Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: SgbUfpNg2eKoILEpfic16qL5tx6WVlU6N1yAm6rkaa4=
Subject key identifier: 4B:4A:7D:D9:78:28:0E:60:B6:44:3E:D0:6C:BC:BA:7E:1C:B4:A2:D5
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019CAA5934A47C2290ECDE5B89A6B0EE185E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 04D9
Signing time: Sun 01 Mar 2026 17:01:38 +0000
Manifest this update: Sun 01 Mar 2026 17:01:38 +0000
Manifest next update: Mon 02 Mar 2026 17:01:38 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: aScjYfEhYTlRMv+G/va+T9vK8vy2gPgw/NjCeTNMQK0=)
2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:34:a4:7c:22:90:ec:de:5b:89:a6:b0:ee:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Mar 1 17:01:38 2026 GMT
Not After : Mar 2 17:01:38 2026 GMT
Subject: CN=4b4a7dd978280e60b6443ed06cbcba7e1cb4a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:b6:62:0c:bf:e0:58:5f:54:d2:f6:17:5b:
9c:44:85:2f:cf:4d:ff:d2:7c:25:b7:01:98:3b:ce:
33:f1:40:e8:14:b5:a9:45:9c:74:4f:0f:7b:43:e6:
1b:68:4e:fa:fd:b2:39:83:ae:65:59:c5:be:1b:81:
65:56:32:1a:24:18:e1:f9:32:bf:27:9c:05:78:4b:
97:71:32:4f:02:97:d8:7a:f8:12:e1:88:c3:79:f0:
e4:2d:81:a4:63:e6:8b:05:24:e2:6a:37:22:3f:a2:
7f:76:95:86:ce:8e:a3:9d:e3:aa:f7:67:12:8b:08:
7d:c0:5b:72:cd:ab:6a:78:92:f7:32:2c:49:20:b7:
cd:3f:c7:62:64:e1:c6:a7:c0:81:c8:3f:bb:7e:a0:
e8:b4:52:29:14:60:6d:6f:bd:4c:aa:be:13:df:c0:
84:9c:5e:c6:93:f5:80:f7:84:ac:05:3c:e4:36:93:
a6:9a:49:9a:9a:68:7e:a0:b2:e5:cb:91:b6:36:6f:
be:55:50:d2:4b:2d:a2:4b:dc:39:31:4c:88:39:29:
85:6a:fd:4d:e8:71:2a:11:f8:28:53:c8:38:bc:ce:
7f:d7:14:6d:5f:2b:e6:08:60:4e:bd:3c:bc:3f:23:
34:70:9f:06:23:8b:31:28:f4:38:02:10:86:55:3c:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4A:7D:D9:78:28:0E:60:B6:44:3E:D0:6C:BC:BA:7E:1C:B4:A2:D5
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:87:70:a0:f4:12:e9:fc:54:75:60:17:e7:c3:91:3c:66:
35:bb:12:b2:a8:dc:01:7c:13:0e:2c:3d:82:b6:94:2f:a7:8c:
b2:cd:e2:0d:41:76:cf:f6:19:d4:98:f5:ca:e6:8a:de:06:b9:
4c:3e:cb:7e:e1:b3:ec:54:73:9a:bb:36:35:d9:ed:e9:9d:ba:
db:1f:83:c6:79:ca:a4:f6:2b:c4:0d:71:16:98:c3:d8:44:f3:
b0:c8:29:25:84:3a:4e:70:62:f2:dc:43:45:2a:83:e8:b6:82:
b0:0e:92:d4:98:f6:ab:e9:24:63:aa:27:19:18:76:51:0e:bf:
37:5f:bd:f7:62:c1:0f:6a:37:1c:2b:cb:8a:37:e3:79:9a:88:
fc:b5:10:f2:14:39:e6:c4:94:c5:af:a5:8d:f7:1e:d7:2f:15:
1c:44:ee:ca:9e:6b:80:be:2e:c0:7d:a2:c2:21:f6:fe:07:88:
8f:06:a5:aa:03:43:91:04:ee:2e:41:fb:29:41:ee:71:a9:61:
72:05:5a:fd:dc:8f:e3:ca:8c:05:d5:c9:d3:9b:b6:90:8d:99:
70:48:74:1f:ab:d9:5f:91:75:d3:f8:52:3c:7e:15:c0:be:2a:
3c:28:d9:e3:57:cf:31:57:97:e5:36:06:ad:d6:59:e8:d1:b4:
93:d0:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:42 2026 by rpki-client