Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: anlD4i93eM/o5nTKGbzl+slQ7FCo0K1jYrfOdTyunI8=
Subject key identifier: F4:29:30:B5:EE:C1:69:BF:2D:8A:3C:EA:0A:8C:06:C9:06:FA:6D:E1
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019CAAC65F42625FBB68697BB2BFD358FC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0FA8
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: +noetX1K6vK7joDbh5tGao60eCStd+BD7fiFPiWdcoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5f:42:62:5f:bb:68:69:7b:b2:bf:d3:58:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=f42930b5eec169bf2d8a3cea0a8c06c906fa6de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:92:7f:69:d5:40:e2:1b:ea:51:d8:b9:e9:
a9:71:0f:05:4f:7a:1e:00:77:da:c3:7f:f3:e1:91:
43:f5:30:76:75:e8:ed:d2:0a:84:46:b1:f7:2d:1c:
61:62:dd:77:e0:e0:d3:77:c8:f0:10:a1:40:f4:cf:
6d:bf:c2:5d:15:28:8f:98:86:ba:c7:70:b1:f0:3b:
ab:aa:37:3b:36:2c:df:11:ca:00:be:bc:27:24:61:
18:39:6e:f6:8a:f0:cc:c8:a1:08:42:19:21:24:e1:
59:15:b0:d3:7a:36:39:73:8b:fe:95:f5:b6:4f:fc:
31:6d:db:9e:ba:a1:99:0d:06:74:14:5c:bf:97:52:
30:cf:ae:69:7b:c6:c6:40:fc:9e:17:d2:5b:a1:56:
a4:27:4d:32:2b:59:72:e4:c1:9f:1e:bc:d1:9d:74:
44:24:90:d9:2b:d8:cf:e8:d8:d6:02:d6:b0:61:10:
a3:f1:5a:73:ed:80:0a:bd:97:7f:9f:93:0e:4a:0f:
74:ee:e4:20:30:fc:a9:54:5b:06:fc:2d:3a:88:c7:
22:cd:01:10:10:b6:3a:94:4c:9b:cb:c4:2a:02:bd:
13:ca:b0:5f:39:21:af:bc:48:a3:0d:c2:fb:37:94:
13:3a:b5:4a:2f:fa:a7:7c:6c:e0:09:99:cc:40:13:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:30:B5:EE:C1:69:BF:2D:8A:3C:EA:0A:8C:06:C9:06:FA:6D:E1
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:05:38:8d:dc:76:a8:41:f0:83:24:92:ef:65:12:84:03:56:
40:61:7a:a4:01:8e:b3:34:51:11:49:1a:01:53:5b:11:e0:42:
3b:ed:77:d7:77:81:a9:4f:7e:29:18:6e:26:4c:45:3a:55:7a:
c6:ac:84:3d:19:32:58:81:f3:46:46:a8:82:8f:ee:91:d4:ff:
f7:fc:19:c7:22:39:57:2b:57:93:d1:10:27:f0:18:ba:99:1e:
98:a7:fb:a1:9a:90:4b:b3:0f:e5:d4:23:c7:9a:73:2a:cd:17:
d6:8b:2b:20:a6:2e:f1:96:f6:24:2c:35:92:fd:4b:8e:18:5c:
0e:5f:18:31:62:06:34:cd:76:e8:13:fd:0a:7d:f3:23:01:59:
d4:b4:12:b4:eb:8f:af:2c:e5:45:95:2c:6c:02:cb:25:15:1c:
75:72:0d:d5:6b:22:89:4d:90:21:c2:45:e1:f6:87:02:08:80:
5f:b8:c4:fb:05:90:4b:b0:7c:19:f4:2f:da:59:21:0e:16:fd:
df:7f:00:77:74:38:af:31:25:41:3a:2a:09:3d:bd:82:3f:db:
50:72:0b:9d:ae:7f:7e:4a:e4:79:1d:d0:17:c8:01:24:35:04:
92:86:d9:08:a3:5a:e7:f1:63:cb:56:18:60:23:97:9a:f2:bb:
a6:79:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:31 2026 by rpki-client