Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: PiAnKVAGAQO81rG8RJP35lic9cYAdF1wJ2dh8b4Y87M=
Subject key identifier: 0F:D7:6B:9B:77:E6:0A:21:87:21:29:D5:E9:4A:21:C0:29:6C:E2:2A
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 019CAA2195FDEA4AE81577D42C9A37191A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: 0aZn7A+4DCsbtz+K/Dv+2VDAKG0cNLfBSE8PpEXa6ss=)
2: WrFi9wM8-MBxaZss80dQCIHVjIA.roa (hash: T4A9s6KUh5deKQT7uVYVm6QXd45Uqa2wbOgRg/X9a94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:95:fd:ea:4a:e8:15:77:d4:2c:9a:37:19:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=0fd76b9b77e60a21872129d5e94a21c0296ce22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:a7:c2:3b:bc:af:a4:2a:c0:2f:14:0e:a9:
cf:f8:0a:3e:3e:5d:9b:ef:46:e2:f6:98:f6:83:53:
1e:9d:5b:b1:6b:ae:cd:f4:c2:c7:4e:04:04:b3:2e:
d5:0f:9c:72:13:e6:06:fc:9b:1c:a4:ea:18:ff:ec:
a9:65:0c:9f:ef:07:90:c5:df:38:e8:e2:1a:6b:bb:
55:80:3a:20:26:1b:16:87:31:b9:2c:a6:66:c8:01:
47:4d:d6:a1:db:cd:fd:ca:9c:40:ce:13:2a:56:62:
e3:1b:b7:9d:b8:e7:dd:58:cd:be:80:b3:2f:05:e6:
21:42:2e:e2:55:f8:66:d3:c4:81:22:c0:24:cf:60:
02:a7:38:c3:68:0c:53:15:fa:d2:a8:2d:08:dc:a1:
79:3b:02:f2:f5:f3:7b:ad:c5:d5:45:42:6d:1a:94:
17:4f:b1:d0:8b:81:ee:3d:4b:ba:bc:92:6e:45:d7:
cb:06:58:3f:68:b5:f9:ad:dd:d8:98:67:6b:6a:96:
d5:1b:d4:31:5e:02:f5:b8:c8:d5:97:32:96:e9:e5:
e6:4a:89:2b:b5:38:d9:de:c3:1a:28:6a:c2:fb:a8:
ae:af:30:f8:cd:20:ba:4d:e9:7e:f6:93:fb:28:62:
58:b8:f5:1a:15:1b:85:ad:b1:5c:d1:eb:2b:22:c7:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:6B:9B:77:E6:0A:21:87:21:29:D5:E9:4A:21:C0:29:6C:E2:2A
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:86:da:3e:16:5b:3e:73:be:53:86:c9:6e:50:86:dd:a2:e1:
d9:aa:d7:5e:69:c1:cb:f8:ef:0e:e6:f8:80:bd:c9:e0:81:f3:
8d:b6:aa:0f:41:dc:4f:a3:48:5b:3d:8c:bd:d5:1d:31:98:36:
c8:64:b5:ad:32:a8:b5:4b:0c:c9:6d:d7:0a:52:cf:66:2f:81:
0e:26:fb:04:4f:23:e0:a7:dd:e5:dc:ce:6e:59:fb:aa:68:5e:
bb:73:0f:08:6b:5a:ea:12:1c:27:0d:3d:f0:16:e2:8d:ee:5d:
b2:6a:42:31:8b:0c:9c:08:66:47:3a:9b:3c:8d:bc:cb:84:1f:
be:e4:8a:dc:c3:3d:fa:81:5c:bf:cd:07:6d:2a:02:52:bb:06:
2f:25:ff:89:14:0c:bd:30:1c:03:e5:99:a4:8e:de:9c:0d:4c:
04:d9:b5:79:01:20:08:9a:37:53:55:d9:54:1d:c7:96:50:ed:
f0:68:29:1c:75:c0:ea:d9:75:e0:98:e8:8c:4b:23:6d:05:cd:
6a:2d:a1:45:14:c9:b4:9e:f1:92:de:09:7a:0c:cc:fa:a2:f7:
41:b6:cf:4c:25:70:39:0f:2e:d2:76:02:f1:a1:79:c8:b6:ad:
61:e7:ec:e3:19:8b:4f:cf:9d:ca:c8:7e:5d:d0:cc:73:01:2f:
07:9d:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:31 2026 by rpki-client