
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: pOa7qW0xMVXCP0tsFkdd/FyevE/LfGqVY22H/UrnncY=
Subject key identifier: 1F:C8:95:35:9A:DF:58:4E:B6:CB:08:CA:02:58:0A:CD:E2:4D:79:67
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019CAD595874084FBC1F7C92A8E28D20B302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:00:39 +0000
Manifest this update: Mon 02 Mar 2026 07:00:39 +0000
Manifest next update: Tue 03 Mar 2026 07:00:39 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: CY3WMs8lMgbwu/baGYHyVEhtER7qalEn/tqd5DUviMY=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:58:74:08:4f:bc:1f:7c:92:a8:e2:8d:20:b3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Mar 2 07:00:39 2026 GMT
Not After : Mar 3 07:00:39 2026 GMT
Subject: CN=1fc895359adf584eb6cb08ca02580acde24d7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:62:5f:7b:09:93:48:e9:ac:cf:7b:20:71:
5b:20:27:bc:0b:89:eb:1b:0f:c8:fa:4a:0f:cb:83:
ad:99:79:89:0d:1d:93:4d:75:80:37:80:bc:63:73:
3b:ce:b8:bd:04:58:50:fb:78:58:96:40:73:52:09:
67:d7:ee:54:50:a3:54:0c:ac:02:80:66:59:6a:03:
17:bd:3c:c6:af:61:84:92:66:04:f3:53:b1:80:e0:
63:1d:a3:74:02:1f:d2:e9:2b:a1:4a:06:c1:25:54:
59:9c:1e:97:01:c3:c0:5f:63:d8:07:4c:f9:9b:e3:
98:24:59:92:0e:4a:6b:7f:a6:06:9c:36:dc:0e:0c:
74:6a:ab:7d:9b:f9:d8:0d:8f:f9:c7:a5:74:3c:36:
1e:6a:ae:cc:fc:f8:46:e2:ac:07:58:43:79:bc:6c:
0c:de:b3:22:3a:42:f2:6f:a3:e1:20:61:a3:83:ac:
bd:63:cf:ff:c3:6b:eb:91:9b:37:f8:de:58:00:26:
68:99:ef:e4:1a:6e:c3:84:4d:87:78:d6:92:41:48:
f3:3b:15:04:7f:93:cb:14:9b:52:62:a1:a8:92:a6:
8f:d4:96:d3:6e:32:34:0d:ff:8d:56:e2:36:fa:ce:
72:5b:a4:3c:ba:46:b7:b0:b3:35:45:f3:0f:68:98:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:95:35:9A:DF:58:4E:B6:CB:08:CA:02:58:0A:CD:E2:4D:79:67
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:f8:00:da:7b:6c:8c:fc:80:33:d9:35:c1:d8:c1:69:20:
fc:76:38:b1:57:1e:9a:aa:65:a2:9d:2f:eb:99:21:5b:12:67:
9d:97:b4:ad:ec:28:bf:b2:c5:b0:95:84:18:40:ea:5b:66:9f:
e8:ab:44:b2:b2:ba:17:67:fa:ec:f0:09:70:5e:06:3b:78:d7:
ad:d2:d4:a3:84:e0:88:d4:7f:dc:58:66:cd:87:85:82:3a:d5:
50:75:c5:f8:8f:9d:f0:94:da:45:20:a3:f0:1d:54:bf:bc:81:
70:40:22:75:f8:a2:0f:6d:dc:5e:01:c4:33:5a:4a:cc:fd:20:
17:5d:b5:9d:d4:a3:33:35:9a:62:d9:52:6f:4a:ea:c7:9f:a2:
63:f5:d7:db:1e:fd:59:70:ad:37:a7:d3:81:b5:2f:86:6a:02:
c9:d8:39:31:7c:b9:d4:8d:0d:7b:8b:52:5f:af:a3:27:93:32:
ea:6a:da:f4:69:53:63:f8:99:b8:80:fe:bb:d9:a0:da:f4:96:
7f:2c:41:47:27:4f:c9:36:a8:40:71:e2:0c:12:b9:a0:88:be:
7f:5c:ed:21:37:28:06:64:a4:9c:3b:59:d7:fa:12:22:db:e0:
bd:7a:1c:72:db:d7:cc:11:1e:b6:b4:a4:27:be:c1:f7:e2:ab:
dd:3c:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:13 2026 by rpki-client