Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: dNHuaOzgzM9h76m72BglFegBMp3Ho/ev9R/qIeyYL5Q=
Subject key identifier: C9:7A:1F:4D:43:6F:6C:9E:3E:59:27:01:0F:F1:94:BE:1D:17:0E:92
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019CAAFD1C3B13353F8559C07715B861C92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 13FC
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: rA2yBzmQCgQ9DFHEKQgtVoW1yVCvK0w89OZQXHMyWT4=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1c:3b:13:35:3f:85:59:c0:77:15:b8:61:c9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=c97a1f4d436f6c9e3e5927010ff194be1d170e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:28:3c:52:f4:76:a1:ec:3d:a2:a7:0d:df:
5c:42:f0:9d:12:51:05:45:84:45:0e:c5:0e:fe:ac:
f9:fb:b0:cb:46:e6:65:ee:a4:ea:32:fb:2c:8e:6c:
db:4a:b0:69:dc:fb:5b:16:a1:b3:59:0d:53:1d:16:
ca:a6:69:e1:7c:8e:4e:2a:6c:ff:04:9d:d5:64:36:
51:83:93:a6:5b:93:d3:13:cd:4c:ce:ea:71:11:89:
31:1d:bb:a8:86:3f:0c:27:41:71:73:e1:dc:94:68:
50:42:c7:e9:4a:fe:da:0b:e6:34:63:4d:b5:48:46:
c1:af:30:31:64:53:1a:3e:3a:6c:c6:2d:8e:49:f4:
c8:e1:79:68:8b:a1:c6:f4:91:af:71:a9:67:79:45:
09:b6:e4:38:08:02:93:ed:a4:31:4f:ff:bc:7c:ea:
8b:1c:6b:a5:21:c8:bc:65:3b:d0:f4:48:a9:5f:28:
10:50:d1:4e:7f:7e:1d:f9:4a:c4:41:73:4e:5f:b5:
d0:eb:cc:2c:01:25:c8:88:03:d2:9f:cc:33:62:7f:
02:af:b2:1a:b5:10:9c:43:02:c0:30:e3:8e:9f:7f:
54:3d:79:c5:08:a4:7d:50:00:04:d9:09:06:08:b0:
42:3e:14:61:eb:e4:17:4a:66:63:ee:c5:9f:00:ff:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:1F:4D:43:6F:6C:9E:3E:59:27:01:0F:F1:94:BE:1D:17:0E:92
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:ba:47:54:61:5b:7f:fa:bc:7d:cc:38:a8:0f:31:ec:5f:
39:b4:f7:67:d3:c8:69:c1:c2:8b:98:dd:41:2e:41:57:73:ab:
03:d8:27:65:31:05:0d:8c:f2:bd:7a:f1:24:a5:79:ae:d2:93:
3e:5a:f4:50:5f:3d:ac:2e:b9:02:e6:7b:41:8a:de:3d:0f:1b:
70:10:17:c1:c1:49:cc:88:97:a6:88:ae:47:d7:39:a7:5f:3e:
1f:6f:f3:15:21:89:ac:da:00:ea:52:7e:a8:b9:a5:49:02:3b:
7d:73:75:e0:94:e6:1a:71:c8:c1:2d:3e:f9:22:9e:b4:54:3d:
cd:06:5d:86:5d:52:ec:9e:10:b2:66:9a:e5:77:a6:37:0c:e3:
b8:20:85:06:a0:d7:e7:6d:26:d7:aa:82:51:d7:a9:b2:24:10:
51:98:fb:68:19:fd:66:13:0a:1d:96:47:0c:ce:a5:d1:f2:16:
ce:0b:8c:f0:69:61:60:30:aa:d9:5a:57:a6:f7:83:bd:0b:74:
60:53:2f:80:68:89:7a:95:4f:7a:f6:af:61:cb:c6:05:93:02:
d9:9c:d8:79:c0:45:ad:29:25:4b:3b:db:09:3d:1b:e1:e2:0e:
d7:b9:7e:4c:b1:9f:4a:66:33:75:de:32:e9:b3:65:50:5d:60:
30:77:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:29 2026 by rpki-client