Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: HDGEqDY77pIvoskr0eAhZPKOqx8RqCQnTueP36P9nyE=
Subject key identifier: 92:9C:D7:B9:A0:EE:84:78:FB:22:CF:23:A4:C1:03:2E:EF:B5:C8:44
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019CAC46EFF1B3C1E0ABFFE039CA269E1799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0A95
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: zWC6R+h3To1NL5LgFinojO9iqQw0JqTJSw+OX7ipxJg=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ef:f1:b3:c1:e0:ab:ff:e0:39:ca:26:9e:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=929cd7b9a0ee8478fb22cf23a4c1032eefb5c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:2d:cc:5e:0c:b1:b5:13:e7:09:6a:2d:26:
92:07:40:f8:fe:b0:2f:75:9f:cb:5d:29:a9:c1:bb:
e6:01:0c:6a:7a:e9:de:00:cc:9a:2e:54:f8:ca:fe:
b3:56:aa:e7:42:b9:c0:69:59:06:5c:7d:2b:41:40:
18:83:3a:a6:48:fb:8e:e6:5f:d5:96:df:d1:f2:8b:
16:73:b0:38:68:03:cb:50:e5:12:66:bf:59:94:0e:
cb:9c:68:e0:ea:3e:29:47:0d:6c:35:79:0e:56:30:
34:ce:f1:b9:4b:6f:6e:bf:a9:29:ae:48:71:34:35:
96:e0:c7:25:04:45:d9:3d:c1:04:ce:45:a1:12:c6:
2b:93:ff:7b:19:ae:ba:e3:1f:e3:c5:c9:78:63:f7:
76:3f:43:40:41:f2:a9:dd:79:29:a7:64:09:f9:6f:
b0:07:fe:51:ea:38:ea:c9:a9:99:91:5a:68:d8:98:
0a:8d:a2:30:61:1f:b2:5d:17:7f:75:f8:a1:90:37:
3b:fa:94:dd:6e:4c:eb:10:54:d3:b0:d8:c4:f1:22:
b7:68:21:5b:b3:fe:7c:3d:b8:59:e3:25:e8:31:94:
7d:22:a1:ee:17:c4:85:90:e8:77:43:f4:ef:f2:d9:
96:55:fc:0c:f6:17:9f:5f:85:59:f6:93:32:b9:af:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:D7:B9:A0:EE:84:78:FB:22:CF:23:A4:C1:03:2E:EF:B5:C8:44
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:c4:6d:db:01:10:d6:56:e5:ae:08:01:84:a6:ae:01:e7:
4a:a1:6d:a4:29:ce:6d:88:50:d9:bf:41:52:cc:9b:a3:73:f6:
ef:fd:6d:7f:d9:fe:98:66:0c:76:59:a1:a7:7c:54:17:84:0b:
11:b9:3f:15:ca:df:1c:8c:81:fb:56:b8:0b:86:51:a7:f9:ad:
bc:f9:19:35:c4:14:02:9e:56:11:c2:89:a7:b1:9d:bf:3d:97:
82:13:de:82:2c:bb:95:a2:9f:6a:d9:ae:26:de:18:20:1a:1d:
d8:a5:98:6d:1d:d3:b0:16:77:39:d1:0b:31:be:48:35:e2:b8:
45:fb:3d:db:26:b3:54:eb:45:e0:e0:97:ef:cd:ab:9a:74:be:
36:ef:f3:98:35:70:66:f2:d5:ff:16:6f:e4:73:5e:0d:f9:69:
51:44:94:2c:75:c9:de:ff:75:c1:3a:82:f4:35:ce:75:b0:15:
78:c0:d5:2f:94:61:a4:6f:b4:11:99:9c:28:8d:26:6a:b3:d4:
07:d1:dd:96:79:20:87:63:8e:74:79:60:6b:89:ab:d9:d8:38:
c4:18:6a:f7:ba:02:bc:03:5f:19:d4:32:e9:83:0d:64:ff:30:
3c:8e:cf:08:13:a9:79:7c:f1:e6:35:00:c6:51:46:90:5c:fb:
19:92:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:31 2026 by rpki-client