Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: eHyq6QvLvSDB4pRtHKUXCYDBLZjo5Sj1D3/F5mNJ+rY=
Subject key identifier: 18:66:77:4E:6F:86:9F:97:C3:A8:E8:50:C4:D8:4D:45:B9:54:C2:98
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019CA8332203FB8A670CAED7271E635C6582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 43
Signing time: Sun 01 Mar 2026 07:00:49 +0000
Manifest this update: Sun 01 Mar 2026 07:00:49 +0000
Manifest next update: Mon 02 Mar 2026 07:00:49 +0000
Files and hashes: 1: 0-ptGOK4a7f4xwJkU6zdFe0Pcs0.asa (hash: bRedneNglo/hXhbRz+c6tFACzTRGyUDSkdB4btD1Q64=)
2: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: JBHc0874x7fj1OWo3Aq4ORTg/Iioc4gD8Sd07Rppgl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:22:03:fb:8a:67:0c:ae:d7:27:1e:63:5c:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Mar 1 07:00:49 2026 GMT
Not After : Mar 2 07:00:49 2026 GMT
Subject: CN=1866774e6f869f97c3a8e850c4d84d45b954c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:d5:ad:36:54:be:e0:4e:2d:59:01:9f:85:
99:d9:75:1c:6c:c6:39:49:d6:56:a5:b3:be:5f:a4:
dd:44:ba:08:24:a8:b0:21:b2:47:cc:e3:bc:f4:a1:
16:1c:63:d6:0a:85:e2:e7:d8:da:82:83:bc:98:00:
86:48:87:f1:81:a1:6d:42:48:f6:38:82:72:ef:5a:
77:e8:25:2b:cc:00:f2:68:af:7a:71:e1:4f:c7:88:
de:3a:d3:d4:8b:80:c9:14:ce:8c:68:30:5e:e3:32:
89:ab:e5:c0:ca:ec:6a:11:8e:74:dc:bd:ed:9d:c0:
01:81:e6:b3:4f:95:28:4b:12:ab:c6:c3:86:89:c6:
55:fa:f5:17:ef:4f:36:ea:fa:ba:b2:2c:c4:a3:60:
6b:c4:bf:43:68:2b:b5:6a:1e:48:00:06:6c:78:19:
7a:98:19:18:8c:12:ee:95:11:89:da:3f:e9:9a:ea:
dc:9e:64:dc:63:3f:4b:93:66:29:68:e5:8c:a7:94:
0e:55:de:de:bc:a5:bd:fe:46:aa:97:6b:8e:0f:30:
a0:f2:36:d8:ce:bd:e4:39:37:01:98:df:07:9e:d4:
9e:1b:a6:e7:21:1c:9a:09:82:29:3f:c9:6d:65:a1:
05:21:79:ba:83:ab:f8:ea:86:bd:8f:66:91:30:de:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:77:4E:6F:86:9F:97:C3:A8:E8:50:C4:D8:4D:45:B9:54:C2:98
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:de:fc:a8:69:e4:5e:ad:dd:20:29:3e:c7:cf:9f:79:98:
a5:f4:7a:3b:7b:bc:78:6d:6d:b8:a2:a3:3d:2d:dc:0d:ee:99:
40:27:b6:31:a8:39:23:42:d9:4c:79:cd:d7:1f:27:67:28:f3:
74:03:c2:b0:e5:e7:bd:27:a2:37:37:f7:94:18:1b:a0:65:52:
c7:21:c3:e0:af:4d:dc:2f:2a:37:9a:cd:04:fe:bf:14:5e:53:
a3:27:b1:5d:db:8f:79:36:b4:c6:40:e3:00:11:eb:5e:ae:66:
fe:15:ac:5a:3c:6f:1a:42:59:10:04:29:16:14:63:a0:05:79:
2b:08:1f:ad:3f:7f:8f:e8:fa:f0:c3:18:ee:aa:77:b6:75:0f:
ee:9a:c7:54:e6:31:2f:08:73:23:74:3b:1d:05:0b:86:68:0d:
98:c0:f9:12:81:fc:06:a6:75:19:cb:9f:5b:32:83:a9:1c:bc:
0b:ce:c3:8d:e1:a7:ac:64:54:c7:02:f7:3b:39:fb:42:dc:5e:
10:4e:c3:6a:56:b7:26:0c:f8:75:c1:80:20:3a:f6:46:09:a0:
7b:39:f3:dd:8e:fc:5c:a1:c4:c8:d5:5b:d2:c3:ec:53:be:90:
4d:78:5b:61:3c:15:a3:78:33:88:07:a2:c3:fb:16:1f:c5:32:
d2:75:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:38 2026 by rpki-client