Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: dLJiIXs1wQ+6350iCa40ltsmKMPdxl9yifCPF8soX0I=
Subject key identifier: 03:55:B2:FB:01:EE:47:5B:6E:EF:31:AB:54:59:F0:AE:5B:25:49:3F
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 019CABD91C0BF9F20D2CCE6B20C43D4550F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: /9Dc+gkIjiYS24NnCzCubrfnPHZbDGTyJrNTJ5veXo0=)
2: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1c:0b:f9:f2:0d:2c:ce:6b:20:c4:3d:45:50:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=0355b2fb01ee475b6eef31ab5459f0ae5b25493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:55:ca:ad:e6:78:e8:a4:3d:aa:40:ee:7a:
d0:e0:75:aa:00:37:fd:4f:aa:58:db:9c:66:d2:52:
0b:e5:19:0e:df:0b:dd:90:91:38:d5:d0:1c:c9:07:
cb:c6:61:70:ee:97:21:c2:4f:fd:89:7b:38:bb:8b:
71:4e:5c:cf:75:24:f6:cf:61:09:e4:91:42:bb:6d:
f9:0d:3a:7a:b4:da:8b:22:ef:1b:50:a1:ab:d2:cd:
e7:50:5b:23:f7:8b:b4:ed:07:93:58:91:32:2b:c2:
f3:d5:23:84:dd:3f:ca:cc:dd:a8:ba:d4:d6:e7:94:
ed:4f:eb:59:3e:18:81:62:bb:e0:53:cb:79:1c:2a:
7f:19:77:c0:76:fa:71:77:c7:63:61:08:1f:3b:9c:
cc:29:c4:a0:e7:57:ec:18:ce:26:d3:5d:da:1f:b9:
1a:ff:f3:7e:7a:5f:b8:4f:c3:3c:7c:5d:34:1e:27:
f0:42:a1:c2:e6:e9:81:f6:98:50:31:35:13:ff:36:
87:1d:b3:ca:f7:24:74:a7:3d:c1:03:00:75:82:44:
59:5d:71:7d:2c:c6:86:d9:0e:43:de:e6:f8:30:3a:
d7:ff:db:f4:5e:86:54:fe:35:02:86:f6:56:d6:f4:
cc:37:9d:de:11:4b:45:64:08:6f:ec:51:0a:90:d8:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:B2:FB:01:EE:47:5B:6E:EF:31:AB:54:59:F0:AE:5B:25:49:3F
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:f2:b5:fc:7c:43:c0:40:0f:87:fd:a0:84:03:c3:63:3c:
cd:ff:a8:1a:31:1a:0a:e3:c3:08:b4:df:25:7e:6a:05:b5:a0:
12:c4:14:e6:31:d2:f2:ca:30:e1:d0:85:14:d7:4d:08:8e:2b:
6f:fd:ca:97:5e:a0:24:6a:c0:c8:9d:a2:fd:3f:72:b7:b7:66:
e3:4e:5e:4e:75:be:18:66:91:df:75:84:bc:00:76:c5:77:ee:
23:e0:82:c0:25:a8:b4:f4:26:bf:86:d3:2f:d4:fc:3a:20:09:
91:a5:25:b0:0e:a6:e6:8c:04:10:9d:9c:d9:65:79:10:8b:21:
6d:5b:28:8f:8d:eb:13:e2:f4:a5:ee:f4:02:f5:50:5c:56:3e:
01:0d:cb:0e:df:2a:77:99:7f:66:e0:40:17:d7:ea:67:db:b4:
6b:6b:c1:4b:48:e7:c0:36:f7:57:b1:dc:14:f5:39:ec:06:cc:
db:c2:d4:83:17:75:3d:4b:23:ed:d9:47:15:03:fc:56:fe:cc:
6f:8b:10:a3:e5:8c:58:6a:bd:db:1e:85:52:4d:90:7e:95:c0:
6e:65:f2:b3:f8:8f:61:3f:26:87:20:bb:6e:a7:3a:1c:bc:72:
8a:73:3c:1b:2d:b7:0d:08:a9:d5:70:de:72:92:58:7c:11:ef:
7d:2c:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:36 2026 by rpki-client