Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: ycnqVwRld5Jgl6WR58ccbdJndTm36R14q1eT7+hF2H8=
Subject key identifier: 8E:AB:B0:13:BB:FF:31:96:DC:85:8F:13:3B:1A:63:63:3B:05:CB:BD
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 019CAAC646FB956B3D79911B9251537C122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: aNX/XDwoIXpYcDW0LGxjNlU2OZoTorSYGvIvM159KZc=)
2: c8FU8IlEAOdvntJIHy0ItaZdOhs.roa (hash: KkzTKPSTQ7S8XEiV0czmvnh+d+qBGKX4Bc+ANaJ+zBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:46:fb:95:6b:3d:79:91:1b:92:51:53:7c:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=8eabb013bbff3196dc858f133b1a63633b05cbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:12:e2:e7:e5:19:6b:a4:54:a5:fe:26:fa:
64:81:59:9c:7b:4d:0b:21:a7:c3:63:46:90:91:07:
31:53:1a:ea:f3:50:5d:16:3d:28:26:75:aa:67:e6:
18:c7:11:db:c7:d4:60:53:6e:25:8e:19:86:94:82:
0b:65:98:3a:f4:c1:0c:d7:8a:00:97:c9:30:5f:2e:
44:b5:34:a4:c3:f5:cb:c7:36:da:b1:8f:13:3a:65:
18:cf:93:6b:e0:c0:61:f0:21:88:11:eb:47:cb:bf:
d9:9c:6c:48:0a:23:7e:26:04:b3:d7:d7:bc:2d:c9:
4b:c5:ff:3b:d0:89:c1:1b:d6:1e:c5:06:69:23:14:
a7:82:67:94:49:71:58:56:03:6b:b6:59:5f:12:9c:
6d:2d:c0:8c:63:57:68:ec:00:82:2d:70:21:42:89:
00:28:b8:34:f3:68:2d:3d:76:74:73:c7:7d:39:00:
f0:1d:6e:2d:58:87:ab:ef:8f:23:e8:61:4a:fc:13:
59:ad:7b:24:a8:78:5d:0c:91:8c:ce:10:b2:93:e9:
da:1c:07:c4:10:f7:34:ef:66:ad:ca:31:3e:31:61:
0d:7d:9e:11:e6:3e:9d:38:d1:b5:7e:16:56:93:db:
ec:ca:fd:a5:03:8a:f4:b4:29:5e:7e:ef:cc:3a:c7:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:B0:13:BB:FF:31:96:DC:85:8F:13:3B:1A:63:63:3B:05:CB:BD
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f8:5d:64:04:0c:ed:4c:ba:15:33:a6:69:ec:f5:16:a8:22:
77:41:03:c9:19:2d:36:c4:6e:ea:3d:10:2c:a2:e8:d8:26:eb:
52:0d:68:7b:08:47:02:db:e7:f1:40:ad:9f:c9:28:85:f0:83:
99:2c:b6:bc:f5:32:ec:5a:2e:a7:13:66:77:3a:bc:86:7b:84:
7a:ff:9d:ee:51:f6:6e:d7:8e:04:5d:fb:92:fc:69:25:ba:69:
12:42:51:15:1c:26:0e:ef:6f:50:39:ae:1e:89:de:fd:e7:07:
6b:72:ac:88:bf:c3:30:02:c0:3b:f2:ce:61:e2:87:66:ed:3a:
2d:f6:47:c6:1f:a4:38:45:f4:a5:50:c5:a8:69:b8:c1:84:02:
f5:c4:00:04:5e:bd:82:cb:ab:0d:ae:63:7c:86:66:88:68:ce:
35:f5:88:9b:68:a8:f3:94:25:4f:be:16:b0:d0:b1:48:99:f2:
6b:a4:13:4b:38:24:65:66:ef:66:09:e9:00:ec:68:96:51:33:
ad:9a:a2:b9:d9:d0:3e:94:8b:63:8a:b4:0c:bc:94:21:de:e9:
c5:b0:18:70:bc:12:0a:f6:b4:7f:89:6c:de:e1:00:bf:a3:39:
c0:6a:fb:8c:65:ff:15:6d:25:6b:17:c6:e1:17:a9:88:e8:a6:
f4:92:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:01 2026 by rpki-client