Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: hmv+GJm5+bnptu+DLP75Ck3sX7YUuT8NfOh1v1VDHoY=
Subject key identifier: 39:41:F8:CE:3C:4D:2F:3A:F3:AD:ED:74:9F:1F:DE:D4:6B:63:4D:FB
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019CA9EAE5FF36FD32504C366C5D6080F65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: UsAhOb86c+pnE4SaKp6q0MNIcolcNZl0BhBSSlO1E1s=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e5:ff:36:fd:32:50:4c:36:6c:5d:60:80:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=3941f8ce3c4d2f3af3aded749f1fded46b634dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:f0:5a:da:dd:58:da:9e:6d:74:10:01:3a:
71:f0:06:f5:6e:bc:e0:c4:46:0f:cb:0c:ec:cd:57:
86:2d:6e:12:0f:0d:6b:29:7a:8b:86:96:de:27:82:
dd:d1:3d:3a:06:e6:13:27:7e:38:25:9f:ec:6e:91:
8a:85:21:7b:06:62:ec:30:f2:3c:03:fa:05:40:3d:
33:03:2c:ab:c9:3a:cd:d6:f3:99:a6:d1:09:8d:38:
9f:33:5f:d8:a7:87:8e:af:f0:6e:1a:a4:9b:f5:71:
27:60:5e:7e:81:69:a2:cb:3d:f3:4c:16:65:74:5c:
58:01:d7:f9:89:9a:1a:fe:94:dd:31:e7:b1:71:2f:
30:0a:0c:59:20:fb:76:34:ba:8b:cb:12:e3:17:80:
db:41:c8:54:d5:fa:ad:33:1b:3c:13:c5:97:8e:91:
9f:ab:61:72:73:e4:cc:87:64:3f:3b:91:80:dd:6f:
46:13:04:6f:6b:43:59:11:d5:cb:f6:8f:95:bc:b3:
2b:fa:b6:72:41:b3:79:fc:44:b7:6c:e5:32:78:ef:
64:77:ef:17:e4:9f:03:2f:17:ef:df:2a:ea:a2:36:
60:7a:ca:9d:09:b0:3e:4a:ab:62:f2:05:03:60:72:
a7:a2:80:76:cb:b3:40:0c:2f:b8:eb:ba:d0:70:a8:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:F8:CE:3C:4D:2F:3A:F3:AD:ED:74:9F:1F:DE:D4:6B:63:4D:FB
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:7a:3b:97:b8:05:97:f9:82:e7:4f:cd:4d:04:98:ac:a8:
de:83:01:9f:08:09:9e:4a:bf:22:25:51:9a:4e:f4:f9:79:37:
c5:17:b7:14:93:db:12:f7:61:5c:bb:fe:bf:2f:98:7d:fd:41:
94:a6:b7:7c:bc:97:1c:4e:58:a6:ed:04:3d:16:4b:74:91:7c:
e4:d2:45:32:46:2b:12:a6:ae:72:97:40:0c:a5:48:cd:52:62:
8d:8c:43:47:b4:fa:be:51:02:ea:60:82:4d:f4:70:6d:d1:3b:
89:77:39:ab:ff:7a:11:b2:ce:e0:4a:4f:4d:18:a3:5c:b1:dc:
a1:bd:e1:03:17:b3:68:0f:12:61:a3:06:28:55:14:36:a3:2f:
e9:e9:70:c6:50:97:a7:13:b8:9b:c1:28:0f:d5:a4:a7:9e:b7:
be:c0:6e:aa:2c:21:25:e9:12:1a:41:41:d8:e2:25:d0:5f:4d:
61:5b:e1:fc:26:16:38:54:58:08:75:94:80:75:68:7f:48:e8:
2b:41:0b:9a:b5:f6:26:15:69:97:05:ce:d6:0e:5c:bc:d8:9f:
82:b3:2a:de:1e:6e:5e:7a:96:f2:2c:97:86:34:b3:37:39:3b:
1a:dc:50:e7:17:08:7b:cb:74:41:27:32:33:48:91:29:3b:96:
2a:d0:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:10 2026 by rpki-client