Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: XlrMkEybhNUEx6jyNNzfMcKxG8C1rZ/+beTYRw5y3gY=
Subject key identifier: C7:8D:2F:7E:9F:4F:24:65:37:65:50:FD:43:8A:9B:EA:E2:6C:E3:09
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019CAA585E102C4D3924F31297D336C7A166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 157B
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: wFQnpQ/Byn0ypmDeaCAF2xtabEvGLjAuJF7E7F2YNno=)
2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5e:10:2c:4d:39:24:f3:12:97:d3:36:c7:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=c78d2f7e9f4f2465376550fd438a9beae26ce309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:e1:ad:df:53:e2:d1:7f:a3:8e:f8:85:e5:
6a:82:07:bc:45:3b:96:22:56:27:33:e9:db:0d:5f:
df:fa:cf:b6:86:2a:b5:04:ba:37:70:43:64:0e:b0:
f1:66:25:0d:87:12:40:2a:35:66:b6:65:15:d5:3d:
7f:37:96:79:ef:2d:2e:72:39:19:64:ac:c1:d4:e3:
3c:b6:3a:99:bd:07:ca:54:dc:cf:7d:2b:30:10:f7:
4b:df:6a:85:1e:63:b1:83:52:90:92:20:be:80:cd:
28:05:f8:88:3f:22:b0:52:f2:15:9c:9d:4a:94:62:
8b:7b:8d:76:6d:9e:c6:2c:f4:d4:d8:92:67:14:3a:
fd:6f:c4:f7:27:06:0c:f1:b7:98:ce:a3:00:20:cb:
7a:e3:0a:0a:1c:51:87:4e:2d:d9:ab:31:0e:7e:84:
87:49:c7:0e:f5:34:06:38:81:e9:80:22:49:20:8d:
aa:e0:1d:73:a3:a7:ee:73:02:c9:6e:b9:f7:03:02:
68:46:e2:6e:11:94:10:37:dd:d6:4c:4b:ed:2e:32:
32:e0:90:69:30:f9:91:ab:a4:7a:d3:8c:51:35:20:
84:a0:85:eb:06:bc:bc:f5:c0:27:91:ed:7c:aa:c9:
36:92:06:c9:fe:60:db:c2:00:a7:1f:42:30:f6:e8:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:2F:7E:9F:4F:24:65:37:65:50:FD:43:8A:9B:EA:E2:6C:E3:09
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:15:1b:59:14:63:ab:a0:d9:0b:a7:ec:c0:47:dc:9e:cf:
05:75:1a:d9:1d:c3:01:1c:51:55:26:59:c3:50:d0:ce:af:2b:
7e:e4:3d:71:50:c8:d2:e1:b7:9f:06:ce:a1:0d:9a:b9:03:c5:
3c:5c:e6:85:60:b8:c2:50:fd:21:0e:ec:d2:e3:63:27:3a:26:
a3:33:15:38:58:96:39:66:3c:c2:2d:7c:7d:f3:b5:a8:45:6d:
57:88:2f:72:8f:da:dc:16:4e:6d:8f:3f:79:5d:20:3b:f3:dd:
4e:77:7b:d3:01:31:5a:bd:ed:32:29:fb:0a:0f:a4:92:6c:1e:
e1:62:c5:b3:cc:49:46:d2:e3:1c:b1:87:c9:94:43:64:92:42:
5c:b9:a2:89:08:37:39:aa:ed:bd:43:59:b2:f6:a3:2c:a7:ab:
82:5d:bf:e6:42:cf:4f:a8:5b:17:a0:0d:07:3b:a0:e6:97:52:
1a:1a:f5:1b:ad:b4:64:17:fc:99:c4:86:0c:9c:a1:f1:48:f8:
65:cf:ee:1f:9f:61:2b:bb:e6:84:be:fa:69:ca:fc:6c:d6:61:
6e:a5:50:06:02:b5:3e:ea:c3:66:71:e9:1e:0a:39:e0:ee:08:
e2:d4:08:df:11:6a:5f:4a:1f:02:19:89:09:6a:0a:28:a2:3c:
de:77:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:27 2026 by rpki-client