Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: DRIitKd+JfcJi97OFubAdHpek1tkg/68bRahAGoR8xE=
Subject key identifier: 22:30:17:E6:7E:C5:70:B1:9F:A7:D6:BA:3A:22:21:44:24:EE:6E:5D
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019CAC0FC82657BF3ED7BB8A5F68C2A4F490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 04D2
Signing time: Mon 02 Mar 2026 01:00:41 +0000
Manifest this update: Mon 02 Mar 2026 01:00:41 +0000
Manifest next update: Tue 03 Mar 2026 01:00:41 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: 6kho0LwiYEoNvw8KHI3PUU+jxZPXc9eid+oU5SjZULs=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c8:26:57:bf:3e:d7:bb:8a:5f:68:c2:a4:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Mar 2 01:00:41 2026 GMT
Not After : Mar 3 01:00:41 2026 GMT
Subject: CN=223017e67ec570b19fa7d6ba3a22214424ee6e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:bb:2b:32:dc:e8:4e:1d:8b:05:29:8a:ac:
27:f7:d1:65:32:48:cf:9f:8a:68:44:a7:b7:a8:46:
b6:2d:cb:d9:06:b9:81:72:4d:e3:10:1e:c6:df:b0:
d1:42:dc:74:d9:51:85:fa:82:3d:f4:62:cd:0e:37:
38:20:7e:ff:bf:25:c3:ee:33:8f:45:03:a3:c7:83:
d1:d1:6e:15:22:63:18:6b:09:f4:3e:52:b9:7d:15:
9b:67:26:9c:e6:a9:5d:82:e2:d8:4d:47:de:b7:e1:
02:43:7c:43:b2:ad:f3:16:a2:77:b3:f8:57:c6:3a:
28:25:77:2e:34:d6:88:4d:02:f2:dd:a2:75:9b:52:
83:c9:40:ae:c3:a6:d3:9a:78:59:c8:e0:76:94:cc:
71:a6:77:24:67:86:3f:e4:04:ab:b0:b0:db:d2:9e:
33:ef:64:45:19:90:05:6f:4f:2b:23:2a:09:45:0d:
1f:a8:91:a7:e9:c9:44:8c:b5:40:cf:30:8b:f5:1a:
62:f2:00:53:72:36:22:bc:b2:02:e1:ab:ae:b2:3a:
84:40:fc:e9:ac:67:ec:fe:ed:eb:19:8b:d9:90:74:
f9:25:f4:75:57:ef:29:7b:91:4e:eb:39:5e:03:36:
41:df:00:f4:f9:56:6b:17:ad:ba:da:02:c8:bd:79:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:17:E6:7E:C5:70:B1:9F:A7:D6:BA:3A:22:21:44:24:EE:6E:5D
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a6:fb:7e:91:dc:97:9f:fe:f4:b7:c7:bb:9d:a4:4e:b7:7f:
a0:b5:a1:fc:68:22:bf:44:d0:f7:e9:3d:1f:5c:69:9e:c4:9f:
ea:0f:94:a7:fc:80:cb:c8:0e:9b:96:6d:ec:02:dd:98:5d:ca:
8d:d7:54:34:7b:12:e5:59:4a:69:b7:0a:69:f4:cd:90:2b:0b:
88:08:c7:a8:c4:17:f8:b8:ad:85:00:d6:35:8c:10:a1:91:f4:
cf:8a:e8:8d:00:f7:4b:56:ca:af:1a:66:8e:35:c6:d6:bf:61:
d9:26:d8:ad:71:68:c7:eb:55:2a:04:b0:5d:7f:7d:b1:d4:04:
43:0d:38:fe:26:1e:bd:0e:8d:47:0f:13:46:43:08:10:82:10:
2d:17:d2:e4:1c:31:e5:e9:74:95:08:62:66:f2:74:fb:e1:d8:
59:54:2d:11:a1:7c:e4:86:48:2e:cf:51:76:15:8e:f8:b5:e7:
43:ce:c5:bd:35:bc:47:08:d1:0a:e6:9a:90:7d:8e:71:c3:a6:
1e:d3:bf:10:e6:44:6c:15:6b:02:6e:7e:4f:13:6a:60:8a:65:
58:88:33:30:a6:38:e0:04:17:9e:56:d5:81:14:54:a1:1f:0c:
82:93:38:e1:fc:cf:4b:48:14:61:20:a2:d9:45:59:2d:45:6e:
47:00:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:32 2026 by rpki-client