Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: gtrJ16Cz/MCnmfV2IEEuFM+eODcVuTU4c8LfPz0Rmxw=
Subject key identifier: 3F:18:23:A8:72:18:B7:E5:C1:12:51:41:3E:EB:40:D3:E0:6B:1A:1B
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019CB0C85508BFCFBA29955DBC280EDDE946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 99
Signing time: Mon 02 Mar 2026 23:00:44 +0000
Manifest this update: Mon 02 Mar 2026 23:00:44 +0000
Manifest next update: Tue 03 Mar 2026 23:00:44 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 34kG1hsg++WoteRkvSWLm58zyvki/gNVJi28PiXNPlY=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:55:08:bf:cf:ba:29:95:5d:bc:28:0e:dd:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Mar 2 23:00:44 2026 GMT
Not After : Mar 3 23:00:44 2026 GMT
Subject: CN=3f1823a87218b7e5c11251413eeb40d3e06b1a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:68:62:ef:5c:c2:5b:fd:15:26:81:61:4a:
4a:1e:e3:b2:92:7a:ef:9d:4f:6e:41:ff:cf:5c:b5:
8b:0a:e8:2d:42:ef:6f:ff:48:3d:66:7d:77:1d:94:
51:a7:65:e8:d5:12:e9:3e:d6:f6:ae:ea:fc:7f:b2:
9b:b2:7a:e5:02:93:1f:a8:2b:ec:9c:83:91:61:d4:
d4:d5:fe:88:da:92:a5:68:1b:0c:37:8d:49:66:9c:
fa:6c:d1:5d:07:6b:8a:fe:af:b2:b6:18:dc:e2:5e:
48:11:df:43:b2:ca:4e:cf:0f:f2:a6:8c:26:8e:11:
d1:72:86:49:1c:21:a8:01:01:04:fc:2c:d2:fc:bc:
64:65:03:0a:44:a0:dc:5b:ce:cd:bc:6e:6d:66:1a:
e3:28:e0:fa:93:38:70:98:a1:bf:b5:f0:65:02:da:
80:37:14:ad:e3:b6:81:b5:25:da:5e:15:f1:4b:64:
93:7a:db:64:12:e5:3b:56:b6:20:76:cc:1c:74:1f:
d7:39:00:9a:95:70:4b:ff:6c:4c:62:86:fa:6c:83:
3c:e6:70:34:91:83:76:40:ff:5d:db:ac:2b:16:82:
57:75:ba:f6:5d:f7:d5:ab:72:b8:10:b6:b3:59:9c:
ac:f8:60:00:7a:61:16:23:61:21:36:16:40:e8:ca:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:23:A8:72:18:B7:E5:C1:12:51:41:3E:EB:40:D3:E0:6B:1A:1B
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ce:4d:18:e3:d8:43:33:50:32:77:6b:05:0a:40:d2:1c:ab:
88:8e:63:4f:83:50:5a:18:f7:48:b3:d5:04:e9:5c:cc:8f:2d:
18:8a:f7:ef:60:ce:35:fa:59:ce:a1:a0:ff:08:cd:07:49:a7:
d3:62:02:26:80:8d:d3:28:8b:ba:77:cc:cf:4a:ae:f3:43:f4:
eb:af:ef:d8:32:1a:fe:52:d3:f9:a4:58:42:21:26:91:c3:60:
92:ed:27:6e:5a:7d:63:7e:5a:dd:61:18:f4:0e:f4:79:33:78:
4a:6f:87:34:47:c0:e5:24:51:3f:57:e8:35:9b:d2:98:a6:9e:
8d:4b:92:80:f5:07:a6:61:5d:15:58:ca:31:b9:7b:1b:f7:ee:
17:8f:e2:85:8e:83:0a:d6:15:55:c8:4b:5d:e8:a2:ab:00:c8:
de:d8:60:14:b1:73:99:ad:df:92:76:24:46:86:71:05:87:a6:
c7:0a:b7:15:d8:f1:ea:1e:cc:0e:93:e9:8b:ab:8b:04:0c:79:
68:39:28:3c:7d:4f:92:4c:85:2e:a0:5b:ad:5c:8e:d2:ea:3d:
d2:3e:4a:a6:6f:41:10:82:cb:2e:2e:39:aa:57:37:7a:b5:9b:
b4:59:ff:f1:4a:77:7f:9c:75:a3:47:cb:a3:f1:2c:28:08:ec:
0b:c8:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:18:19 2026 by rpki-client