Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: qEWgRhiwYUz8U6szrfxDMrQKkTnNKwezO15PKSQI5v8=
Subject key identifier: 26:C4:32:E2:D1:94:9E:B2:15:AD:7C:1A:25:32:58:6E:43:7B:DD:40
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019CABA25A5EEC2BDAE0145C0E29BC4D1DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0BF2
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: 1RQLtNwsJfIFpRzUfnhxJpXZkyM.roa (hash: wMjp06WKn3OrqdyFTd7sBWSyRC6sXJcxycCDPSTxcI0=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: JD9OeSHwZy+W8YXsNPt/b5+90IMEDvSpQsM6VBjWRck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5a:5e:ec:2b:da:e0:14:5c:0e:29:bc:4d:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=26c432e2d1949eb215ad7c1a2532586e437bdd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:c4:b5:93:23:05:a0:bf:9f:26:42:d8:1f:
38:8e:0b:01:b8:59:07:f9:a7:d5:92:54:a0:07:c0:
3a:cd:07:6a:7e:11:ea:de:e5:63:85:48:c2:18:25:
91:9d:3b:fc:21:72:d1:f1:1d:d2:6f:44:88:f5:2e:
05:df:1d:08:bb:75:14:9a:10:74:b5:49:f1:96:25:
42:f7:0b:ee:a6:20:c3:39:61:78:d5:e7:a7:ed:ce:
e6:03:ed:67:fe:f0:37:19:5a:ca:1b:41:2a:55:09:
9a:d4:38:46:48:5a:79:92:c6:ff:68:ec:e6:e9:ea:
93:7a:62:30:e9:79:69:f1:3b:d2:0c:f9:d9:1d:79:
12:ac:07:70:fa:cc:69:83:25:9f:8b:d1:08:2c:59:
aa:7e:ab:cc:e5:e6:a2:be:b1:64:68:1c:e3:3b:cc:
ba:bb:8f:7f:e4:1b:d4:94:44:4e:a3:d5:83:8a:69:
ff:c2:4d:c1:a4:68:01:ce:72:e2:cd:0c:ca:e8:28:
d9:15:86:ec:6f:ee:9b:6f:50:62:3a:d8:95:a4:bf:
ac:52:70:ed:bf:bb:60:8c:d8:85:b0:e3:a1:a9:c6:
41:66:96:98:94:f2:a2:fa:77:02:8d:19:22:dc:6f:
5d:55:55:48:f5:44:ac:21:7d:b2:7d:19:7d:88:86:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:32:E2:D1:94:9E:B2:15:AD:7C:1A:25:32:58:6E:43:7B:DD:40
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:9e:37:70:3c:30:bd:c1:81:8e:06:ac:c2:bf:3c:ca:57:
9c:74:51:40:96:2a:08:14:10:48:43:4f:e6:59:2c:52:bd:6a:
9c:d4:41:d7:17:0b:3f:b8:84:c7:fe:7d:08:3d:72:9c:33:e4:
ed:52:6d:05:ac:ee:2d:75:d0:05:4b:33:34:1c:9e:17:c2:33:
81:e0:b0:60:25:02:28:8c:a7:04:d7:42:be:47:d2:8c:c6:f2:
42:54:13:91:5f:78:a4:eb:73:95:d8:97:7d:21:f6:27:67:3c:
4b:1d:05:5f:32:0c:af:cd:ad:e2:4e:e4:ed:18:dd:16:22:57:
32:3f:27:b4:a3:14:a1:e6:34:80:36:89:85:a0:f7:48:17:47:
e8:5a:82:6f:10:2a:92:83:8b:aa:85:a5:d9:ea:62:2a:77:05:
4a:04:63:c9:bb:12:4a:6a:2e:90:eb:a5:90:a4:92:0f:c7:8a:
0c:f0:c0:cb:9a:4c:f9:cc:97:00:3c:66:72:78:3b:bc:dc:1a:
b2:32:2f:77:dc:4e:b3:c4:c6:9e:ab:2a:b3:4f:06:95:24:34:
8e:f5:1e:2f:8f:55:84:52:c6:66:7d:1f:e8:e7:63:27:3a:9f:
b0:a6:94:05:c3:78:13:ee:41:a8:4b:49:8f:0c:19:c4:7d:49:
ee:0d:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:07 2026 by rpki-client