Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: rIUhtpTnJNv0JugOt+OUhbWDHx8TeyQTjHcGcy9Q3AM=
Subject key identifier: 45:17:03:E8:5F:2D:78:B1:45:22:F8:16:25:7D:84:4B:11:2A:B9:3A
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019CAA590273ACB73A8206FE56D7E589A5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 11EC
Signing time: Sun 01 Mar 2026 17:01:25 +0000
Manifest this update: Sun 01 Mar 2026 17:01:25 +0000
Manifest next update: Mon 02 Mar 2026 17:01:25 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: duaUxvyhBUuXebU4/+G9Jlr5XIY0tKp3MvRuqQQdePw=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:02:73:ac:b7:3a:82:06:fe:56:d7:e5:89:a5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Mar 1 17:01:25 2026 GMT
Not After : Mar 2 17:01:25 2026 GMT
Subject: CN=451703e85f2d78b14522f816257d844b112ab93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:49:21:6e:f6:33:e8:72:1b:36:49:c1:24:
57:e6:27:80:d9:1e:d8:66:0f:b7:cc:e5:24:00:c3:
68:25:fe:78:84:3a:6e:8d:4e:1f:7b:25:68:e7:15:
47:5b:2e:97:ee:30:42:7e:5c:7e:6d:59:3e:8f:23:
16:88:41:44:cf:3e:5a:04:8e:3c:43:b5:f9:05:55:
f9:2d:05:a2:d2:a2:14:71:a2:32:58:e3:20:7f:76:
6d:66:6f:ae:01:cc:0f:66:f0:7c:1d:74:46:03:1c:
8b:75:5a:bb:62:d2:19:cd:87:4b:2c:15:63:f8:94:
fe:04:f4:fd:0d:70:55:71:06:49:d8:97:81:b6:02:
82:45:3a:07:d5:d4:eb:79:af:7d:b4:45:f4:a9:58:
09:3e:cf:dd:52:c3:6f:79:d3:c7:ff:e4:f4:cd:fd:
b3:05:33:91:44:ea:74:bf:f8:3e:41:eb:a5:93:d1:
94:2d:4d:a7:11:48:1c:a6:6f:a1:cb:82:33:71:65:
b3:d7:73:25:8b:be:cb:b8:78:da:2d:6e:e1:e6:1f:
5b:1f:db:5c:3a:a0:3e:d0:d7:79:ea:34:85:78:8f:
e7:2d:29:c8:23:89:6d:6b:de:23:a6:43:93:38:b8:
e4:ba:1f:88:4d:4d:91:ce:93:9a:4e:a2:b6:c2:d2:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:03:E8:5F:2D:78:B1:45:22:F8:16:25:7D:84:4B:11:2A:B9:3A
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:47:be:25:57:d4:ac:f7:04:3b:ad:23:b7:84:1b:07:a2:
c0:2a:a0:a4:57:31:bc:d7:01:1b:a5:02:58:e2:fc:a4:dc:6b:
9d:b8:f9:1d:4c:7c:d4:dc:c9:62:d1:bb:f2:35:10:c1:13:c2:
9b:51:0b:1a:fe:b7:64:58:0d:3c:b2:2f:62:11:25:20:97:b5:
fd:6a:f0:90:97:36:54:71:a7:a0:d4:42:86:2b:84:33:41:2a:
43:9a:a5:6a:12:08:3a:93:22:f9:82:e9:3c:a1:6b:a2:84:e1:
ed:53:2c:92:4d:3e:0a:19:e7:bd:c6:c9:3d:2c:14:10:8b:44:
8b:2f:86:bd:f0:cc:de:fb:cb:bc:e5:c7:b0:d8:ec:74:8d:2e:
6d:c3:e2:a1:b0:ab:68:63:05:d4:a4:c6:73:be:7c:9b:1e:63:
85:0a:b9:35:c6:40:6d:17:d3:06:75:4f:7c:8b:57:f3:e5:a4:
7b:63:07:04:6a:ba:b5:a6:3d:8d:37:68:d0:d8:65:94:8c:02:
b4:34:2c:05:79:b3:f4:d5:90:7b:cb:eb:ac:d5:e0:c7:25:7d:
79:23:b9:eb:49:36:a2:12:09:16:ad:43:38:87:93:a4:54:c3:
84:dc:85:98:74:eb:d7:54:3e:15:65:2c:5e:9c:5a:cc:87:53:
07:75:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:16:27 2026 by rpki-client