Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: kRPIvrfM6N4y+bG2jEx7rmkXl7m9nCoWVHdYAAGSkWo=
Subject key identifier: F0:51:06:89:B1:81:03:CE:CF:56:2E:B5:FC:4E:5E:95:F1:D1:7F:FF
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019CA9B3823D90DDF0E8ADEFBF58AA2672B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:39 +0000
Manifest this update: Sun 01 Mar 2026 14:00:39 +0000
Manifest next update: Mon 02 Mar 2026 14:00:39 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: TlVbi8HwJVzCoVVvBYP+HX+SHvrhdVRV05GLqmHVFm4=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:82:3d:90:dd:f0:e8:ad:ef:bf:58:aa:26:72:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Mar 1 14:00:39 2026 GMT
Not After : Mar 2 14:00:39 2026 GMT
Subject: CN=f0510689b18103cecf562eb5fc4e5e95f1d17fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:28:91:9d:78:9c:dc:36:a0:62:ee:a2:36:
9c:a2:17:7d:87:99:0f:87:61:20:aa:be:08:bc:2d:
c7:5a:31:24:b5:0f:5e:cc:98:85:6f:ed:be:1c:d0:
24:ba:6b:4b:57:02:02:f4:cf:08:16:05:f1:f5:69:
64:98:22:e8:68:e2:43:eb:2a:5c:29:71:67:8f:55:
f2:e5:dd:45:b8:1a:9c:fb:f9:f0:ad:53:3e:68:88:
10:b6:de:91:47:83:4d:6e:ef:0d:68:30:4d:13:29:
85:87:8c:0d:0d:4b:81:95:48:07:08:91:e5:4d:0c:
1e:94:62:a6:2f:52:ae:cc:3d:97:e7:e7:02:b3:35:
b7:9d:b4:5a:ea:99:18:ed:e5:5f:4d:30:75:cf:dc:
f1:b6:f2:5b:d4:13:dc:98:a6:d7:b3:46:82:de:20:
18:c8:be:13:43:ff:c6:62:31:eb:35:cb:1b:a2:cc:
01:08:73:18:ca:6a:bd:12:8e:95:d6:36:9d:d9:33:
5b:9c:fe:2d:83:80:7c:6d:02:d8:4e:95:fe:2d:8c:
e7:85:2c:bb:a7:0e:4d:82:b1:38:11:e6:f0:55:df:
4c:e1:f3:d8:d8:bf:3f:ae:bc:ac:2f:dc:7c:42:44:
7c:c6:c0:32:ef:17:84:b6:e2:68:e0:9f:89:dc:1d:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:06:89:B1:81:03:CE:CF:56:2E:B5:FC:4E:5E:95:F1:D1:7F:FF
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:31:3d:43:c6:a7:cd:26:8e:29:c7:55:5a:b6:10:98:d1:
e8:d7:79:f6:83:7d:52:43:27:d6:6c:5f:d1:62:e1:57:0e:2c:
27:fd:e9:01:df:0b:c5:7c:fc:15:0e:1d:d6:16:15:66:df:e3:
c2:d1:f2:2a:ae:5d:a6:1b:2b:7d:cc:9f:6c:56:9a:f8:d6:53:
73:07:73:0a:ed:d5:35:30:7b:40:47:67:32:1e:6f:39:41:27:
46:86:29:dd:f2:27:55:7d:4c:05:24:9d:9c:9c:c7:03:94:fc:
ce:53:0c:12:2a:cb:a7:c0:71:60:95:47:f0:15:05:90:b7:b9:
c9:3d:8c:70:4c:e0:cc:86:6b:db:e3:e4:b4:73:55:fe:ba:d0:
a4:41:8a:58:fb:f0:56:80:3c:5e:d4:06:ad:72:5a:13:7d:41:
a6:33:11:0b:97:e5:b6:73:35:3d:b6:da:95:fb:d6:c4:16:4f:
aa:da:f0:5e:c1:04:30:79:b4:f0:4f:b5:8a:f0:b1:b9:70:b1:
c7:3a:f7:ef:65:6c:ae:ad:5d:80:64:36:d1:61:ca:1a:56:b3:
2b:6e:23:df:87:05:d9:a2:07:a9:50:42:60:bb:05:30:e3:01:
c6:67:2f:17:f2:81:f3:d7:0c:23:0a:dc:69:7a:5e:6d:da:ae:
c2:02:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:11 2026 by rpki-client