Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: /e5fFsUDWMEh6dXZeQhBVa9KjY1ELs9HV5eIe/IggZQ=
Subject key identifier: 81:6D:0D:FE:81:3B:D4:FD:21:19:45:1F:06:42:7D:1C:29:0C:F1:1A
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019CABA2601DFBA7F069FD6C561F53E06FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 14E8
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: UDZircHJk8Cpiw65Ur3hH3tRewb64nv3TGabdkybsS0=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:60:1d:fb:a7:f0:69:fd:6c:56:1f:53:e0:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=816d0dfe813bd4fd2119451f06427d1c290cf11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:fc:db:d7:65:df:7d:0e:b2:8e:99:f9:d1:
30:bd:18:a4:3d:04:96:e3:87:01:f3:e9:84:7a:b6:
99:8a:0f:8d:0f:16:ef:ff:4f:5f:36:9f:bc:cc:a1:
70:99:00:1c:77:79:ea:4e:18:62:ef:c9:74:13:93:
cf:11:35:51:27:e0:b0:26:0a:a9:4a:2e:d2:67:f3:
8b:5b:e9:0c:13:c3:f6:5a:f4:34:9d:ef:cb:d3:17:
69:57:96:8b:73:c6:e5:27:a3:91:f6:c2:e0:e3:63:
a4:08:e5:d1:23:0b:58:10:46:53:8e:27:13:fe:3a:
47:23:06:0e:97:a9:42:1f:f7:07:80:30:8c:99:48:
35:fc:2f:3e:24:b5:d4:5d:90:42:21:b5:8c:af:c8:
62:bc:b0:dc:2d:af:62:b5:fb:65:b0:82:75:b4:37:
22:15:9c:6f:27:7a:53:f9:fd:62:95:e7:d8:f1:ce:
3e:f4:da:9f:c4:48:5c:cb:41:93:82:47:50:3c:88:
cb:7e:82:b3:36:8c:09:5f:f8:aa:ad:c3:5d:77:ee:
4e:ed:3c:45:91:26:b4:ec:8f:ed:da:1a:f9:ab:6b:
59:e2:b6:58:32:59:e8:48:dd:13:9d:75:a9:7a:fa:
91:b5:9f:c6:5b:22:26:dc:03:17:26:a7:37:ec:f3:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:0D:FE:81:3B:D4:FD:21:19:45:1F:06:42:7D:1C:29:0C:F1:1A
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ec:e6:b6:fe:28:80:8c:4c:41:5b:ef:79:14:20:92:08:9d:
c8:90:b2:9c:b8:d5:8c:d3:25:94:b3:81:eb:15:5d:e3:bb:3e:
f7:4a:e2:77:b2:7c:2d:80:34:33:68:74:0e:c5:36:57:71:7d:
2d:f9:9f:70:e7:84:38:18:ff:23:ff:a5:55:82:f9:83:f1:4f:
4a:95:39:94:19:46:36:bc:82:71:da:e3:35:97:0c:06:c8:d6:
df:ea:5b:4a:ba:92:2d:47:65:da:d0:85:eb:f0:f5:65:c7:63:
89:ce:91:b6:c2:6d:4f:ab:2e:8d:32:d3:6f:32:7c:af:5c:2e:
f3:39:40:5f:31:68:ca:b1:db:7c:de:f9:92:9f:b6:ba:97:98:
5a:f5:aa:c3:11:88:83:2e:1f:3f:a5:73:3b:ed:83:62:4b:0a:
a3:11:11:f7:44:44:6c:95:7d:2a:76:48:b5:09:57:71:10:8c:
ce:e2:61:3a:9e:76:6e:c5:41:1b:2f:ff:86:2d:c5:71:5a:f2:
9e:08:0c:8e:3f:b1:cc:99:5f:35:69:55:6c:3b:ad:b6:42:30:
15:29:12:95:73:21:de:3e:2b:84:2a:39:7a:2d:55:ce:da:52:
cc:3a:54:1a:af:0e:06:cf:38:8a:c4:55:18:d8:fb:8c:1b:8e:
7d:33:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:21 2026 by rpki-client