Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: pSdyKkBEAW6rzlsRqIndqiJ0hTMLv/aMlC4K+igF2AU=
Subject key identifier: E9:FF:D6:40:54:2E:FE:22:69:7F:D1:30:16:D7:21:6A:B1:04:FF:08
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019CA9EAB1FA27188A2BAC8C6828D286FD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 15:00:56 +0000
Manifest this update: Sun 01 Mar 2026 15:00:56 +0000
Manifest next update: Mon 02 Mar 2026 15:00:56 +0000
Files and hashes: 1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: lPbUXAYiGQoxd89pqbnDFrAhw2+3pWhAn0C8xn32AsE=)
2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:b1:fa:27:18:8a:2b:ac:8c:68:28:d2:86:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Mar 1 15:00:56 2026 GMT
Not After : Mar 2 15:00:56 2026 GMT
Subject: CN=e9ffd640542efe22697fd13016d7216ab104ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:8b:ad:59:44:f6:32:2b:8b:7a:9f:19:f7:
c2:dc:e4:fc:23:ec:62:47:d4:87:2f:46:0a:f5:51:
74:8c:cb:2e:64:16:31:b4:81:a4:85:65:87:c8:82:
a0:ee:cb:67:9f:74:67:b2:3b:9d:a6:73:5c:b8:5c:
41:b3:6c:25:48:76:f0:55:c9:ac:f1:f0:48:f8:21:
f2:92:a1:1c:64:a4:a5:c9:9c:d1:13:35:cc:d6:7f:
a6:db:04:18:dd:d2:9f:d2:89:af:e0:0a:41:16:1d:
05:71:62:95:a8:3e:34:0f:8a:1a:ad:2f:e5:da:86:
1f:49:3d:32:1c:b9:34:1b:8a:d3:a0:51:88:44:c0:
4f:aa:ae:cf:b8:9a:91:46:9a:e9:d1:90:c0:02:c6:
6c:20:15:39:73:4a:d8:6c:bc:48:10:72:a4:50:1b:
6c:09:a6:1f:99:0a:cb:90:a5:ab:8d:1c:ac:8e:20:
e3:0f:d0:e3:83:99:70:2b:91:43:d0:ff:4d:f9:c2:
0d:e0:8a:41:eb:dc:c4:30:f5:3b:0e:79:31:7a:36:
f4:0c:83:4e:b6:2a:81:c0:0a:c2:0e:3f:c2:d8:5f:
2f:d5:fa:85:08:8e:bb:5d:db:18:b8:11:fc:9f:68:
44:ca:ec:96:81:08:56:3f:8b:15:71:89:91:37:e7:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FF:D6:40:54:2E:FE:22:69:7F:D1:30:16:D7:21:6A:B1:04:FF:08
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:e4:67:d7:9b:ec:f6:e4:95:65:3e:12:39:f8:93:b5:d9:
07:ab:b1:3c:6b:c3:b8:b9:6c:c9:46:b6:fa:61:b3:04:aa:4c:
22:ef:df:a8:a3:fe:6a:ca:9c:cf:31:cd:7c:78:12:50:5b:4b:
01:01:6e:cf:fe:6a:d7:8f:06:82:ca:71:82:0b:29:c6:23:5d:
fd:26:fd:94:b5:42:94:a6:ed:24:32:c2:6b:7d:80:28:7a:53:
81:28:f9:1a:eb:f0:ee:48:c8:a0:aa:6b:f7:28:0c:67:a4:5a:
6d:89:91:f5:cd:34:0f:4f:13:18:34:f3:24:d8:a4:5a:37:17:
ad:0b:94:25:f7:cd:db:99:64:8d:c4:24:47:3d:3c:19:25:ed:
4d:8d:44:47:e5:a7:16:e6:d0:f1:c1:71:fd:d2:0a:4b:83:a9:
6c:5a:11:57:35:6a:70:a8:e5:db:d9:e7:13:2b:8c:62:09:c1:
03:d5:5d:0f:a1:73:08:58:dd:ba:58:4b:32:ae:42:b4:3b:90:
d4:c1:4f:e1:df:f5:9d:28:f5:f0:51:b7:5b:53:41:7a:c7:ae:
a6:5b:87:e5:41:d0:4d:06:b4:dd:35:d9:9f:ec:f2:e0:64:af:
a1:96:1a:7a:05:1d:c7:60:e3:2c:7a:46:85:61:57:b4:72:09:
52:9c:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:04:56 2026 by rpki-client