Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File: 1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier: EEz3bHPYZeHypJf0iKEAW4tmuOau0dquIEAq1BX6Ng0=
Subject key identifier: 8F:32:57:CB:BD:A7:28:2A:FC:1E:B2:05:8B:B4:7E:D9:95:CD:99:7A
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer: /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial: 019CADFE4A4EACE6F3562CF1DEB3980522B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 10:00:49 +0000
Manifest this update: Mon 02 Mar 2026 10:00:49 +0000
Manifest next update: Tue 03 Mar 2026 10:00:49 +0000
Files and hashes: 1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: cyTk4+vZsz7e11CJ0SciAOMTiAcFXxC66fzgjHhvmps=)
2: icdH-LJXbo2xaSAjuAjUfjqOQ0Y.roa (hash: oPFP3MCPVdDHLd6BStfD/RkJTA6ZSTAQ6B6cIgyyspY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4a:4e:ac:e6:f3:56:2c:f1:de:b3:98:05:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Validity
Not Before: Mar 2 10:00:49 2026 GMT
Not After : Mar 3 10:00:49 2026 GMT
Subject: CN=8f3257cbbda7282afc1eb2058bb47ed995cd997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:9f:63:bd:b0:4b:8d:d1:65:4e:69:28:e9:
71:bf:cc:e2:e0:8b:1c:b5:10:aa:54:f3:2a:55:63:
5a:fe:c7:2c:5a:3d:db:92:78:ad:6b:fc:f7:d9:45:
1a:ad:dc:7c:3c:15:55:81:c7:03:67:b9:c9:7c:81:
fc:a8:c9:c8:a5:9d:ba:63:d7:42:3a:94:4c:37:cd:
d2:b6:9a:d5:5c:1e:ac:dd:4b:0c:e4:01:70:f0:7c:
7b:35:55:c4:e9:48:1d:44:c3:41:4e:fb:31:1a:ca:
a4:db:50:d8:9a:24:c4:b3:75:6a:ee:2b:dd:fd:47:
37:5b:cd:bd:a3:6f:4f:5c:ea:39:e0:28:a9:26:9b:
1c:2d:23:79:08:17:5f:95:2d:f0:19:72:3d:79:2b:
31:0b:1e:31:12:4b:9b:6e:3d:ea:dd:06:3d:31:db:
84:7c:7c:81:50:94:48:d0:3e:77:17:43:5c:41:00:
8b:c8:2a:f0:07:1a:1b:db:56:fe:ed:97:bf:80:2f:
db:68:42:f4:5e:6d:1b:7b:fd:04:72:00:da:4c:98:
ab:4c:a2:27:e3:37:a3:c9:52:86:98:9d:8b:1a:89:
8b:c8:fc:31:c1:7b:00:e4:3c:2f:16:09:ec:73:92:
7f:61:f2:78:b9:72:08:93:bc:c4:32:92:3e:81:01:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:57:CB:BD:A7:28:2A:FC:1E:B2:05:8B:B4:7E:D9:95:CD:99:7A
X509v3 Authority Key Identifier:
keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:c7:7f:1c:fd:14:16:bb:28:7d:0f:9d:4d:7e:b3:92:f5:
3d:45:7c:8f:96:ca:be:57:59:ec:11:87:d7:30:12:c1:ff:f7:
92:e4:c0:83:28:d8:65:b3:7b:44:c8:51:a7:f8:65:7e:b5:bd:
d1:35:82:48:4a:77:0d:63:64:7f:46:77:76:2b:ce:9d:05:fa:
24:bf:33:84:91:6f:91:8c:71:d0:b2:0a:6a:72:f3:0d:79:03:
37:80:bc:b3:5b:3c:6f:13:3a:59:1d:c9:8c:a1:71:74:c4:96:
1a:2d:c7:f4:d8:2f:37:0e:ed:d4:e8:2e:60:0d:12:aa:14:27:
b2:5a:d9:8b:21:4f:58:15:00:38:65:62:13:e9:68:6c:a4:15:
82:84:ca:7f:c5:ae:46:b3:ad:f5:16:15:c1:8a:f6:72:17:72:
86:bb:c8:59:a7:45:55:bd:37:ec:19:02:0f:fa:c9:da:91:02:
0d:e6:a6:21:19:ad:26:3d:ef:7f:64:97:73:85:88:aa:a5:19:
ef:32:e5:e9:67:35:4b:bc:18:99:06:6e:3b:28:ce:38:f5:26:
72:0d:85:22:5f:f0:72:7e:40:0d:5d:f6:b5:3e:e0:93:ce:90:
43:65:d5:06:90:ec:76:aa:6a:d4:e8:d6:a1:13:3b:00:ba:39:
fb:9c:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:59 2026 by rpki-client