Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: mv9myV74nk2o7wBsqPQ6PIrbdY35s4M9jkAWE4ezxNQ=
Subject key identifier: 3E:1B:74:08:B0:5F:C0:D6:55:2C:55:4F:4D:D8:7E:97:5F:DE:44:83
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 019CAF47DA2DF13BF025B81580F8F7F09B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 16:00:47 +0000
Manifest this update: Mon 02 Mar 2026 16:00:47 +0000
Manifest next update: Tue 03 Mar 2026 16:00:47 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: X3MKWRJH6AsMXAMRmfXQdlW20rlBYRuKz96JA2a4Xws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:da:2d:f1:3b:f0:25:b8:15:80:f8:f7:f0:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Mar 2 16:00:47 2026 GMT
Not After : Mar 3 16:00:47 2026 GMT
Subject: CN=3e1b7408b05fc0d6552c554f4dd87e975fde4483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:78:e8:32:e1:65:0a:ad:03:9b:e0:98:d9:
ae:c2:ea:2d:4a:4c:83:aa:4b:cb:1f:8c:61:3e:01:
67:82:0b:46:bf:5c:11:45:2c:4a:6d:b9:53:28:a2:
11:a3:a4:b0:62:5a:69:53:1d:8c:73:14:06:e7:e5:
8e:b0:bd:8e:83:cd:d9:f8:c3:c4:a4:4b:a4:11:4c:
0a:4f:d0:05:25:01:d8:4f:50:4b:d8:9f:0f:05:0b:
bb:28:81:db:7f:cc:41:19:c7:ec:8b:22:2a:b0:01:
1a:ca:5d:a0:72:b4:9e:f3:fe:86:be:5c:01:f8:e3:
3d:69:c3:20:e3:62:3f:60:d3:33:2a:cf:8e:ac:57:
8a:1f:4f:b0:39:0c:f1:59:56:05:d0:8b:b7:67:32:
1d:d7:8e:fd:8c:ac:52:83:04:50:a7:05:92:98:76:
19:b8:35:9b:0a:ef:46:66:48:da:b8:5a:3d:65:a2:
32:fb:16:9e:57:64:53:08:9c:b2:d4:39:57:11:8e:
be:d7:46:d7:ba:3d:76:8e:ef:8c:63:ca:b4:48:3a:
a4:e0:e1:27:84:77:00:aa:d9:b6:87:e6:ec:de:a1:
19:1f:3d:ae:96:af:bc:1d:36:84:80:54:e4:67:31:
9f:db:2c:14:9d:1a:29:d2:32:46:f8:85:03:35:53:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:74:08:B0:5F:C0:D6:55:2C:55:4F:4D:D8:7E:97:5F:DE:44:83
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:b0:84:62:09:c1:ea:e2:79:ce:fb:b7:08:c3:82:aa:0f:
58:44:ab:94:e6:68:ac:18:25:00:ba:f2:f1:c9:ec:ed:5c:6b:
4a:c5:38:00:80:f8:bd:a0:21:a2:c1:d9:e5:13:71:bb:f4:38:
6c:ed:e9:0e:93:1c:2f:b1:59:4e:20:57:ea:6a:2d:2c:6c:a1:
1b:77:41:56:79:86:6e:1f:67:7a:d6:62:26:e6:9e:6f:da:4a:
fd:0b:5a:d0:79:77:2e:83:e4:b9:a0:fd:26:34:02:cc:f4:a0:
2c:a8:0a:d0:84:14:69:64:d6:8c:ad:e7:f4:4b:46:72:f5:8d:
ed:98:35:61:7d:10:77:e1:bd:80:46:96:db:47:23:ee:31:38:
b7:0c:fe:b6:8a:a2:5b:5c:75:ae:c9:4d:b3:1d:f8:ec:98:ac:
8a:e0:64:79:e8:5a:84:3b:a8:d5:55:b7:d1:1c:22:4f:ec:c4:
db:80:5e:65:2e:e3:ce:e8:b5:8b:dc:c5:15:26:2e:49:c3:22:
49:53:67:3d:e3:07:99:44:3c:af:c7:cc:2f:cb:48:21:37:f2:
15:8a:82:09:54:db:1c:e3:52:da:ba:6d:73:c1:7a:67:9e:a6:
1a:da:f5:af:6c:63:f6:31:cc:76:0d:df:68:b2:f4:6a:a8:73:
5d:ff:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:57 2026 by rpki-client