Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: ydwM1kcTLDOA3S5QLpESSlDb9nojyejE7wZt1bJBhkA=
Subject key identifier: DE:07:4C:1F:B9:0A:CF:5F:FB:E7:56:C3:7D:8B:71:CD:F8:13:60:6D
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019CABA244E7A993FD801D4294FFCBDEEB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0806
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: ziUHykeDj4BquuO+tfjTVchbszwl02yhKVPBFV4al/I=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:44:e7:a9:93:fd:80:1d:42:94:ff:cb:de:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=de074c1fb90acf5ffbe756c37d8b71cdf813606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:26:39:d8:2c:76:09:d4:60:e1:83:d9:73:
3b:b7:f8:b1:47:9a:21:04:e8:38:2d:66:f7:04:f0:
e7:9d:6c:ad:7f:e2:a6:9b:87:51:04:d2:b6:11:22:
19:aa:f0:b1:65:34:90:77:66:05:9d:b7:3e:82:e0:
a1:9e:b4:9e:74:fe:65:3b:02:e5:7e:8a:16:48:a9:
36:b1:d2:03:0f:b2:63:3f:a1:b1:f0:38:d0:ee:be:
f7:6f:89:c1:46:06:42:6e:0d:2f:7a:ff:a2:0a:c5:
d6:fb:09:de:ab:bb:16:a6:ca:2c:6c:3a:44:86:01:
14:ac:47:ce:00:e9:eb:ce:25:e5:6d:f5:d1:91:c1:
ef:fb:d3:8e:a2:69:06:5c:9d:ae:f3:27:56:32:81:
f2:cc:a2:7f:34:1e:89:61:c1:47:af:0c:14:d8:ed:
a5:56:2a:56:c7:90:66:15:bf:e6:d8:77:d7:51:19:
8d:bb:06:ab:05:3b:07:73:07:56:40:46:26:8e:77:
9b:ec:2b:28:99:1d:1a:3d:7d:62:37:2f:90:a0:a8:
a0:d0:cf:7f:a1:39:06:c5:38:51:b7:41:4f:b7:85:
1d:16:70:c7:c4:ed:d7:b7:e4:87:0f:20:43:f9:28:
b5:9d:d6:31:ec:4a:ba:6f:c9:32:ce:e5:ca:2e:db:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:4C:1F:B9:0A:CF:5F:FB:E7:56:C3:7D:8B:71:CD:F8:13:60:6D
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ea:c8:3d:c4:42:00:4a:dd:66:09:b8:1c:2d:6f:4c:b1:f1:
14:af:2e:d5:3a:aa:9c:94:5e:1a:b1:99:8c:bd:ea:0f:f3:66:
3c:60:99:40:4d:32:3c:68:d6:63:45:c6:2f:83:5c:54:17:40:
2c:78:d7:ff:fe:38:20:9f:ea:53:ff:00:8c:58:01:68:b2:86:
aa:8d:24:c9:ac:45:5b:b1:39:89:66:14:4f:8b:38:7b:5a:18:
d6:c3:d2:bc:a2:20:5a:b7:57:cd:b2:33:81:d0:c1:d2:89:ca:
dd:fa:c4:78:0b:6d:dd:c3:16:23:20:95:8c:80:4a:34:b9:96:
7e:e1:d4:af:4e:41:9c:8d:cf:53:4b:af:5e:ae:e3:f7:6d:84:
79:14:ca:08:b0:88:24:c1:7e:cf:10:38:98:eb:1d:61:04:d4:
a5:da:27:63:50:c0:ad:0b:69:a5:8b:c0:a3:93:15:56:4e:cb:
3c:f3:ae:a0:e2:ef:90:0c:6d:ae:c7:53:6d:31:db:88:16:fd:
11:dd:57:81:40:0a:cb:40:5b:c9:42:ec:eb:fd:b6:67:83:5c:
fb:9b:06:54:8c:c5:14:49:1d:04:d0:5f:95:df:79:7b:a1:c2:
48:f7:15:b0:30:e0:69:97:e4:34:fc:81:ed:a1:1e:9e:f5:b5:
5d:96:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:37 2026 by rpki-client