Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: njAclzoom5UFX7Z19KLMjTzrSw6GEUNZSAEl2rjuW88=
Subject key identifier: 82:84:F8:88:43:A8:17:E5:3C:BA:C5:57:1D:F3:15:D9:8A:6D:6D:B8
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 019CAB6AFB8355045693A5BBDC1FB63C6FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: HU4ZSHBmhJa3KTHNyLyn2qByi7hXG6komvMOzGQsLzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fb:83:55:04:56:93:a5:bb:dc:1f:b6:3c:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=8284f88843a817e53cbac5571df315d98a6d6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:66:05:42:ea:50:b9:e7:ab:3c:e8:fc:9e:
b5:b7:55:b9:58:b1:98:22:d5:89:53:1f:42:b0:7e:
0c:f7:51:68:77:c7:e5:c3:e1:d2:3f:4f:3e:92:4e:
67:06:00:27:71:55:62:c5:6e:62:2b:06:78:7f:61:
ed:46:1e:1b:25:d0:b6:0e:19:13:2f:32:e6:10:d1:
60:9a:aa:17:ca:6e:fa:ed:f0:90:a5:ef:67:59:eb:
d8:65:4b:ef:fa:84:1a:31:91:3e:85:64:70:ac:45:
fb:1c:bf:bb:ee:54:e7:84:c6:7c:26:fa:17:8b:10:
27:39:d4:67:3d:a3:4b:9e:48:dd:37:e9:01:1a:3d:
75:17:fd:e6:e2:0f:0e:d0:b4:d9:05:63:36:15:9a:
30:c5:f6:0a:6e:94:13:59:d0:ab:07:21:61:56:a9:
51:a9:f3:7c:9f:b7:62:4a:b5:66:b7:53:80:96:1b:
0d:87:87:5d:06:27:c2:27:7b:67:c7:29:7c:23:d9:
06:27:aa:aa:f6:66:2c:b4:09:77:58:ec:ac:a4:8a:
c4:3e:60:b3:95:9e:3d:42:7a:a6:ea:28:2b:d9:b1:
0b:41:9f:e3:f2:b6:0d:21:4b:fe:fa:da:b5:54:6d:
08:4b:6b:f5:d2:39:3a:9e:4f:46:85:20:fb:b7:17:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:F8:88:43:A8:17:E5:3C:BA:C5:57:1D:F3:15:D9:8A:6D:6D:B8
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:24:a9:8e:90:de:df:12:54:f8:d4:bc:85:12:33:05:5b:9d:
92:7d:23:f1:15:45:31:d7:0e:b8:1a:0f:5e:5e:2a:ae:cb:a1:
06:7c:5d:dc:d4:b6:76:c3:04:49:59:42:e4:48:df:36:3e:d9:
fe:0a:f8:f7:63:c4:84:71:ee:c0:3f:f2:7d:6e:fa:2d:62:fe:
98:f4:85:41:14:15:f4:17:03:70:52:b9:27:66:98:7b:ed:63:
79:69:08:07:e6:97:db:af:20:fc:21:36:9a:ad:18:ae:3a:c7:
b4:3d:e4:d7:cc:97:06:1f:b9:0f:9e:96:32:85:d4:c7:4d:1d:
7a:d7:91:a9:9a:59:b7:63:37:de:05:33:a9:44:d4:85:df:b4:
c0:e6:33:12:94:d1:8b:b5:b8:f4:62:2e:85:d2:d3:b3:0b:1a:
8a:7a:2f:96:87:78:34:f3:0a:5a:9a:96:96:82:28:46:aa:32:
24:64:13:0c:76:27:b6:cf:59:cb:7e:44:98:07:de:eb:b7:57:
3c:a3:1b:63:1d:7b:0f:5a:e6:f4:16:43:fc:36:b9:12:3b:cd:
25:45:76:7e:7e:b1:f9:f3:71:05:fc:1c:24:9a:31:2c:f3:36:
c3:1b:6b:f9:14:98:66:53:df:84:cf:78:e1:8f:14:21:6d:b5:
f1:d3:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:43 2026 by rpki-client