Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: OtKCplyRiXSrrUuWL5yHagYddtCIvf1I+sHxczvP5vw=
Subject key identifier: DA:BF:45:71:C8:7D:4A:B2:40:59:94:92:82:6D:7A:45:0F:CC:04:B7
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019CAAC6209AAC6908B01E99EB8834A74BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 0446
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: w3d6n/Yd1jQYnVcnI2NCO1b7vhWOF2mMXkN5E4KmBEM=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:20:9a:ac:69:08:b0:1e:99:eb:88:34:a7:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=dabf4571c87d4ab240599492826d7a450fcc04b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:3a:db:b4:09:e9:da:52:d1:1a:1b:14:9a:
c1:89:dc:74:9d:ce:fd:f0:26:f6:f2:65:0c:d9:e4:
d0:bd:32:be:c1:d1:df:e9:12:bc:07:5a:ff:35:a4:
ed:1e:7d:60:57:7d:63:f2:2d:8d:81:25:d9:a0:a7:
68:e0:7f:35:50:27:78:b7:73:94:da:96:03:ff:ec:
96:23:ee:e1:d1:2c:12:ef:5b:7d:9c:5b:89:66:4e:
4b:88:84:9a:7f:a1:4a:ff:56:24:f7:59:1c:00:50:
6f:89:1c:7a:01:b3:39:2a:58:5d:55:8c:48:38:d0:
f1:63:d7:c4:95:95:f6:73:1c:89:6d:d1:e6:fe:1a:
bf:7e:e4:09:49:4a:82:ba:4e:c4:48:dc:54:9a:33:
c2:1d:cc:2c:91:97:7b:0e:5d:0f:3c:46:bc:d0:5f:
47:84:50:89:d2:1c:54:16:35:11:c7:27:7b:0f:b4:
34:ce:9d:64:8b:43:e3:0d:fa:6d:bb:e7:c0:46:2d:
5b:e9:85:f7:bf:8d:d9:77:19:97:db:4d:52:0b:43:
b9:39:2f:d4:8c:de:c8:d6:55:c9:ae:b7:2a:26:85:
fb:44:1b:24:20:17:50:c8:78:39:7c:db:f6:1a:cc:
7d:20:a1:ef:23:ae:5e:85:57:6d:20:4b:8d:c0:fa:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:45:71:C8:7D:4A:B2:40:59:94:92:82:6D:7A:45:0F:CC:04:B7
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6c:85:25:62:dc:24:55:a8:8c:97:4b:32:3f:24:a8:b8:2d:
83:32:ea:a8:5a:3b:5d:3a:cf:de:38:e1:1e:b6:57:d5:9b:65:
83:af:94:f1:c8:fd:e0:d0:f3:92:ed:6a:12:78:7f:4a:b2:8b:
8b:e0:12:e0:4b:44:90:9a:e3:39:c9:50:63:29:6a:6f:20:54:
e8:bb:11:06:64:5c:bd:26:f1:b3:48:7b:9e:63:1d:97:44:7f:
1e:9a:e7:d8:0c:30:c6:b1:f2:17:21:9d:62:19:7a:3e:e0:b0:
8d:52:26:86:30:f5:b8:06:ad:17:66:f0:56:3b:dc:8a:3d:d5:
1f:38:b3:bc:c2:6a:ec:9b:bc:00:4f:24:28:07:2b:8c:55:c7:
ee:1b:92:6c:d2:bd:4b:01:cb:69:f7:e8:9d:28:58:fc:24:b1:
85:34:50:27:5b:11:1d:8e:ec:38:0b:1f:43:e2:4a:47:20:76:
b8:3e:a2:96:41:e7:18:de:91:f3:51:43:cf:f2:54:6b:78:b0:
d1:ea:a9:fa:c4:13:89:85:58:51:94:ec:2e:2f:70:e2:13:4d:
d1:81:8d:59:3b:b2:3c:08:99:80:7d:b0:7a:02:02:a6:f9:5e:
64:e6:ea:1b:f2:bd:6d:e3:99:fa:d1:f1:fb:e9:70:0a:f0:d2:
ec:3e:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:11 2026 by rpki-client