Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: TSUIcbJw/uL4WNNMSlSEfV//gL856MgIVmUa8fLV0B8=
Subject key identifier: F8:29:BE:E4:F6:AF:8C:5C:58:15:2E:E8:FD:23:A3:EB:61:71:8E:61
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019CAB34B59479E217692DEF666C0597D712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:24 +0000
Manifest this update: Sun 01 Mar 2026 21:01:24 +0000
Manifest next update: Mon 02 Mar 2026 21:01:24 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: I0pbfalZFJZUbMq4XordtN7JhX2xpnaaL1yqNtnHfoI=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b5:94:79:e2:17:69:2d:ef:66:6c:05:97:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Mar 1 21:01:24 2026 GMT
Not After : Mar 2 21:01:24 2026 GMT
Subject: CN=f829bee4f6af8c5c58152ee8fd23a3eb61718e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:4d:63:3f:c6:ef:ea:55:95:db:98:8a:82:
b6:c0:d4:70:2b:af:73:3f:86:04:b8:0a:0c:63:70:
68:19:a2:99:81:72:97:d3:10:30:79:8f:40:c0:e9:
61:d4:5c:b1:09:74:6f:e7:6b:1a:d9:32:89:de:6c:
ff:07:2d:99:64:62:e6:a1:a9:e9:c9:d8:43:0f:2e:
48:0e:17:54:5a:96:52:b9:65:fd:fd:eb:1b:43:51:
f3:12:e6:b9:f8:6f:da:5c:c0:44:bc:d5:8d:64:7a:
68:9b:12:f7:dc:1c:57:b8:e8:97:29:4b:cb:47:20:
6c:6f:68:0e:91:12:3a:85:8b:38:36:ef:4a:98:27:
80:fa:ea:b9:14:a8:9d:7f:b7:6c:e4:12:5c:b4:f7:
e4:7b:4b:78:63:4d:ea:75:d7:5d:46:6e:a8:78:c0:
d0:9f:58:73:06:e2:2e:a6:b2:d2:34:0f:c2:78:07:
d5:da:04:fc:2c:1a:ff:cb:d3:50:14:47:f6:9e:88:
61:c8:5e:91:5a:6f:37:a6:d3:91:e4:ed:cc:f2:03:
65:cd:a1:df:03:23:5d:9d:0f:67:ef:20:96:e0:8b:
6d:14:15:06:33:37:c5:1c:e4:54:81:04:64:b8:fc:
d4:f4:d5:3f:22:30:f0:07:1f:0e:61:6c:c7:6b:ff:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:BE:E4:F6:AF:8C:5C:58:15:2E:E8:FD:23:A3:EB:61:71:8E:61
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:24:b4:34:6f:a2:12:42:43:4c:d7:84:f4:55:78:42:a6:
ab:2a:66:e6:ce:9c:09:e8:79:10:1c:86:4e:9a:1c:a9:4d:b0:
8f:b5:d6:1c:d8:3e:73:04:ba:28:81:e8:bf:c0:e8:3a:89:79:
7d:90:4a:52:b3:89:62:15:50:fc:d1:1c:da:45:0f:c4:68:b5:
ed:c5:46:9b:9d:1c:eb:44:c7:7b:74:9e:f8:c1:8d:e8:ba:01:
6b:78:bc:cf:84:a3:b7:dc:4a:68:cb:e4:38:8c:1e:c9:90:67:
bb:38:8d:f5:2d:88:55:ad:bc:3e:36:ca:d3:d7:22:6e:b6:16:
47:5d:8c:31:cb:13:8c:bd:90:d8:12:0e:28:81:f9:74:16:a4:
bc:25:7a:64:ca:3d:cf:a8:15:ac:fd:ac:cd:a3:08:6f:3e:d9:
55:b3:c4:e6:c7:82:d2:b3:a9:9c:da:18:8b:1f:c8:8e:64:cb:
38:2a:90:1d:0f:15:09:21:53:61:93:86:20:73:93:39:d8:7e:
1d:4f:9d:eb:99:27:ff:16:35:76:52:84:cf:c5:16:67:e8:03:
78:80:24:04:05:a0:7f:bc:59:60:06:27:a6:f4:8c:c7:75:0b:
25:54:0a:f2:ed:e3:b5:af:38:3e:0f:a8:55:1c:38:44:b7:1d:
8f:68:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:38 2026 by rpki-client