Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: z4+n7zScyyCmPcKOZuKp9tFas0/KjFfrcjGJJR8f8Ik=
Subject key identifier: 2F:13:34:FD:34:8B:03:DB:64:F2:6C:57:33:B8:05:22:39:54:66:7F
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 019CAB6ADAFCFDC6197769E97AE2476BBCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:32 +0000
Manifest this update: Sun 01 Mar 2026 22:00:32 +0000
Manifest next update: Mon 02 Mar 2026 22:00:32 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: Ff257n9f3uEv4FzOSjhSQZEVb7vODujsRDpGI9PCCH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:da:fc:fd:c6:19:77:69:e9:7a:e2:47:6b:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Mar 1 22:00:32 2026 GMT
Not After : Mar 2 22:00:32 2026 GMT
Subject: CN=2f1334fd348b03db64f26c5733b805223954667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:4d:7b:28:91:e3:66:a4:f3:ee:cd:89:da:
c4:ae:c1:08:f5:93:b1:56:80:32:a2:7c:ec:a3:5b:
78:a8:d1:ea:99:3a:83:e4:47:9b:0b:d1:1d:f2:c6:
ba:dd:7b:17:c0:ad:27:fb:0b:cb:81:54:4c:a9:9c:
6a:4e:a3:e6:32:af:e0:69:95:60:a3:5d:a3:72:1f:
18:43:ad:d2:f7:2b:a7:d0:69:9d:b7:f5:63:3c:39:
68:b1:b7:be:fa:5f:0e:6c:f6:9f:65:b7:92:04:bc:
92:a0:ac:23:40:79:a2:8e:ac:e2:8e:b7:e9:de:66:
86:f6:8f:bc:fb:5a:3b:4d:9e:b6:31:a0:50:54:6e:
22:af:5d:f0:be:c0:e9:de:67:2a:34:2c:64:ee:9e:
da:d1:37:9d:62:ff:eb:ed:c4:20:35:d3:35:d1:19:
f9:67:c6:5a:cc:ea:a0:9f:85:fd:9b:11:0f:28:c6:
f7:08:72:ad:37:6e:fe:45:a9:a7:d9:d2:a8:ec:f5:
df:b0:80:b1:0f:6b:bc:93:14:01:d7:78:18:e8:c8:
d5:69:fc:43:29:7c:e6:15:02:3d:99:4d:e8:00:cd:
4b:39:1b:58:a9:b4:60:db:d9:74:90:8f:66:51:f4:
18:96:ab:c9:52:bd:fe:61:3b:7b:e1:6c:f5:01:4a:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:34:FD:34:8B:03:DB:64:F2:6C:57:33:B8:05:22:39:54:66:7F
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:46:c6:72:35:a6:2f:91:a8:53:62:85:b7:96:5d:aa:9b:fd:
c8:36:32:8c:17:f9:38:07:05:7c:c4:34:63:21:36:e7:1d:2f:
19:bc:61:cb:bf:96:c8:72:64:83:5c:da:8c:93:19:37:00:8b:
58:6b:11:15:47:20:60:3c:7e:bf:df:dd:91:52:25:c9:95:b3:
29:55:3d:01:db:c4:47:cd:9d:5e:2d:03:40:93:08:5e:6a:5a:
87:c6:5e:f4:cf:6f:86:55:0f:e2:a1:ee:6d:96:64:bf:19:26:
48:3c:5c:eb:d7:1f:13:a6:3e:08:05:c7:16:57:77:98:46:75:
7a:bd:e4:de:cb:c5:4e:1a:f3:e6:09:e0:be:20:ab:39:0c:fb:
95:4d:45:3a:45:02:a3:df:5c:48:86:11:2f:09:61:0d:85:d5:
cf:fb:7b:07:8e:bb:0a:b9:ad:2e:14:5f:e1:0e:e5:f3:f0:96:
80:9d:12:75:de:04:a8:99:b7:86:b7:23:f7:d6:b6:11:22:d9:
9b:db:69:75:eb:ee:cb:79:82:c8:14:e8:25:8b:98:cc:3e:f6:
59:d0:b5:b9:e2:8e:09:03:02:3b:1e:71:13:74:20:df:b9:52:
b9:00:0d:a5:b7:f1:95:9e:02:55:77:9e:e6:74:5b:25:d3:74:
83:91:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:13 2026 by rpki-client