Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: 9fcTb2dkSo6ZsaSrh4ls22dehOeuTtUKpgYK30XDWKM=
Subject key identifier: 8D:02:44:67:73:DF:0C:78:71:12:0C:E3:AB:49:DF:3D:EF:7D:45:46
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019CAAFD4CDD2917FF79AA38B1591704C2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0DF5
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: ucyZ/SGcW/II4O8yIz5jQe8Lf34kBw1LHat0jlvyBCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4c:dd:29:17:ff:79:aa:38:b1:59:17:04:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=8d02446773df0c7871120ce3ab49df3def7d4546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:db:c0:58:48:12:48:c4:4e:f9:75:50:00:
59:e4:43:12:db:b6:ac:1e:68:76:1b:7a:88:1e:de:
a6:f3:96:af:3d:ce:08:a6:00:2a:b2:2a:c1:8a:d9:
9f:19:49:ea:5f:7a:aa:36:31:a7:2b:c4:13:17:d4:
9c:88:be:be:73:77:37:b0:10:d9:52:5f:72:40:fc:
97:d5:f8:1c:75:e2:6a:3d:da:15:41:79:83:b1:aa:
b5:1c:45:54:c5:83:be:38:da:c1:2b:1a:e3:80:22:
e6:8d:7b:a6:3c:59:e5:45:bb:7e:65:41:b6:e9:2e:
4d:bd:58:79:e4:2f:aa:ae:c6:82:19:86:b6:ad:f3:
e2:f8:4d:c7:15:7a:dd:f4:bd:e9:93:d4:d3:e9:17:
6e:06:00:ef:fc:e8:e3:65:8a:0a:03:84:ce:95:dd:
68:8e:6c:14:fb:00:ae:39:d6:d8:c9:8e:c4:6e:b2:
2b:dc:f6:d0:0b:4e:ca:cd:e2:cd:56:8c:7e:6a:c2:
48:6a:7d:af:c4:78:c3:3b:c7:dc:ae:b5:22:01:63:
c9:06:1b:d5:f2:98:c8:e9:23:49:25:d3:cf:80:2c:
50:04:c7:8f:dd:26:17:5a:2e:5a:33:17:b2:da:bd:
74:63:cf:b5:9d:7b:5b:27:4e:33:f5:9e:6a:40:01:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:44:67:73:DF:0C:78:71:12:0C:E3:AB:49:DF:3D:EF:7D:45:46
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:62:4f:40:cb:6e:0b:43:8d:b6:bb:f0:43:b3:b7:b6:d3:
ca:3c:ed:8c:88:09:e7:11:83:eb:77:e3:ce:19:86:ce:13:9c:
1a:36:a8:47:fc:8b:2b:f7:e2:cf:d8:9b:6c:41:80:cd:cd:2f:
fd:78:56:59:55:c8:73:4b:32:5e:39:dd:4a:9e:2d:a2:f6:f9:
d4:37:ca:a7:04:a8:b1:15:56:25:5d:4e:3a:34:84:c0:bb:03:
83:d2:3f:92:d5:da:15:25:bf:72:58:ee:88:e6:5f:0f:8e:c7:
df:65:32:37:f4:54:c0:74:25:42:4d:67:9a:fe:03:1b:b4:75:
9f:61:85:7c:48:8e:36:23:3f:20:c6:65:7b:2e:ca:95:e9:ee:
67:52:a9:e2:f1:ce:e7:f3:be:f1:8f:9f:6f:62:1c:00:be:0f:
84:d8:21:8c:fb:31:af:dc:1e:75:e4:f4:d2:b3:7a:3a:78:dc:
c8:1d:c8:0b:c2:e7:c9:c9:36:77:35:05:49:44:34:13:42:e2:
ca:96:e0:b0:13:b1:23:d2:c3:8f:fc:28:59:84:55:2a:21:a4:
6e:fd:87:55:0f:27:89:3d:9f:43:f0:98:ad:14:0c:d9:37:c2:
01:0f:c4:34:09:e4:a4:26:89:74:cd:78:5e:f8:78:e3:f5:24:
66:11:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:03 2026 by rpki-client