Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: +cXNIxEDxtHYLzyHv6C2XfF2TedIhaOTC2dojsuB/pc=
Subject key identifier: A9:1B:7B:85:D9:92:E4:0B:BA:11:08:74:D8:55:B4:C7:C9:B4:50:E1
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019CAB6BD8878A861CD9AF30FF285B248CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 1654
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: NLc/gSxjByF5p6ohUiyE1LQsUMBhtTzPTdN9tdjryJg=)
2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d8:87:8a:86:1c:d9:af:30:ff:28:5b:24:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=a91b7b85d992e40bba110874d855b4c7c9b450e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:a7:cd:22:ae:9e:02:64:3f:42:48:d1:06:
3a:77:6a:10:95:64:d5:ab:5e:3e:2e:27:17:48:37:
eb:61:64:47:f3:4e:7c:66:3b:10:de:30:12:37:e1:
14:97:78:0b:b1:05:f1:d8:0d:93:34:8a:4a:be:82:
24:6c:ce:b3:cf:34:73:e0:d1:0f:d3:57:6f:71:d4:
de:7a:c3:dc:d8:3f:ba:41:f3:f9:b5:fd:94:3c:b8:
fc:bc:6e:8d:f9:e2:19:55:01:cb:1e:76:f3:09:77:
18:32:99:ca:11:af:7d:ca:dd:78:b2:f9:1a:75:b3:
79:23:f0:59:39:95:73:89:62:59:80:67:a5:c3:53:
06:d2:49:6d:6e:15:b3:3e:55:f2:4e:90:9c:63:e6:
89:a3:1c:c9:f7:f7:79:75:17:db:4d:74:9f:02:0f:
be:df:f9:7b:6a:ed:f0:2e:b3:75:4a:d4:e4:45:ec:
ba:ae:0b:6c:81:8b:83:78:a8:63:95:7c:39:5e:1d:
2c:e3:98:af:ae:08:22:f6:d5:47:3b:9a:f4:53:35:
23:31:c2:85:4f:74:a1:4f:8c:14:95:1b:cf:58:1f:
68:94:d5:9d:15:57:8c:9d:a5:0e:40:8b:f9:45:53:
b1:e9:ca:d0:a8:0f:d2:f4:9b:aa:44:36:62:90:38:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:7B:85:D9:92:E4:0B:BA:11:08:74:D8:55:B4:C7:C9:B4:50:E1
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:e9:ac:23:48:ca:20:88:cf:04:12:0e:6e:92:30:d6:1c:
4e:6c:b5:7d:d5:6c:35:24:3d:93:8c:4d:21:42:bb:63:4e:e4:
ef:93:34:45:6b:cd:fb:0e:68:d7:49:c0:09:05:7b:e1:b2:97:
b3:f9:2e:e4:3c:3b:16:e9:b7:8e:09:be:47:1f:20:ce:f6:88:
91:0b:87:8c:9b:37:d6:8b:71:31:18:2e:07:7b:b8:82:d2:d7:
e6:d4:d5:2d:53:5f:4a:7c:45:76:d6:57:a0:f8:81:70:da:e7:
5e:e7:1e:ba:af:53:a6:69:b3:d1:7d:36:21:57:70:2c:50:3c:
03:dc:12:f1:96:04:14:03:5b:32:04:7c:ee:a5:e8:88:44:c7:
41:c5:4f:45:26:54:5b:f6:a3:5c:b4:3b:8d:d8:cc:63:99:00:
75:be:c8:a2:a5:c8:17:b1:81:c6:ac:9f:a0:b4:19:f8:0d:2c:
f6:a4:3d:1d:ae:bf:ed:d4:d1:d1:e5:1d:b4:12:bd:3e:db:d6:
53:91:a3:26:16:4b:51:3b:94:40:4c:04:8e:30:5d:76:8e:e0:
6b:f4:1f:4a:ca:73:a2:d4:11:cf:5e:6e:cc:94:46:25:35:97:
64:42:e3:3e:a8:87:2c:97:72:ab:d6:fe:7c:8c:4d:2f:70:7f:
2c:02:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:29 2026 by rpki-client