Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: kMiX4/zpULpR8tVe9E+oMsim1yRLEDqgZsJbzIm7pt8=
Subject key identifier: 54:28:68:19:78:DE:9E:22:10:30:B3:64:CB:89:4F:28:55:54:03:E3
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019CAA58F5AA459C4A638DDA8A16484D99EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 1718
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: 2gCCHieIKkKO2m1DMTIXQ1BtfD7hA03liVzGklnYeVs=)
2: JcapaBByGfg1r869CgLSe-5w-C0.roa (hash: U5B93AFtlrsiQ6jcGPHG5OSN9KDq19UojlE1/dcuDeI=)
3: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (hash: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f5:aa:45:9c:4a:63:8d:da:8a:16:48:4d:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=5428681978de9e221030b364cb894f28555403e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:bc:e1:8f:06:cb:de:83:71:95:04:c1:15:
7f:a7:11:e8:c1:47:37:e4:d9:24:91:c5:35:8e:ab:
d6:dd:ce:c9:fa:a8:1a:15:59:82:1b:45:a3:79:db:
9b:e0:8f:e7:be:c2:57:73:10:45:d9:59:36:7a:1b:
ff:4b:bd:80:7f:40:73:3a:cd:eb:a6:b6:56:f4:91:
d2:62:0f:13:c2:64:55:10:f4:09:88:58:97:70:b6:
30:ad:30:9d:fd:a3:1f:0b:53:6c:93:6b:72:55:23:
f9:0e:9b:23:21:27:c9:ac:a7:4a:11:85:98:05:c4:
cd:87:99:ff:d1:5a:23:eb:40:6a:11:fb:38:3a:a1:
bf:08:4c:d5:99:be:3c:e2:01:f2:22:92:a0:00:95:
ea:7b:b9:53:91:27:51:da:8a:7d:7e:35:ca:79:9f:
6f:05:25:e5:2c:59:8a:ef:0a:88:02:47:3d:91:eb:
a0:e3:cd:11:1e:d0:40:40:72:c3:70:6c:27:8e:6b:
89:79:d9:e1:71:8a:54:0f:81:7a:c9:ed:87:9a:0e:
f3:4b:b3:0e:9c:c3:51:d5:39:a8:17:dc:f4:2b:7e:
59:72:6b:23:2e:07:81:72:fe:82:f7:3f:77:b2:5b:
b7:02:01:3b:d4:ce:28:d8:c6:bc:97:c9:36:3a:9c:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:68:19:78:DE:9E:22:10:30:B3:64:CB:89:4F:28:55:54:03:E3
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b5:45:d8:b4:40:e3:05:20:8e:b7:68:b5:58:45:32:25:2b:
4e:16:1c:15:b9:98:de:96:72:34:b5:5c:06:8d:42:63:00:30:
49:cf:b6:fe:78:c0:8d:78:77:04:66:f2:4f:f0:64:fd:d5:83:
dc:c6:78:a1:40:df:bf:eb:80:7e:a0:b6:3c:e7:96:28:3d:c9:
73:83:91:ae:5c:e4:c0:11:1f:35:ad:fc:86:b3:71:0a:f3:30:
05:0b:02:10:49:b2:dc:02:1c:05:9c:1f:9c:7d:a6:a3:7d:af:
e7:18:02:bd:02:0b:dd:29:71:3d:65:54:57:15:96:ec:a3:60:
65:56:db:e3:f7:0e:ed:b8:1e:18:50:0a:f2:22:a9:90:fd:be:
b7:16:81:b3:f3:17:18:c1:31:28:50:17:49:19:bb:05:97:a9:
77:20:47:b3:36:fe:8c:f0:f0:59:f6:73:08:6b:39:af:c8:cb:
52:b1:80:3c:83:a9:08:5a:f2:f4:ef:3a:59:4b:be:9a:a5:71:
1e:fe:d5:d7:22:78:42:ef:5c:2d:13:c8:65:1a:80:51:5b:14:
9b:08:df:a0:9e:06:8a:39:c8:c8:50:e9:7d:fd:c8:ed:9a:09:
8f:a9:cc:92:89:71:67:46:25:6a:2a:44:92:44:92:24:7b:bb:
a2:6a:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:43 2026 by rpki-client