Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: 2cBlKK6TrCmg+B29DoHyMlHGlGAfnD64Kf8gRiPXSAo=
Subject key identifier: 84:70:31:32:AC:AB:2F:D7:94:26:49:8E:B9:66:73:17:2C:77:F3:1F
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019CB701F06BF5B125EA688C394492C8175D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0F81
Signing time: Wed 04 Mar 2026 04:01:23 +0000
Manifest this update: Wed 04 Mar 2026 04:01:23 +0000
Manifest next update: Thu 05 Mar 2026 04:01:23 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: uD7v27b6ZiWrGTG/xtU7AcOPShlbfv5mPeWdfHs+Yjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:01:f0:6b:f5:b1:25:ea:68:8c:39:44:92:c8:17:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Mar 4 04:01:23 2026 GMT
Not After : Mar 5 04:01:23 2026 GMT
Subject: CN=84703132acab2fd79426498eb96673172c77f31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:18:7b:d7:2e:ed:97:ab:0c:92:77:40:81:
33:89:51:f0:8b:f6:8f:9e:a9:ba:64:dd:74:08:4e:
69:a1:49:ce:41:4d:e7:de:30:0d:ab:6c:e6:9e:4e:
79:5f:a7:9a:cc:49:14:6e:be:2c:d2:0c:f2:b1:a9:
06:d1:91:64:40:57:65:97:cc:8b:90:57:fa:3a:91:
a9:d8:b9:ef:21:0e:18:19:81:ff:40:9e:b1:32:4a:
8c:24:c8:65:e5:29:0a:83:d3:26:45:99:92:64:75:
44:c6:4f:1c:46:0b:73:af:30:19:77:23:be:73:b5:
0f:9e:d5:37:1f:c8:f6:25:15:63:53:80:81:23:2b:
0c:8d:b1:8d:28:81:74:5e:2a:27:51:99:5e:5b:f5:
cc:d5:32:67:f2:9f:15:8e:d8:42:6b:c1:e6:99:03:
c7:41:18:c9:32:14:ee:2d:af:22:e6:f0:17:e4:47:
c3:3b:a1:ee:6a:19:8d:7d:88:52:4b:a1:46:f0:c9:
e9:c4:49:84:e6:2e:e5:0e:ed:7f:1a:e8:60:61:0f:
83:34:19:00:47:6b:47:b7:10:40:e6:c6:56:ae:7d:
2f:63:7e:40:cc:10:23:95:44:da:f6:46:30:6f:fc:
f0:3e:1e:1a:bb:f2:9f:e1:a4:10:2f:e4:48:f3:39:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:31:32:AC:AB:2F:D7:94:26:49:8E:B9:66:73:17:2C:77:F3:1F
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:50:44:0f:59:f8:fe:4d:09:30:98:95:eb:f1:c8:93:7f:3e:
a7:d1:da:62:58:6f:80:58:d0:3d:8d:e7:5f:ac:dc:0b:ff:d5:
7b:5a:25:d2:d1:cc:e9:0f:71:2a:fd:39:8e:c5:d8:0d:16:19:
e2:3e:68:9b:76:e3:95:fc:dd:72:42:6a:54:9a:73:a8:1b:4c:
68:b9:e3:19:45:65:77:99:3f:43:40:2d:70:69:b6:cf:53:26:
56:86:70:7a:b9:4f:d7:29:ba:d8:f2:4f:9d:26:cc:84:d2:1a:
6a:de:e8:94:9e:5a:02:ed:0d:2d:90:16:b7:1b:6f:28:b3:8d:
68:a9:3e:e3:bc:01:c8:7f:d7:4a:59:d7:84:d0:bc:13:f7:6b:
6c:5e:69:ac:ca:3e:21:bc:7d:56:d8:e4:f0:da:8c:9e:b6:99:
20:e0:fc:06:fc:ca:7e:15:c8:1b:a4:de:a1:97:39:6a:11:79:
f5:9f:b0:92:57:fb:dd:ff:e4:d9:ef:b9:8b:91:5d:e1:bb:a1:
95:05:69:35:d9:42:35:e0:61:af:8a:a6:62:7c:9d:ef:7f:c1:
16:9f:ce:6d:33:80:d6:66:6d:5a:9a:aa:53:52:ac:51:ef:55:
80:ef:b1:dd:58:85:e1:b7:ec:a0:14:ce:08:e8:94:fa:88:c4:
a5:4f:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:20:25 2026 by rpki-client