:65:c8:a0:e6:6c:32:e8:d7:26:bb:e6:ee:5c:02:e8:
35:d6:6d:04:b1:dc:87:d9:5a:5e:10:6f:bf:3f:fb:0d:3d:a0:
5e:93:1d:2d:3f:a4:7f:6d:0a:01:30:8e:bb:d2:5a:7e:12:e4:
e1:91:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:15 2026 by rpki-client