Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: HlGMH+uLXdlieicimvYkJbTfqlCXcU7FoFHbMIlg8Yg=
Subject key identifier: 33:8C:D2:C1:8F:D1:D7:04:A3:F9:8C:04:61:13:BB:7C:89:E4:33:03
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019CAC7E17D9F359A3D2E71C43F272B781CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 1109
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: aIWG7G7pc_c2slSSItEuUFBnVoI.roa (hash: S5hey+bOiO9SIrfKh6rWG2aF5cPDqfEVaBcsjW8NswM=)
3: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: UwJC9LnFbnBL58Nzsj23ev3JZQIxCNV9SbyUJirIyYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:17:d9:f3:59:a3:d2:e7:1c:43:f2:72:b7:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=338cd2c18fd1d704a3f98c046113bb7c89e43303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:15:22:3e:d1:c5:ee:8f:b0:13:4e:ae:e4:
4b:ae:04:5d:03:92:c0:67:f1:17:13:da:ec:4a:d7:
86:8e:0a:5e:29:10:2b:21:88:10:43:da:47:ce:79:
43:c5:c4:69:be:0b:93:6f:cc:b7:65:7c:58:a3:06:
d9:df:19:73:41:10:07:80:92:af:4d:4a:bc:d3:aa:
a7:95:0f:1f:3f:2d:d3:57:a6:b5:8d:8f:65:6b:56:
07:3a:42:26:41:4a:22:86:82:a7:74:6d:d4:4c:05:
b4:49:ff:d5:22:c2:75:89:80:e0:0a:ec:19:84:24:
78:36:06:cd:a9:eb:4f:cb:d5:66:6e:bc:6c:20:a5:
bf:64:d5:38:c8:81:96:80:08:b1:94:33:0d:61:57:
2f:97:b8:6c:08:3e:a1:78:48:31:c4:6a:28:71:c2:
a5:52:51:d4:68:5e:4d:3e:4d:72:99:e1:c8:e6:98:
66:ea:18:8f:43:0a:b8:7c:cf:43:07:c3:98:85:e2:
3f:8f:9a:8a:bb:65:e1:1f:13:de:54:12:f1:6d:b0:
50:6e:6c:0a:07:e2:44:76:0b:23:a6:29:c2:a3:04:
ae:ff:8e:2b:27:7d:49:e1:5c:4a:81:11:e0:15:5e:
f3:36:31:3e:32:f5:43:05:6b:d4:0a:de:61:3f:2b:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:D2:C1:8F:D1:D7:04:A3:F9:8C:04:61:13:BB:7C:89:E4:33:03
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:5f:93:cd:d5:fe:9c:e1:8c:2f:ca:9f:8c:43:28:30:5e:
fa:71:74:1e:5e:5e:7d:61:27:94:95:eb:9e:85:8e:6f:ae:db:
45:43:81:15:98:6f:87:ae:4d:84:1e:56:90:41:7b:fd:6e:5d:
6b:3a:7c:1d:7e:42:25:60:1e:ea:50:1c:16:25:38:6d:d2:99:
4b:bf:02:27:5b:69:bf:1b:fa:77:ad:a3:ac:9a:fe:74:01:b1:
9d:75:a3:34:ff:89:96:ef:12:51:cd:6e:04:6f:5a:6d:2e:58:
bb:b4:5b:2f:54:0f:8d:fd:14:64:d0:6d:2f:32:32:42:30:25:
34:40:a3:61:e6:11:32:50:d2:52:8c:f7:1b:10:ae:dc:5f:e3:
f5:56:35:50:24:72:91:58:81:3f:7c:dc:cb:20:c4:91:26:ef:
6d:25:50:93:cb:8d:1e:86:4a:29:11:36:20:26:3c:46:b9:13:
31:bd:6a:39:4c:1f:2b:77:fd:40:e1:a7:33:8a:f1:54:dc:73:
07:68:93:52:14:b7:ea:7d:b3:68:b7:2e:7f:3f:14:76:74:71:
cc:f5:a1:90:f8:a1:55:7e:ba:b1:d4:59:f4:76:e9:a8:c1:6f:
80:62:46:95:30:fc:37:c1:a1:97:52:73:14:0b:0d:dc:07:3c:
76:01:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:35 2026 by rpki-client