Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: mvklVTM/kkaSHMinRp6lpTxE5joxdNk/YYacy8lV3s8=
Subject key identifier: B6:BA:70:49:05:62:74:63:D0:B7:4E:E1:2A:43:22:AC:87:FD:59:E0
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019CAA585EC2612051C6B3B5CCF58EC1168A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:43 +0000
Manifest this update: Sun 01 Mar 2026 17:00:43 +0000
Manifest next update: Mon 02 Mar 2026 17:00:43 +0000
Files and hashes: 1: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: BlF2DsC/XB9/j1wyENeT71ol9bnzB59QaytYyb78H2k=)
2: crGJsaUqkVJvevG7S1aR5kRrjuk.roa (hash: JplAsFQ7Xa/4SQCkj3u1taRZpnPpuKuRz//hnGEkFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5e:c2:61:20:51:c6:b3:b5:cc:f5:8e:c1:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Mar 1 17:00:43 2026 GMT
Not After : Mar 2 17:00:43 2026 GMT
Subject: CN=b6ba704905627463d0b74ee12a4322ac87fd59e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:8e:13:8f:b8:a4:f1:f7:10:aa:cd:31:aa:
88:16:b6:eb:d9:d0:f1:2b:85:b8:bc:84:5f:05:8b:
e0:32:ce:8b:f9:3d:50:57:59:37:2b:36:c5:09:3d:
78:10:19:72:ae:8b:31:2c:6c:a5:c8:e9:95:86:8b:
c0:8f:01:1b:53:6a:69:14:c8:66:26:23:b5:0b:25:
50:67:38:95:1b:4d:98:b1:61:77:2f:61:58:f6:5a:
ce:7f:ec:95:e2:a0:a6:8a:ee:21:bc:a8:8d:ff:b7:
97:4f:b9:ba:6f:f1:b9:aa:2e:70:0c:16:b2:fb:20:
9d:8a:6f:4c:4e:78:6a:5e:48:ec:49:99:ce:52:0d:
b4:8d:d1:44:34:a0:aa:82:17:04:e4:b9:57:ac:6a:
a2:f3:4f:6b:7c:f9:2d:99:6d:7e:9e:9f:74:69:d3:
fa:4c:3c:18:0e:de:5e:fb:bd:48:86:3b:04:d7:63:
f7:dc:9a:7f:88:f6:aa:5a:fe:90:9f:0e:fc:df:a5:
f7:cd:39:c0:ab:94:39:9f:47:91:a4:eb:6e:1a:46:
d3:01:98:2c:83:4e:d5:ec:21:3e:5c:74:76:76:b7:
ab:52:aa:af:24:6d:99:f6:24:90:a9:36:d6:db:cd:
0e:83:9a:3d:ca:60:72:18:0a:16:c5:06:1b:36:0c:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:70:49:05:62:74:63:D0:B7:4E:E1:2A:43:22:AC:87:FD:59:E0
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cd:99:69:5d:2c:e2:6d:8c:52:cb:43:82:37:fe:2b:93:48:
80:b1:1e:1b:d2:5b:b8:3d:24:01:d1:ed:a2:6d:9b:79:54:2e:
6e:fb:d6:17:41:4a:7d:eb:d7:39:ff:aa:e7:e4:64:2e:3d:06:
ab:15:a8:06:5a:68:ce:1d:7c:6f:7c:0f:27:dd:ba:92:48:df:
af:f1:da:af:04:b5:b1:d0:6c:da:11:c3:e1:0d:da:ff:84:db:
b1:d0:51:c3:37:7f:1b:31:b2:b5:9e:11:de:06:c4:c3:1c:71:
0e:93:80:67:a0:f7:29:b2:80:d4:c3:71:92:22:ca:ab:86:44:
39:c6:7e:af:b9:0d:8f:3b:a1:05:9c:56:53:5e:85:15:6d:e4:
4b:09:50:f5:ac:6f:3c:88:36:8d:2d:cf:c8:58:f2:68:14:03:
55:f5:97:80:d0:bc:15:58:f9:cf:8c:91:68:8f:d5:ac:8b:d7:
86:31:81:5c:50:8b:14:e7:44:52:e0:1f:9a:4b:08:60:0a:45:
58:a5:a4:3c:45:e7:4e:8c:16:b0:85:cd:81:b7:3f:2e:5a:2b:
01:12:7f:21:e3:77:7b:3a:3d:c0:40:7e:b9:41:fc:11:9f:c5:
ea:00:49:45:80:f1:4c:ee:bf:fa:61:3d:5a:6c:1a:84:95:5f:
3d:40:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:24 2026 by rpki-client