Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: nabhhMvmX0lEjI+huSL8R22xk+9L5DBhrI2ZWW8/43U=
Subject key identifier: 0F:66:FC:34:28:C8:15:45:2F:09:42:17:18:65:07:90:B3:A3:0B:DB
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019CAB34A085833E93AEECFBBFC83E613458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:18 +0000
Manifest this update: Sun 01 Mar 2026 21:01:18 +0000
Manifest next update: Mon 02 Mar 2026 21:01:18 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: xqbW8WkTILLbbezcWu700HdEvM39N+XB7seaik9Q6eM=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a0:85:83:3e:93:ae:ec:fb:bf:c8:3e:61:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Mar 1 21:01:18 2026 GMT
Not After : Mar 2 21:01:18 2026 GMT
Subject: CN=0f66fc3428c815452f09421718650790b3a30bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:59:dd:8e:99:1d:c6:a6:23:37:b7:e4:8f:
57:e6:f1:dc:b3:97:17:fa:6f:4a:48:43:aa:b7:fd:
e4:3f:1f:22:c5:23:49:5d:fb:5d:9a:65:09:1e:20:
f6:1a:e9:5d:69:ef:b9:da:2a:78:82:ad:7c:14:a6:
5a:87:0a:7e:00:12:9c:21:dd:41:7d:42:24:47:6e:
41:c3:07:d8:f1:fe:2e:f9:fb:fa:21:27:02:1e:11:
4f:4c:e1:9b:01:d1:aa:9d:d5:b6:92:dc:63:ec:6b:
0d:ba:a8:b4:b5:96:1f:56:ac:40:31:80:a0:12:b5:
29:9c:a4:a5:5d:e5:52:ea:25:d4:c4:01:55:f3:4b:
ff:26:79:33:eb:d2:98:1b:0c:13:e1:21:3a:37:ac:
46:bb:0a:b7:9f:20:ef:79:a3:1a:e3:3e:b8:ed:30:
18:fc:c5:1a:28:84:49:71:60:68:9a:9e:ef:3c:7a:
8b:78:51:ee:ae:80:ee:79:ca:e2:63:75:b1:b2:b4:
50:38:28:61:10:77:21:4b:67:73:33:90:0a:40:97:
6b:c2:ed:7f:d5:2e:64:d7:48:db:4a:3d:36:5f:d7:
65:09:8c:07:6d:59:3f:fa:ce:97:fe:e1:0e:da:d3:
76:a4:5b:ca:f4:12:bf:35:95:3e:41:3a:1d:4d:41:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:FC:34:28:C8:15:45:2F:09:42:17:18:65:07:90:B3:A3:0B:DB
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:79:b4:41:c8:a9:8a:98:5d:41:93:55:98:74:c9:72:dd:54:
d9:d8:91:8e:94:ec:5c:81:e3:0d:28:1a:19:2d:56:cb:fe:66:
b7:20:26:d6:bc:f0:ac:f0:5f:97:37:7a:bb:f6:1f:45:57:b2:
41:ec:e3:de:39:ba:87:b9:8e:32:7c:e9:4f:95:c4:be:ce:da:
35:da:92:34:ce:b0:b9:ca:cc:ab:5d:92:fa:66:63:b4:22:e8:
a4:33:77:38:c7:67:56:f2:a1:a7:13:a5:be:ed:a9:07:06:50:
29:32:f7:4b:5f:73:67:ee:64:98:50:5f:47:e6:5b:1d:43:67:
5b:49:70:6e:a4:3d:f0:b6:6d:76:6b:34:04:5e:27:5d:10:4f:
15:9b:48:e3:be:ec:dd:7a:34:47:44:da:c8:c8:56:c6:81:e8:
d2:64:33:4c:07:dc:f4:d9:7d:e2:31:a4:56:66:e1:db:d8:40:
d5:5d:89:55:6f:f1:b3:94:b0:0e:32:08:ee:54:96:6d:d8:ef:
48:33:11:f6:f5:b2:a4:67:ce:59:0c:52:d1:51:c5:d2:b3:62:
c8:ce:e0:15:91:2f:34:5f:7e:39:f0:81:1b:96:bf:c6:95:6a:
56:90:f6:9e:ba:70:04:ba:dc:b2:2a:ef:23:c9:53:25:41:e8:
53:65:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:52 2026 by rpki-client