Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: aFXnmte/lkIuTlYqX7TaODWc5uoWSNJrnDSUpv4TWXo=
Subject key identifier: AF:4F:43:CD:DC:B8:E8:AE:3E:2A:E8:A4:E6:D6:A4:2B:EA:D5:66:F4
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019CA9EB90E5C26A733B1A079C3FF3608792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0676
Signing time: Sun 01 Mar 2026 15:01:53 +0000
Manifest this update: Sun 01 Mar 2026 15:01:53 +0000
Manifest next update: Mon 02 Mar 2026 15:01:53 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: y7Nw8tStLKsvYdLJZdzyTyF7snZRGoROMAVOOtYU2Gw=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:90:e5:c2:6a:73:3b:1a:07:9c:3f:f3:60:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Mar 1 15:01:53 2026 GMT
Not After : Mar 2 15:01:53 2026 GMT
Subject: CN=af4f43cddcb8e8ae3e2ae8a4e6d6a42bead566f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:da:3a:73:69:4f:9c:7e:80:23:42:bd:fb:
a7:03:6f:81:f0:35:8d:00:ae:82:56:64:fa:d0:c4:
49:e0:a5:22:9b:9b:a2:c8:a6:84:9b:e3:8d:ef:e2:
f6:d2:a5:6a:90:06:29:dc:3f:ed:52:ff:27:58:17:
c9:bd:38:7b:09:aa:81:14:94:b0:c9:fe:ab:76:93:
79:51:f8:eb:b6:99:22:25:af:65:ff:2d:24:61:39:
4b:14:13:69:ce:82:f3:86:d3:85:87:26:fc:8b:12:
d0:f3:72:bd:4e:90:71:2f:d8:e1:62:04:f5:02:5d:
90:3f:4c:5e:04:56:98:dd:d5:4e:9d:c7:15:83:07:
35:47:c2:05:84:ce:0d:c6:73:01:ec:94:08:bb:8f:
9c:26:45:26:99:30:33:d4:82:ab:2f:93:86:d0:d9:
f6:eb:8a:4b:44:b8:18:57:f4:64:08:68:79:96:2f:
2c:5a:63:b8:25:82:ae:8e:21:2a:cc:bd:a7:7f:db:
b0:5d:5c:bc:eb:2e:35:fb:dd:f2:08:33:94:55:72:
35:12:24:02:04:d8:01:71:af:9a:4c:94:61:b1:d3:
13:12:98:70:b1:2c:22:af:f8:e6:8f:cc:c7:c6:ad:
c1:7c:5e:32:77:7e:72:ef:98:45:1a:c3:55:2b:52:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:43:CD:DC:B8:E8:AE:3E:2A:E8:A4:E6:D6:A4:2B:EA:D5:66:F4
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:ce:57:79:5f:40:57:73:03:09:91:f9:c9:17:ed:92:2e:
de:20:f2:04:48:24:36:9b:88:37:08:fe:a7:8d:8d:4d:ab:08:
ee:19:f6:79:48:0b:4c:0a:dc:03:5f:ac:c0:19:90:e0:33:84:
f7:81:84:02:45:6c:6f:de:b0:37:92:f9:3b:45:6d:95:f3:2e:
fd:0e:93:89:ad:ea:15:0f:c3:69:e0:72:f7:31:bc:83:17:a3:
45:e5:5c:28:d6:ff:02:3d:61:5f:86:d2:78:4b:34:41:f3:da:
61:9c:24:76:76:60:73:eb:55:25:ba:d3:5f:ce:a6:27:1d:cb:
80:23:98:cb:ce:ba:72:59:aa:7c:0d:80:13:fb:3d:b3:39:a3:
87:97:24:c8:be:da:1c:b7:03:a7:6c:ca:39:f7:ba:65:eb:c4:
db:29:56:5f:a8:39:5f:df:95:1e:7b:2c:21:e1:84:42:95:fb:
9e:28:fd:90:be:84:55:2c:36:c9:35:6c:5d:65:f1:40:30:0a:
ae:c3:7f:48:10:87:8a:6b:e9:68:f2:ea:e6:4c:f9:3a:0d:9a:
ee:40:7e:b2:fd:56:24:fb:b5:77:ee:f4:e1:61:51:ce:c1:95:
8e:15:b4:65:9c:ba:1f:b1:f9:ce:c1:3f:3e:68:d8:2a:fb:f6:
c7:d3:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:39 2026 by rpki-client