Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: 4WVYfd83Q/gBb2FxHl3AGn4KQ/c8Yz/ISYt8OpbDzy8=
Subject key identifier: C3:D0:86:B2:B7:3D:A1:6E:94:AE:EC:F4:46:35:2A:02:16:A9:B8:C8
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019CABD96EBD23DE9CFDB692C35F7EE3403C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 12F8
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 9CnEXCPz5b2GFnN6G2gCMiuXrNv221jbnW+REJoNK9s=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6e:bd:23:de:9c:fd:b6:92:c3:5f:7e:e3:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=c3d086b2b73da16e94aeecf446352a0216a9b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:d1:07:01:d3:70:12:e6:78:d7:ee:7a:e5:
d7:2c:68:56:50:a5:d0:f1:6f:34:d8:35:16:7f:5f:
61:17:30:2b:c8:69:07:2a:27:de:71:46:1b:d9:08:
08:e7:2c:5b:2f:3c:8f:9a:a4:7d:cc:a8:9c:d9:dd:
f5:7d:d9:90:8d:fb:fa:de:96:1f:ae:ed:ac:7f:7a:
c7:2c:7b:9f:34:68:07:1b:89:f2:79:db:07:e3:c8:
fd:e5:e7:20:20:ea:34:24:15:53:ae:3b:e8:31:3b:
b9:df:fd:2a:80:e1:6c:5e:89:5c:9b:87:87:2f:7d:
69:18:00:e0:1b:ed:a2:b4:57:24:aa:99:91:91:5a:
92:59:13:3a:68:ea:02:2c:bf:49:a1:d4:7c:aa:03:
f0:f4:a4:d0:76:75:24:ec:95:02:5b:2c:31:ab:22:
27:96:5f:c5:be:f4:34:ca:62:e5:1e:12:9d:4b:80:
63:d7:3f:fa:02:fe:39:e9:1b:ac:be:0c:c3:4f:3e:
aa:22:ff:07:7e:e0:a3:e4:c1:27:4e:a4:3c:2e:dc:
ac:1a:2c:f4:2f:6f:43:5b:1a:97:79:f6:68:78:81:
1e:eb:38:36:8b:80:f9:b4:b8:a4:2e:57:57:e8:5d:
73:fd:1a:cf:2e:12:69:bf:ad:69:cc:aa:32:99:11:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D0:86:B2:B7:3D:A1:6E:94:AE:EC:F4:46:35:2A:02:16:A9:B8:C8
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:87:59:bc:8e:a7:0c:b5:55:8c:29:e7:e4:d4:5f:f6:86:c8:
a9:df:9c:ac:8e:97:30:ae:06:c3:e6:69:d8:0b:0f:c6:bd:60:
83:22:6c:d6:f2:1a:54:6e:8a:42:28:ef:f4:53:18:de:e5:8b:
81:48:ce:e0:a4:a5:4f:f4:f0:38:3c:04:1b:8a:30:18:be:9b:
ec:07:67:31:a4:70:14:dd:d6:8d:42:1e:18:cc:2f:9c:31:8c:
c3:b6:18:b0:26:61:ca:f4:f6:81:54:3b:af:2c:20:2b:1c:f8:
33:0c:b5:13:0e:53:19:da:7a:6d:fa:b1:49:03:aa:c1:09:1a:
1d:46:1b:d8:6c:77:ee:4b:b3:7d:70:b7:88:f5:43:03:f0:99:
6c:f1:7e:69:7b:5b:f2:44:91:3a:0e:2c:8b:91:c6:fb:10:51:
5c:ea:bf:11:60:2c:3d:78:a9:30:ac:0b:f6:f8:4c:fa:ec:98:
46:fe:15:b8:5a:10:4d:a4:6a:1b:ab:f7:ec:9a:91:a9:64:8f:
8e:a0:9b:36:cd:a6:83:4c:f4:2c:d5:e0:b5:47:78:68:f1:4c:
64:d3:c2:b0:20:19:b8:0e:12:c2:e6:33:8c:5f:03:38:08:08:
57:27:54:35:b2:0f:58:ac:0d:c8:22:3d:46:b4:10:73:45:99:
e7:22:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:14 2026 by rpki-client