Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: kPLOX98gJxuKO0pOqhYjRn3K/htA730LX/BPowVQcYk=
Subject key identifier: 4B:2C:5B:F8:B8:53:0E:56:D2:A5:AB:47:B8:00:04:7D:E5:20:54:77
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019CAAFD7DC612129C295028AA7474D606A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1346
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: Jtytl2TpLDLhVNXJK9pK97eNu9IdhBWPvZ7uKQVjStU=)
2: pOAwtv3oQJH41toyc3-E5JthOJs.roa (hash: wtG0+KFgN0eCbjfcXDWDwmbRVVhbjWhn4sWPMdUHZ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7d:c6:12:12:9c:29:50:28:aa:74:74:d6:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=4b2c5bf8b8530e56d2a5ab47b800047de5205477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:0b:7e:32:cf:c6:59:bd:f3:34:95:9d:b4:
d5:ae:4a:b5:98:12:46:01:62:75:be:bb:a1:2a:7f:
a1:9f:d4:e8:d2:9d:7f:e7:fd:c7:a2:71:43:b6:dd:
3e:78:c0:00:27:ee:ea:55:f6:9a:fd:49:c4:46:da:
45:02:ef:a5:5c:8a:e9:fc:3e:a5:41:11:eb:bd:22:
ed:b1:21:3b:8a:84:79:8b:86:92:a1:60:76:09:45:
49:17:b8:74:3c:3a:e4:92:94:4a:ed:4c:76:67:c9:
a1:4b:b0:e7:44:ee:16:93:1e:fc:c3:f2:c4:78:79:
e0:17:f6:1b:74:4a:64:92:d3:79:9c:16:66:e0:fa:
58:62:94:3e:f5:09:8f:b0:ec:b4:bc:39:6e:eb:a6:
a5:a7:57:87:36:70:8d:a8:46:f5:53:6e:f9:cf:a8:
23:62:86:39:ad:fd:48:25:9d:6e:16:26:64:b0:11:
37:24:a4:3a:22:47:d5:d7:05:7d:89:61:cf:0a:96:
92:6c:d0:54:b2:2a:51:49:91:ab:c2:19:cc:2d:04:
9d:ab:02:7e:84:45:1b:0f:ed:ab:28:91:fe:84:b9:
db:5d:e5:0a:cc:02:9d:c1:1a:cd:bf:96:9f:6d:a9:
56:fc:3a:cd:02:fb:55:ed:ed:3d:82:f0:d2:18:1d:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:5B:F8:B8:53:0E:56:D2:A5:AB:47:B8:00:04:7D:E5:20:54:77
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1b:46:55:ad:28:9b:e7:c6:94:6c:2c:a0:14:c0:47:55:2b:
dc:d9:89:af:3b:e0:c3:15:97:3f:72:dc:1c:b3:b4:16:f6:8e:
36:2f:ca:b7:38:74:c5:43:59:62:d5:02:67:37:55:28:98:3b:
f9:2e:b3:e9:61:fe:51:62:a2:39:1b:60:da:55:12:60:10:e2:
94:e2:b1:05:da:38:ab:19:c8:e6:0c:e9:d0:f8:7e:70:6e:fc:
de:56:0d:17:74:10:03:a8:eb:c5:e1:e6:5c:c9:4a:42:b5:a7:
4d:6b:cc:75:09:36:36:20:6f:b2:8f:e8:20:a6:4d:4c:af:f4:
6a:bd:87:54:56:6a:9e:4c:32:60:d4:aa:52:82:54:2e:1b:5f:
df:d2:8a:5e:b8:cc:34:32:ef:21:19:e9:a2:ff:5b:d2:aa:b7:
d8:b1:96:a4:ce:f6:99:8c:4c:2e:51:66:5d:0c:68:62:18:52:
ec:2d:ca:67:7f:e3:fb:57:89:8c:95:51:3a:12:46:44:34:37:
82:6d:55:57:12:7c:cb:67:54:99:62:63:a3:e8:5e:b3:c0:f6:
bd:9f:bf:3d:97:63:55:e8:27:9c:a0:0f:a1:94:d8:4e:8f:b3:
ec:fc:f8:60:18:2b:ba:31:b3:3e:ed:d7:b5:51:1f:7f:2d:43:
35:93:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:25 2026 by rpki-client