Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier: AOLO7OpL12ydZ6a+hWNotpFY0uRrcIoMBwF3bPfF6os=
Subject key identifier: 80:56:C7:41:84:19:FE:45:22:F0:D9:52:97:02:C6:91:96:65:D0:AD
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial: 019CA78E52622D0C15F8D618A14060B48C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number: 57
Signing time: Sun 01 Mar 2026 04:00:48 +0000
Manifest this update: Sun 01 Mar 2026 04:00:48 +0000
Manifest next update: Mon 02 Mar 2026 04:00:48 +0000
Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: oRB3DtWB0i9vSyvB3n6bcPlYaK/3LIEfXFgbcGbUuBs=)
2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:52:62:2d:0c:15:f8:d6:18:a1:40:60:b4:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
Validity
Not Before: Mar 1 04:00:48 2026 GMT
Not After : Mar 2 04:00:48 2026 GMT
Subject: CN=8056c7418419fe4522f0d9529702c6919665d0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:5c:b5:0e:48:df:bf:45:60:8c:1a:39:34:
7e:40:aa:fe:39:07:4e:f5:d2:cc:22:3f:ea:5e:31:
85:5c:f8:24:a7:f5:4e:2f:4b:54:58:24:2d:af:90:
6f:50:97:b8:18:c4:46:2e:77:a5:68:2c:16:91:45:
10:00:01:b3:6a:60:a3:c7:6d:6f:50:02:5e:22:9e:
24:20:23:a0:86:0c:c6:63:49:24:fb:fd:2a:74:1b:
e8:34:a3:0f:64:d5:a4:db:a8:de:85:40:a8:5a:9e:
9b:0c:10:27:ec:5e:e5:ee:ed:25:39:f4:44:9b:4c:
15:87:44:2c:65:83:12:fb:0e:7a:30:88:b2:b2:ff:
ca:28:ee:fd:7a:29:1c:77:9a:e5:1d:06:bd:b0:da:
b0:b7:38:6f:3c:29:c6:87:b6:70:97:d6:49:06:d1:
98:b4:93:e6:9c:3b:e2:fd:02:2d:5a:32:4c:81:43:
ef:0c:a5:2d:17:3a:e3:c2:5c:77:69:6f:d1:1f:e5:
21:a4:ab:84:f9:b9:0a:11:9b:f4:ae:ef:86:ca:3a:
5b:ba:49:63:d6:d9:f9:76:1d:9a:cc:92:ba:36:b5:
46:83:62:59:31:6e:d7:e8:fc:3b:cb:25:c0:8a:b1:
79:46:6c:18:55:0e:71:2c:f4:fb:bb:98:13:01:9c:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:C7:41:84:19:FE:45:22:F0:D9:52:97:02:C6:91:96:65:D0:AD
X509v3 Authority Key Identifier:
keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:57:10:f2:18:98:7e:e6:0d:bb:8d:05:e5:ab:8d:e8:96:5d:
43:d5:7d:68:b4:bf:1c:2c:84:d8:00:02:bc:f5:0e:27:4c:db:
77:b8:0f:32:7d:ee:22:d2:23:a8:af:82:c4:bc:e1:29:27:52:
9f:b8:aa:e5:5e:ff:b7:bf:b0:42:1b:81:2d:91:4e:a5:a0:a0:
4e:cb:bd:d1:f2:0e:a8:0f:72:41:44:2e:42:46:d1:f4:fa:98:
c7:31:95:66:e5:bf:64:6c:b5:43:2d:03:5b:1f:54:0f:50:3f:
94:47:06:37:27:b0:0e:f0:d6:c4:27:cb:9a:10:06:e1:bd:f1:
33:58:c3:6e:b9:73:af:78:90:a6:fc:cb:59:65:03:35:c1:73:
dc:79:19:65:16:2c:b2:f5:8e:7c:18:18:5a:c2:27:f4:8b:57:
d7:30:1a:f0:a4:91:d4:1a:22:b6:a0:b3:00:6c:6e:1b:dc:6d:
d4:5c:06:a8:3f:33:f7:e8:d1:15:94:eb:81:28:c4:38:d2:70:
9e:f8:8b:0c:0b:8c:75:d0:3d:a9:79:7e:a3:a9:b4:7d:ae:c6:
ae:1e:a3:b7:e3:19:fd:9f:1b:3e:ed:10:e7:e8:ac:66:7b:3c:
1d:e9:4e:48:16:fb:53:93:0f:5c:aa:c0:bb:6d:77:e4:c2:8d:
81:f4:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:49 2026 by rpki-client