Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: K2lG5WZad5L+AhP3lvIPIFx7mSBGzdKknXcQAGW82TE=
Subject key identifier: 78:3B:AD:9A:B4:27:EA:93:94:C3:77:2F:52:E3:48:C4:4F:58:04:36
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019CADC7E34A68557CF19134B5157D047770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: LhgMqBvQFLWAwpoLZ1HGV6hfJs2ZzsGpPP5mPY8si4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e3:4a:68:55:7c:f1:91:34:b5:15:7d:04:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=783bad9ab427ea9394c3772f52e348c44f580436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:73:91:08:3e:20:cf:7b:c5:b9:a0:77:2f:
1b:0f:7f:40:1f:b7:3b:ef:ce:1e:90:25:3a:59:9d:
3e:d0:be:01:0f:24:ca:79:cf:c5:f0:a4:b5:7a:97:
9e:62:9f:b4:02:75:10:1c:ca:fb:31:ac:db:cd:8c:
33:8b:81:b6:fd:af:76:4a:f8:29:86:59:d8:bb:6e:
28:c4:be:c4:30:44:f7:e4:f5:1c:fa:07:94:d9:a6:
fb:eb:93:8d:9b:c2:22:d5:5b:a4:42:1d:24:6c:77:
36:33:c2:6f:8a:b3:69:b3:69:1d:65:3f:c6:91:0a:
70:d6:84:b9:75:ff:51:1e:0a:8c:a7:bf:a8:72:58:
f5:eb:24:71:9a:bc:28:26:46:8d:67:18:0f:0f:0a:
9b:75:94:bb:bb:62:9b:2d:90:7d:0e:d2:a0:25:dc:
6b:1d:5b:49:6f:bf:50:ac:c5:2d:a8:e7:a0:87:76:
a1:19:7a:ab:b4:29:1f:5c:3c:9e:4f:17:db:48:61:
32:c5:19:33:63:25:c0:8f:9f:bd:1c:5f:d0:c5:71:
2a:58:89:86:9e:23:6d:11:ba:1a:7f:e7:b2:b9:71:
ce:bb:86:a6:8f:10:43:80:aa:2a:72:33:38:16:fd:
ad:9c:26:18:61:47:af:ad:80:0e:c4:42:38:aa:1e:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:AD:9A:B4:27:EA:93:94:C3:77:2F:52:E3:48:C4:4F:58:04:36
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:24:eb:1d:f2:75:7a:14:5a:a3:90:d8:d7:45:f5:4c:b8:fe:
d9:d1:0d:83:e2:ef:06:32:e9:76:e4:84:0f:87:89:d8:a3:ca:
bf:34:23:ad:99:87:16:14:39:62:91:14:d5:91:86:35:cf:be:
bd:f7:7c:c1:5c:4a:36:a8:e3:47:ee:40:77:8f:51:13:23:a1:
50:00:b9:e2:68:4a:bc:b0:c7:7e:a3:80:1c:d4:b7:0f:69:7a:
5d:f9:57:f9:3e:54:f7:3d:72:a5:07:21:98:9b:55:c1:19:b2:
36:42:8d:11:f9:aa:e3:47:89:7e:c7:5e:33:0d:d2:38:98:8d:
33:ff:67:bc:7f:5e:8b:d2:8f:4c:af:f8:12:da:af:b7:15:5d:
b7:f7:11:ce:3e:46:77:8d:66:c8:ca:6d:6e:54:eb:aa:27:ac:
4b:79:ad:ff:9e:29:88:16:4b:91:ad:f6:26:f3:e7:e7:38:cd:
d0:c4:bf:07:f4:77:c9:c0:64:df:03:97:6b:1a:ad:a1:e6:06:
97:5b:6c:a0:18:8d:b2:68:8a:17:7f:a5:62:48:7f:11:d4:a9:
1a:b1:56:99:3a:03:5c:3d:b9:2a:be:73:16:14:e9:12:4d:2f:
e0:eb:03:c9:c7:b4:53:93:7b:97:81:d5:11:a1:13:7f:ec:86:
01:e7:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:11 2026 by rpki-client