Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: DwpKumfzmayA+IIIuKpD/HcO16Kx/Eg9b3q0F3/Ihmc=
Subject key identifier: 41:39:97:DA:2E:CE:07:82:D2:F3:7B:19:E9:A1:73:83:0D:24:A7:9B
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019CAE35C01C949B6C777496F720F7F62A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 185D
Signing time: Mon 02 Mar 2026 11:01:23 +0000
Manifest this update: Mon 02 Mar 2026 11:01:23 +0000
Manifest next update: Tue 03 Mar 2026 11:01:23 +0000
Files and hashes: 1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: 9kfsjXHJ8S9mLzlWlB5EmleklZeyZ6YDQFbocbQCgcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c0:1c:94:9b:6c:77:74:96:f7:20:f7:f6:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Mar 2 11:01:23 2026 GMT
Not After : Mar 3 11:01:23 2026 GMT
Subject: CN=413997da2ece0782d2f37b19e9a173830d24a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:66:e4:e6:b3:e3:6b:fb:45:c9:0d:69:72:
35:c3:1d:de:7c:da:3f:f8:ec:9d:fb:5f:97:fc:8a:
57:85:9c:f5:e1:16:bb:a8:f3:4b:c9:81:55:11:23:
0e:ea:22:ee:41:69:b6:e8:a5:b4:cd:ad:25:dd:69:
7c:24:30:d2:40:7c:db:48:2d:0c:a9:97:e4:cf:25:
c1:bb:b2:36:07:fd:47:37:f9:4a:76:b0:66:ea:af:
a6:cd:79:cb:56:d0:e6:07:94:3e:47:78:63:e2:65:
03:be:ae:63:7d:1a:91:e2:66:9d:af:b1:66:87:61:
04:f4:e0:a1:b9:e3:59:2a:ff:9f:f5:73:48:ed:eb:
6c:64:44:b3:b3:20:62:af:d3:b0:a8:0f:d7:dd:5d:
84:ee:66:60:3a:a7:91:53:f1:1b:29:53:fa:bd:92:
11:6c:c6:8b:bd:d6:96:70:e3:65:42:41:54:9e:2b:
7e:f7:73:4e:98:fa:65:7f:cd:78:53:3b:47:a1:c5:
b2:99:e5:68:60:a3:04:91:6f:d8:48:51:b8:9a:05:
9e:f1:85:92:a9:56:3c:48:d3:f0:56:ef:e5:f0:2f:
21:4d:8b:4a:7a:14:c4:e1:b6:3b:96:27:0d:ff:41:
38:c3:5e:84:dd:00:d8:56:d2:71:67:d3:31:21:c7:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:97:DA:2E:CE:07:82:D2:F3:7B:19:E9:A1:73:83:0D:24:A7:9B
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d6:9c:ba:78:41:15:1c:3e:3e:32:47:41:9a:da:c9:63:16:
be:8e:c7:70:6b:79:3e:93:0d:ae:38:de:d3:5a:2b:67:fb:11:
37:42:f2:f7:a0:34:f2:83:cf:bb:82:4f:8d:d0:45:7f:25:22:
1d:76:cf:4d:44:42:6a:dd:2f:f7:5a:4e:01:83:1a:71:0d:92:
35:85:ec:f7:a3:d8:7c:97:2c:7f:3d:27:23:97:ef:2b:a6:3e:
91:51:27:c8:b2:7d:69:70:4f:a7:3a:8b:6d:1f:ed:87:04:ec:
58:98:ee:8e:15:d5:4f:75:4a:9d:3a:0a:43:c9:d0:5d:d5:08:
32:a2:ed:e6:9c:8e:c7:b1:92:e6:94:2f:93:c8:b5:8d:5b:49:
d0:bf:f6:6e:0c:b3:2f:94:40:74:b3:91:b0:e0:0c:85:c3:ce:
68:0c:a0:17:71:af:a1:e1:3e:33:e1:17:8c:d9:4d:bf:cb:cc:
c6:dd:f0:9c:03:99:33:a7:b7:b2:68:82:0b:14:f8:2b:71:63:
0c:b6:fa:79:4c:b9:87:a4:5e:54:ba:02:ff:77:d3:24:79:20:
6b:2d:29:6d:3f:3f:a9:b8:42:6e:6c:3e:67:35:5a:4d:f6:af:
36:19:35:9a:d5:fb:3a:ed:e8:11:3e:b8:63:b4:db:ff:4b:fe:
9c:7a:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:58 2026 by rpki-client