Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: P6NiLK/0Wzsq4tmvYkTGgkGf7IVVPEdTNFUuBxD7gn8=
Subject key identifier: 59:6B:BF:72:0C:1B:4C:EA:89:D0:D9:DF:0C:3F:5E:30:DE:F4:4E:39
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019CAB34713434ED971A403D5132E45C4B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 16FC
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 7OnpLIVxycM56w4YwEMJSmw3NW1lRvzWWVhrakwKuRA=)
2: y8suQO3vpggb8SQxYQwAFafoDS8.roa (hash: EDpf6LTQFooyZUqxXXBv0qWQ0K8M8GX1XuFaFPpkkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:71:34:34:ed:97:1a:40:3d:51:32:e4:5c:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=596bbf720c1b4cea89d0d9df0c3f5e30def44e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:6e:cd:49:33:a3:ff:ea:5e:31:91:f8:6d:
f4:b4:26:a8:39:cd:0f:fe:e1:9e:78:e0:53:24:be:
1e:9a:60:a8:dd:e6:a8:ed:5e:ac:f5:09:e6:c2:5f:
8c:49:40:6a:8f:d0:e7:39:a2:3b:ae:9e:d6:27:53:
11:2d:18:c4:96:8b:f1:08:3b:c0:36:04:3b:f3:3f:
95:6c:59:56:62:06:6f:9e:09:ca:a3:1b:93:99:80:
31:3d:00:f3:9f:a9:8d:1b:c6:45:53:38:dc:84:a2:
74:72:5d:ad:e6:78:99:8f:da:88:52:12:0c:2e:bc:
4c:7a:1f:5c:96:fb:6c:c4:d1:a4:26:c4:4e:71:3b:
19:ab:de:b7:3d:22:f4:84:5d:90:3a:e1:90:70:dc:
76:74:f4:e6:20:3e:56:c8:7c:5a:ae:1a:b2:4e:23:
c3:61:f3:78:15:27:ff:42:c5:d7:06:84:9f:58:97:
96:e9:92:27:9a:77:a1:5b:cf:c9:4c:45:b5:9b:ff:
f9:fa:44:8a:15:be:6a:0d:7a:03:2d:58:a0:82:b7:
76:81:e7:35:8b:6e:b8:4b:08:9e:f8:79:0a:32:25:
19:ab:15:60:c6:ce:e4:8d:e3:13:5e:fe:94:b4:88:
b5:39:b9:0a:52:f3:bf:6c:ba:36:74:50:c3:20:9e:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:BF:72:0C:1B:4C:EA:89:D0:D9:DF:0C:3F:5E:30:DE:F4:4E:39
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:da:e9:08:cd:86:cd:54:40:10:f5:58:94:25:c4:97:ac:c7:
44:92:b8:d4:f4:64:10:3c:94:85:48:3e:06:37:73:f5:6c:5b:
54:df:fd:68:e7:7e:47:d9:02:a7:86:d9:5a:af:55:a9:03:4e:
eb:0b:bf:7b:49:f2:ad:2e:c2:a2:0e:f5:81:8d:85:25:26:1b:
b6:07:99:b7:8b:e5:15:29:34:a9:06:e3:78:e0:15:d3:de:1a:
50:cb:0e:56:5a:37:1d:43:6c:5c:ee:5a:06:76:e2:7e:94:e6:
c8:b6:d1:fb:de:cf:7b:cb:82:fc:1a:14:e2:b8:44:b1:1c:1e:
62:2f:05:26:bb:94:23:bc:a7:4b:2a:74:3c:34:d1:c1:ed:11:
0e:fb:1e:32:9a:db:d6:a6:2d:2f:30:d3:b1:16:ba:01:7d:0b:
24:65:77:fd:27:20:44:f9:9b:23:17:2d:7c:0f:ee:76:49:78:
ea:d8:24:13:2c:fb:73:16:ef:7c:8f:9b:87:a6:73:8d:8c:20:
45:a3:6d:50:c8:e1:8f:7f:85:20:0d:4d:ac:f0:2f:85:c9:ad:
53:fc:f3:d0:b3:12:0f:c6:ee:0b:d2:bf:eb:c9:7e:11:08:05:
a2:c5:d7:09:ef:a7:1d:a9:13:fa:92:c6:29:65:69:6d:49:d6:
97:5f:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:41 2026 by rpki-client