Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: wvQOPRBNUHSHSugcoUjrD7lOuUcdoFOXok8fInHSMu4=
Subject key identifier: C2:92:AD:F1:66:89:A3:3D:99:D8:8F:80:31:84:57:98:FD:DB:01:29
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019CAAFD8126F527841573AC22EA7E0BC70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0EF1
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: QFY0JdkqZACX6DbQrMuCDT111r8.roa (hash: 8ei2JwlhItg4y3r3m8oI+dJmgo/uwKKNh5cafYIl8Iw=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: 0HmqD1NDRjPa01ynWlb06covml0raHroFvc5vNWEHCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:81:26:f5:27:84:15:73:ac:22:ea:7e:0b:c7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=c292adf16689a33d99d88f8031845798fddb0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:e5:94:89:bf:be:5c:99:30:14:8b:a2:a1:
d3:27:50:7b:f1:a7:8f:d3:92:5a:92:20:ae:2c:70:
4f:a0:18:94:8e:ec:16:47:b4:2a:ff:8c:14:eb:bf:
33:44:7a:e6:30:70:9f:91:67:bc:db:97:89:68:cc:
89:22:c2:e1:32:ac:eb:a4:ce:ec:e4:b3:5b:1b:5b:
36:4c:ed:3d:5b:22:f4:a1:de:e1:b6:62:01:ff:7d:
8b:b5:be:82:5a:e7:15:fa:f4:52:a6:af:4a:db:ea:
a5:7a:ed:2a:a8:d1:19:68:f2:a6:22:a0:c6:2a:e6:
55:93:9e:b0:8e:13:42:11:39:21:bd:57:68:f7:a4:
e7:9d:2a:88:d6:6c:ac:46:be:61:f8:2a:70:4a:e5:
fe:b3:ce:82:fe:83:41:41:69:d2:94:c9:42:91:4c:
73:0b:11:41:20:6d:82:5a:59:a3:6b:29:cd:a5:bf:
1d:42:c8:1f:71:e0:c2:59:1a:af:e5:47:ab:a7:fa:
23:56:51:0d:1a:b2:23:ec:e3:e9:78:dc:30:28:8a:
33:79:20:e2:e6:8c:e2:d3:c5:57:2d:d1:03:22:70:
d7:dd:f0:9b:f9:47:48:c0:fa:e3:44:b2:87:cf:07:
3f:10:fd:6d:70:48:29:37:b1:a6:71:e8:39:ab:27:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:AD:F1:66:89:A3:3D:99:D8:8F:80:31:84:57:98:FD:DB:01:29
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f6:fc:66:44:6c:7e:63:57:83:79:22:11:19:aa:fb:e1:29:
85:b5:5f:39:8e:ee:42:d5:a1:13:36:62:59:7d:bc:31:0d:4f:
4e:f8:d9:57:40:69:e8:fb:59:09:b5:bf:d0:c0:78:a9:24:f5:
ce:ae:bd:9e:72:0e:d1:33:f4:42:78:5b:53:cd:c3:b4:ba:57:
1c:0f:62:70:c4:4d:e1:59:1b:65:21:4e:ef:0d:da:c4:cd:84:
fe:33:8e:49:ce:1a:84:96:06:d9:ee:fc:f4:0a:ba:10:36:13:
54:63:1d:4e:4c:d0:f7:86:6e:50:cf:4f:1b:52:ea:b5:30:01:
8d:65:0b:bb:75:82:82:ba:81:46:1a:73:43:68:15:24:9a:c5:
1b:16:71:09:2a:2e:ff:40:a3:98:eb:77:14:32:b1:59:7a:87:
4b:32:d6:ed:0e:23:75:54:7f:da:63:c4:7c:e2:7b:89:b0:d4:
8f:42:a8:78:72:79:36:21:31:e6:d9:21:40:be:a6:64:a5:2f:
16:8c:ae:d3:9d:09:4a:ea:61:04:12:aa:f0:0d:27:e7:4c:69:
9b:57:62:73:6c:8b:6f:1b:49:53:a2:76:9b:78:bc:d4:13:bd:
93:20:39:ca:ee:8e:6a:e0:0e:b4:7b:41:1a:ae:7e:41:06:34:
13:74:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:44 2026 by rpki-client