Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: i2iOZj3wTUbsdYBMTaRYG8ibMG7PsFH0FSNLYW9VT+Q=
Subject key identifier: 8C:43:1A:C3:69:60:C9:4F:15:DE:E4:88:F7:B4:49:BA:94:BE:10:E0
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019CAC4712FB495E8A06674E6EC6842D7CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: FU/m/ZV1LoGMDV8hgVgSy34XTgZm7Uj9oqaoa3pa4WE=)
2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:12:fb:49:5e:8a:06:67:4e:6e:c6:84:2d:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=8c431ac36960c94f15dee488f7b449ba94be10e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:7d:2b:cf:e5:c1:f9:d0:65:73:36:06:01:
39:95:fc:d9:d9:af:18:84:66:5c:c8:08:c7:4f:e2:
9d:b0:3f:4b:54:9d:36:e8:86:6b:9d:cc:bf:70:34:
93:7b:a1:a8:53:2a:4b:41:27:47:8b:bd:ba:61:8a:
d1:8b:75:2a:6a:18:b2:f2:69:af:d2:9c:5f:a4:f7:
c4:78:3b:b9:99:63:bf:26:57:08:ef:86:ab:f2:aa:
ff:b8:f7:a2:63:90:80:a1:ad:df:95:c0:44:d4:b1:
d8:d2:c2:ea:c2:52:6f:ae:86:19:2f:46:09:4b:26:
f9:0b:7e:89:84:50:6e:5a:ca:1c:1f:30:34:6d:10:
61:ad:21:95:ef:58:fd:ce:ac:9b:e6:cf:a3:4a:01:
6e:9e:68:cc:a2:30:ff:b6:6c:2f:c0:31:39:de:4d:
42:c1:92:3d:76:0b:c6:8b:15:31:64:f3:9d:c8:f5:
86:3d:d8:ab:df:29:c7:42:96:ee:7f:74:7d:79:d1:
89:b1:df:ed:8b:b0:7c:38:2d:a0:91:8d:5c:8d:a5:
f4:98:8f:66:15:3a:a0:39:68:2a:6f:d0:57:7b:49:
7f:07:f7:87:85:b7:51:0c:84:ca:c9:98:1e:b7:d4:
e3:81:99:74:e1:ef:a2:0a:b4:fe:6b:4b:b7:00:64:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:1A:C3:69:60:C9:4F:15:DE:E4:88:F7:B4:49:BA:94:BE:10:E0
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:b9:c8:d5:e2:74:be:9c:8a:9d:74:c2:35:9d:03:bc:fb:
7b:21:d6:97:44:73:56:cf:87:ce:0d:03:a5:1d:98:27:55:aa:
b2:dc:9e:54:d4:7e:84:8f:c9:6c:6a:ab:eb:65:42:2a:42:10:
fa:48:60:dd:2b:4b:30:14:7a:1d:87:0f:49:7a:5b:bc:2e:c7:
5e:56:29:70:d4:56:6d:26:92:f0:b1:0c:37:92:fc:2e:d0:46:
15:2d:db:64:1b:13:59:f3:0c:fd:2f:a4:dd:f7:84:7d:43:d4:
cf:54:9b:d2:4d:59:ef:c7:99:8e:54:69:d4:33:eb:9a:e8:2f:
56:51:d5:d6:e3:83:61:2f:6d:e5:b9:ca:38:33:c8:70:68:02:
fd:c3:cd:4c:c0:96:8a:2c:e9:66:dc:ec:d0:71:63:8a:0a:4d:
6e:83:e1:61:e2:d3:c0:86:56:6b:0d:0c:fd:c1:6e:d8:eb:da:
84:9a:9f:c4:53:42:d5:41:8c:fb:c0:b4:32:8d:8a:e7:e8:fd:
2b:ba:3f:ef:80:75:f4:90:29:eb:ea:49:e2:0c:e4:6e:69:f9:
27:ef:a0:99:f9:0f:74:51:12:fb:14:d6:5b:9a:80:d5:b5:84:
37:96:75:42:af:2a:e5:e5:f7:b9:aa:e9:9a:a8:96:5b:57:23:
27:ef:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:51 2026 by rpki-client