Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: Mr3JYkD7by0sQRNkvZKVvzsMiWFX3BZ8mhNV4bhoOdI=
Subject key identifier: 17:71:D7:70:46:84:B0:1B:C3:72:23:08:11:A2:CC:6A:4A:3C:63:69
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019CAE35C81F01DCAED0F6FC3A801CB855FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: tHO4nxNN7/qLA8ZEFcpvXcXay4Z768FuLR+j40PZA3U=)
2: WPaT0Y7RS5CA12LK1l6IVoc8b5w.roa (hash: RbeOiouCG0/fdoKUcqWun90nLWJeLto+KTqvRhLoP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c8:1f:01:dc:ae:d0:f6:fc:3a:80:1c:b8:55:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=1771d7704684b01bc372230811a2cc6a4a3c6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:7a:bd:b4:39:75:8b:c1:ad:57:b9:04:ed:
0c:70:32:53:8d:8c:c4:b4:37:91:aa:31:40:bd:08:
d2:4b:7e:3f:34:50:09:3b:9c:c6:0e:f9:79:86:96:
65:01:40:b3:ef:82:65:7f:00:69:bf:b5:72:85:fb:
e2:0b:b7:51:2d:69:cd:76:b9:da:8f:54:3b:8d:b4:
bf:e6:ad:f3:90:80:12:35:bf:02:69:6a:63:78:cd:
a0:3e:b5:31:8c:21:9d:ce:d8:14:33:c8:b4:43:ec:
5d:c5:89:54:2e:b6:a3:40:a2:0b:67:4a:0d:69:35:
a2:23:01:a6:50:82:d9:f8:8a:88:3e:71:28:d6:b0:
b8:0d:97:25:a9:0e:9f:eb:a6:ad:8b:43:48:bc:06:
6f:ff:65:a7:20:0e:ac:b1:8d:11:dd:46:30:72:c6:
94:17:08:82:23:7b:3b:e7:4f:b4:e4:55:77:a1:5b:
13:ca:01:45:23:0b:a7:03:3f:30:24:49:d8:dd:d9:
f9:06:56:b0:5a:26:fc:2f:bc:13:2a:75:8d:f7:41:
5c:dd:87:8d:a8:1c:8c:cd:ec:05:a1:06:9e:29:e4:
90:75:66:23:91:4c:dc:94:c4:62:60:7e:08:32:15:
9a:ba:10:6d:ff:b8:9a:64:79:91:d1:64:e7:1f:11:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:71:D7:70:46:84:B0:1B:C3:72:23:08:11:A2:CC:6A:4A:3C:63:69
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e5:b5:8c:de:d1:d4:02:7c:c4:cf:08:25:98:3e:d5:0a:51:
2d:b4:57:78:23:93:78:7a:c5:0a:a2:7a:59:48:6a:6c:62:95:
9b:78:44:a7:65:ef:ac:bb:fe:a0:bd:cc:92:fd:a7:00:1d:0b:
70:2e:22:17:52:e2:e8:18:c6:e1:7f:c6:a7:55:db:8a:41:4e:
76:7f:da:22:e3:2f:0d:64:cd:87:43:6d:27:ee:ed:36:6c:40:
ec:06:f6:ee:14:82:20:20:e4:ad:01:9d:f1:b2:fa:6c:69:62:
e6:45:5d:a2:62:c9:af:3f:1c:99:99:ec:12:a2:a3:c9:70:1b:
03:9a:cc:d7:8a:25:2a:84:a6:d2:a8:4f:8a:93:67:ef:c7:23:
99:04:22:51:ca:a7:a0:4a:59:7a:05:eb:d0:8f:84:80:e9:9d:
ba:57:df:17:09:61:22:cb:a4:e9:9f:d2:41:02:d8:a3:f8:f7:
0d:ea:55:30:34:f6:0d:08:48:90:c9:2d:21:87:b2:2c:92:d0:
70:78:a0:bf:08:ea:c0:aa:58:f2:68:e1:99:33:78:0d:fb:f1:
a1:ee:b7:dd:c1:e4:a5:3f:c0:b0:f2:97:00:be:c1:15:2d:85:
eb:17:f3:3f:46:23:83:76:c7:67:ff:7b:01:f2:72:5b:73:0a:
9b:6d:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:17 2026 by rpki-client