Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: z+y4vBiih7X5dOK3t6a164AdiyldRIidBjOitJciqBo=
Subject key identifier: 40:69:A7:EF:F6:44:9C:3D:9A:CB:7E:45:70:E4:5F:ED:ED:1E:BE:76
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019CAC470EF9A5B7D752726935EE3E018111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:01:03 +0000
Manifest this update: Mon 02 Mar 2026 02:01:03 +0000
Manifest next update: Tue 03 Mar 2026 02:01:03 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: QFHFhRGzKIOWOOpdGObtec8S1ZbI6cb6lHG36ORP6BE=)
2: WPaT0Y7RS5CA12LK1l6IVoc8b5w.roa (hash: RbeOiouCG0/fdoKUcqWun90nLWJeLto+KTqvRhLoP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0e:f9:a5:b7:d7:52:72:69:35:ee:3e:01:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Mar 2 02:01:03 2026 GMT
Not After : Mar 3 02:01:03 2026 GMT
Subject: CN=4069a7eff6449c3d9acb7e4570e45feded1ebe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:51:27:8b:5e:9a:3a:6f:ef:74:0e:c4:a2:
c5:c7:40:c4:fd:72:d1:be:9f:7a:f3:c5:bb:53:92:
c6:63:2b:3a:ce:f0:29:c9:c8:01:9f:50:1d:03:8e:
45:b8:f8:0d:df:99:90:b9:87:f8:39:7e:b3:9c:ec:
9c:a2:69:f9:e4:b8:e5:d1:2f:1f:66:18:db:4d:38:
14:5c:d0:78:4b:6e:60:c1:c1:f7:d8:9d:31:f5:07:
2c:ef:0e:58:6b:8d:0c:39:b2:51:78:15:74:de:31:
2f:f0:46:92:7f:28:f9:29:ef:d7:7e:8a:c5:ca:10:
06:8b:62:56:e5:30:04:39:8f:af:a8:1c:89:b0:9b:
80:e1:fc:c6:80:01:c3:f6:9e:41:1d:ff:6e:47:af:
7a:c0:39:b1:c3:e8:53:c9:a6:dc:34:95:ef:f8:b2:
76:a1:3c:21:14:e1:fa:b0:c2:cd:54:6a:68:8d:41:
66:86:a8:15:92:f2:70:c8:f3:80:55:fb:57:19:71:
e2:c7:00:54:fe:91:62:b3:df:b9:bf:46:42:41:5f:
3d:f0:45:80:5a:33:19:86:0a:ef:4f:f3:55:67:e5:
82:75:a2:b0:cd:53:0a:38:f1:ef:68:f0:5b:14:10:
d7:45:cb:7b:15:ac:ec:7f:c0:e7:44:7e:e0:df:ad:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:A7:EF:F6:44:9C:3D:9A:CB:7E:45:70:E4:5F:ED:ED:1E:BE:76
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:07:a4:12:1f:c9:53:1c:51:23:ad:70:1d:ae:0d:c9:4e:
34:bd:59:93:16:2d:2e:ea:fe:ef:57:bb:b6:15:4a:75:29:7e:
1c:49:7a:af:ab:58:9c:0d:62:a9:1c:7f:99:52:17:99:0f:f7:
f0:15:93:19:bb:1b:fc:bf:e7:d3:98:f0:5c:9f:e3:22:78:df:
30:0b:af:b9:ab:25:78:10:d1:49:e3:50:d1:53:62:53:48:8e:
03:d0:63:36:9a:8c:a3:c9:11:e1:2d:29:a8:38:aa:a1:03:d2:
3d:1f:50:61:bd:29:37:63:bf:05:95:4c:04:03:d6:70:80:f0:
38:39:8b:e1:ca:bc:c4:8b:75:92:ae:ab:37:62:92:52:7b:cf:
bf:79:ca:87:85:8f:7a:b2:54:de:94:8f:10:0f:ae:18:40:00:
55:a3:85:2a:31:1e:a6:91:da:d8:bf:60:fa:86:5a:75:24:84:
31:e4:b6:34:20:d2:ff:5e:c4:99:e8:25:ea:4a:6b:7b:b4:90:
1b:87:6f:35:f9:4c:62:07:00:34:a9:28:a6:ec:16:d7:d5:6e:
c9:fb:95:3c:8c:05:ac:d2:e1:94:d9:3c:9d:bf:ed:af:36:21:
0e:11:62:f6:fa:b0:cc:da:b0:52:35:7e:b0:3d:d9:e4:9d:4b:
5c:85:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:59 2026 by rpki-client