Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: RPB94KVt9kQ08ilJRL2lX4/IRwOSEFEygkaPrl/JR3s=
Subject key identifier: 15:D3:65:49:FC:6E:39:36:D4:E0:E6:66:87:B5:09:BC:52:6E:9A:05
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019CAAFCF867DA7EC4A987435E3A9B6E5D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: yXpzrufb5/DOGJvTSRdBbAbrIl4N4YaTDagOM/fi9fc=)
2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f8:67:da:7e:c4:a9:87:43:5e:3a:9b:6e:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=15d36549fc6e3936d4e0e66687b509bc526e9a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:c0:a4:8f:9e:c8:11:5a:e3:3c:c0:41:45:
26:8c:78:d3:a1:13:32:c2:ab:22:83:b2:2f:6a:fa:
44:ae:93:fa:9b:44:2f:c1:b1:e6:45:b9:ef:06:e7:
84:0f:01:e2:fd:f4:61:a6:07:b3:43:2d:f5:8c:b2:
8a:e5:af:da:9b:6d:88:27:69:e6:27:4b:51:ea:44:
09:b7:09:32:af:e3:d5:2f:33:5e:cc:9b:72:52:cf:
b3:d5:df:ec:83:19:67:e3:78:39:78:fa:9c:e9:c3:
0c:2e:a2:83:d6:51:26:e3:81:24:14:58:21:03:04:
91:cb:a0:c8:15:e5:30:89:7e:f0:10:56:78:e7:d9:
af:1c:25:82:f2:02:4b:cc:87:4e:d7:80:17:c1:0f:
95:a4:98:4c:19:ab:4f:81:f4:61:81:94:5e:1e:5c:
3a:c4:b4:55:6c:83:ac:cd:cd:ec:b8:17:b9:2b:11:
96:ed:41:eb:f1:8a:e6:65:48:a9:6f:21:73:f8:8d:
2a:6b:31:6b:ea:f8:28:f9:72:88:81:7b:d8:cb:3a:
a5:1e:4a:fc:45:04:8a:25:b0:ca:b6:8b:8e:b9:cb:
d7:0c:1a:7a:6d:43:51:cc:b1:5f:ca:74:e4:e9:2c:
03:7d:ed:ad:1d:3e:f0:77:48:5d:9c:b7:e8:5e:02:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:65:49:FC:6E:39:36:D4:E0:E6:66:87:B5:09:BC:52:6E:9A:05
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bb:d1:81:d7:33:9b:47:59:ad:e1:ec:88:5d:ed:5a:50:61:
72:4d:4e:01:ce:c2:a5:fd:1c:d0:25:0c:cd:ee:a1:51:05:8e:
bd:07:1b:b0:03:f2:27:75:18:c1:39:d1:7d:43:5c:ce:5e:98:
96:92:9c:82:eb:0a:d4:10:2e:3f:0e:de:ab:a1:d2:10:07:a2:
36:dd:58:3a:c2:0b:5f:5b:d6:28:dc:95:86:f3:10:dd:a5:f0:
40:d3:72:48:68:ad:9f:86:84:e2:39:71:8f:c2:4e:3b:75:18:
d1:14:02:41:18:13:e1:11:3a:4c:5c:b5:f6:a5:b9:04:2b:30:
24:a5:d8:d3:fc:ce:69:cd:f6:15:ed:43:54:82:ba:e9:0a:60:
cf:f3:15:4c:c1:b3:27:7e:cf:d2:70:89:b0:37:ec:f5:ce:67:
69:61:fd:25:e5:de:b6:16:fd:b6:06:48:b8:3c:90:fc:48:06:
25:96:35:d4:c6:4e:4a:2b:fa:59:51:3c:a1:32:53:9a:eb:38:
0e:43:e0:82:6b:bf:e5:94:16:81:fc:4e:75:36:dd:cc:f3:51:
12:0f:c8:01:45:d1:3e:09:0a:3b:6c:1e:ae:cc:a3:af:97:ea:
6f:36:5b:66:05:30:17:f2:67:46:79:ac:d7:7f:3e:ca:7a:38:
f5:fd:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:12 2026 by rpki-client