Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier: BW7Q9yixJky47XH8M5rO34M7WRjGjpYZKO495t7ZGOo=
Subject key identifier: 16:EC:FD:B4:7A:6F:6E:45:F1:D9:F0:EF:D4:7E:40:98:F5:1B:27:9F
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019CABA207D129964217FF9C9B528B233A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: EaFMF87OiVp4C+b95jY9pcxtSO5enSZCE7kl1TeF1cY=)
2: a2aTLssL5qA9WYwMt2iC0oh1USM.roa (hash: uWZUHJBuw3O6jwt6r5Een1zDl218rmROk6eyZ4UCJ5I=)
3: m1qKS2jQ7UL2R3RFiSA5OXb4h9Q.roa (hash: 1mnniW/CxCxJOYCoB+NPL6R9QHnpJ4z7lNlV4aB3q8k=)
4: sLEAaFmahSDB-evQwixh4Jao2QQ.roa (hash: t2IOO1560gce0nkEiW3SFLB/2c7cyWyAI6pQbXkLnbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:07:d1:29:96:42:17:ff:9c:9b:52:8b:23:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=16ecfdb47a6f6e45f1d9f0efd47e4098f51b279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:92:ce:55:07:fb:e9:0c:62:ce:a9:eb:ac:
1f:a1:4f:1e:35:70:38:e5:f5:c8:08:f5:1d:25:5b:
f0:7c:d4:2b:51:d1:e8:35:dd:6b:c8:3f:9f:84:ed:
24:c0:f2:36:6f:3b:a5:75:ee:14:54:da:5d:04:c0:
f4:a7:91:93:f1:57:11:0d:22:23:c0:1f:8f:4e:0f:
ec:05:f7:b5:f1:be:32:70:b6:45:4b:5b:90:fe:80:
dd:32:cc:f1:bd:01:bc:c9:bc:55:23:9a:d4:e2:ce:
d2:ee:12:09:67:8f:fd:b5:ae:18:69:ea:65:e0:fc:
64:61:cd:da:eb:3d:fc:35:7e:d2:fe:c2:61:44:25:
81:96:8a:59:8d:3a:63:82:5e:c6:2d:f3:1d:ea:21:
b9:87:8b:e7:29:4f:f2:84:7d:72:81:e6:c9:df:d6:
cc:cb:90:a1:80:9c:ab:24:b7:c1:23:ea:62:00:be:
7d:3d:34:40:2d:05:84:e0:bc:3b:73:2c:f8:f4:7e:
da:aa:0a:31:e2:e5:01:ef:4b:47:9a:5e:35:a5:eb:
34:f1:0f:a4:41:f8:55:88:74:91:a3:ff:6c:7c:ab:
c9:91:70:6e:dd:9f:01:f2:18:94:a2:46:d8:07:d8:
42:9c:f3:fc:42:52:4d:24:aa:da:17:67:55:d5:59:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:FD:B4:7A:6F:6E:45:F1:D9:F0:EF:D4:7E:40:98:F5:1B:27:9F
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:eb:3a:0f:bb:17:8c:ca:bd:a6:a8:47:59:06:d7:d2:06:e3:
19:74:67:8e:dc:7a:16:d8:0b:9e:17:7b:35:f6:54:3c:ea:a9:
06:08:73:7a:78:13:5f:64:57:40:a5:62:c6:ca:bf:dd:37:95:
67:98:c1:43:89:cc:37:7a:20:57:35:12:fb:7e:67:22:7f:db:
b5:f0:5c:6b:79:d6:1e:14:e6:11:b3:a0:e7:f7:37:48:29:9e:
3b:e2:fb:8a:67:eb:c0:a2:7c:bb:16:d5:73:1f:06:99:63:c1:
b9:58:e5:42:0c:01:f5:31:20:af:a9:e7:8f:f4:ca:9e:ff:7b:
be:5d:19:8a:54:f0:b4:cf:48:96:37:25:87:c7:31:79:54:02:
ac:9d:6c:75:47:2f:c6:a7:0e:80:7d:38:63:dc:dd:b9:ba:8f:
91:95:31:40:f8:77:9d:ed:92:cc:98:3e:17:b2:fa:09:ca:f2:
83:cd:bc:e7:04:63:8f:06:8c:62:be:b1:f2:36:0d:07:39:ff:
ab:f9:44:f2:2c:4d:6f:32:38:57:8c:c0:23:3e:da:fc:bf:db:
99:0e:d5:81:4d:71:6f:0b:de:11:25:36:ff:88:c6:fd:83:d8:
a5:5c:8a:90:0d:b2:7a:27:66:58:82:ab:c2:b0:b3:d2:11:ec:
09:02:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:44 2026 by rpki-client