Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: HEjqC9N3IxVslOcO8ZGkVm0kp8+ZOQXSV6AXFQyc3Mg=
Subject key identifier: 5F:A6:92:2B:2B:FA:80:74:9C:89:0F:BD:D6:C2:4F:E0:C2:34:E8:AF
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019CABA243FDA17AB848905DD173F6BF0C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: vUAKdBSr7OGuD59mTkfRX5UGFrMJ2VpPFfCNQ+WPVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:43:fd:a1:7a:b8:48:90:5d:d1:73:f6:bf:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=5fa6922b2bfa80749c890fbdd6c24fe0c234e8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:94:7b:bf:a6:f4:25:d0:05:58:f4:f2:04:
8f:a0:79:43:47:06:fa:3c:ad:62:15:c6:a4:3d:a4:
16:e4:22:19:b8:9e:bf:26:aa:6a:98:a5:9e:3c:c1:
74:c2:4e:87:75:4c:96:72:ec:a4:e6:22:db:10:45:
8b:2a:2f:f4:b1:fd:63:b8:93:b6:85:8f:dd:0b:7f:
03:4f:4c:bf:bb:bc:bb:b5:03:25:92:cf:ff:5a:77:
ad:c6:28:5c:02:50:a4:4e:20:af:43:53:ab:51:1b:
52:aa:c4:d6:96:af:15:f9:6b:92:63:56:c1:d5:f4:
7c:77:75:34:41:4c:0c:3e:cb:07:45:6a:09:f0:0c:
86:ed:d9:fe:12:ac:c2:4d:f5:6a:f3:22:95:59:a2:
86:79:ca:82:ea:10:e8:12:31:67:7b:ea:6c:45:37:
17:e7:70:27:b5:34:5e:58:88:bf:cd:5c:93:96:f1:
5d:99:eb:56:94:f5:95:fc:86:04:b9:f5:c5:bb:b6:
ac:00:be:a1:e7:b7:1d:ca:4f:d1:89:ec:a0:54:aa:
69:2b:13:3d:63:a1:3f:ec:60:23:60:f9:a0:2d:28:
3e:a3:ed:da:91:41:ff:24:9c:b0:6a:9e:c0:7f:f3:
44:b7:f5:9c:6d:c2:1b:d4:87:0b:16:64:9d:b3:a0:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:92:2B:2B:FA:80:74:9C:89:0F:BD:D6:C2:4F:E0:C2:34:E8:AF
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:d7:17:6f:7e:d3:3b:dc:6d:92:c5:2e:3d:cd:6c:e8:21:
00:64:f5:ee:48:bc:30:16:3b:30:61:46:c8:4b:b5:20:7a:7b:
e1:e9:36:86:98:75:71:dc:68:28:4b:cb:e4:36:91:86:f2:8b:
70:48:78:44:a3:e4:d4:17:43:09:ec:07:51:4f:de:d1:55:ae:
a6:af:a4:45:84:c6:6e:39:8e:f7:e8:03:9b:95:59:57:08:7d:
36:c1:2b:ee:dd:57:d9:d2:dd:e0:02:17:2d:d3:72:4d:fd:15:
37:bb:74:46:f6:26:5d:61:ad:88:5a:7b:9a:96:e9:d1:f0:98:
22:42:89:e1:a2:a3:1f:fc:3b:15:be:99:30:22:4c:d8:af:e9:
d8:7d:43:45:4f:fe:1f:0b:e0:b7:4c:2c:0d:1f:dc:e7:e5:8d:
22:58:ae:f9:99:72:ac:dc:3e:ad:4f:ba:ca:43:6a:b6:44:4d:
0c:d0:de:17:03:a5:f1:37:83:1d:85:20:08:a4:23:7f:33:24:
86:90:b4:7f:43:e9:5f:23:57:1d:57:79:13:8d:2a:6d:50:85:
00:af:fa:d9:71:3b:49:5c:f7:39:35:b2:96:d7:cf:21:a6:4b:
39:68:e5:20:38:3a:1d:08:cd:23:9e:92:0e:ac:89:4d:92:79:
bf:15:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:11 2026 by rpki-client