Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: 4q28L/QheNmySwCo2ElDm9WkXxsU/dwRsOx5zZ3vT3Y=
Subject key identifier: C9:20:AD:34:33:F7:9E:AC:61:76:E3:71:42:DC:6C:C5:B3:E1:F6:22
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019CA8A10BCF34B35EF34BE6327F2398D40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: FB
Signing time: Sun 01 Mar 2026 09:00:52 +0000
Manifest this update: Sun 01 Mar 2026 09:00:52 +0000
Manifest next update: Mon 02 Mar 2026 09:00:52 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: WBolgVSO9BG8rQxEt62X1DPBlKHs8WrzoNroMPR0Atg=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:0b:cf:34:b3:5e:f3:4b:e6:32:7f:23:98:d4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Mar 1 09:00:52 2026 GMT
Not After : Mar 2 09:00:52 2026 GMT
Subject: CN=c920ad3433f79eac6176e37142dc6cc5b3e1f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:b4:d9:1e:bb:f8:63:4f:24:e1:50:01:91:
88:e3:28:25:af:cf:99:a2:b8:1b:85:b8:49:bf:2f:
bd:ef:4a:5d:e8:eb:9d:68:7f:b9:50:5f:80:14:6c:
29:66:b0:0d:82:c6:50:ff:b0:b3:5f:3e:bc:c9:b4:
af:b6:d6:c3:41:b5:6f:5b:68:f5:95:b9:18:9b:dc:
26:6e:d3:8f:18:52:ba:4e:e2:86:aa:d9:f4:fa:20:
52:0f:4f:2a:f3:9a:9e:1f:f4:07:e1:45:82:db:e1:
7b:82:65:9d:db:e2:78:be:e4:dd:79:ee:98:48:02:
05:90:35:f8:e2:b2:d7:31:c5:07:00:58:a7:4c:33:
d1:dd:b2:d5:cc:b1:92:d4:0d:10:1b:fc:99:b1:d3:
43:0b:02:24:a3:f3:c4:20:f6:a6:c6:cb:2b:37:73:
b5:af:00:ae:2f:eb:df:0a:d5:1c:15:76:d7:d1:91:
a1:98:a4:fa:35:66:f3:9c:88:19:da:36:6b:28:e2:
47:a1:25:c4:eb:81:22:4c:31:7d:ba:ec:33:53:b6:
0f:6c:9f:ab:b9:1b:27:1c:23:f9:cb:1d:b3:f3:dc:
01:d3:1c:82:29:c1:48:67:71:fe:e5:1b:4f:de:97:
fc:38:9b:fe:1b:58:79:b2:d8:f3:22:e8:21:21:0b:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:AD:34:33:F7:9E:AC:61:76:E3:71:42:DC:6C:C5:B3:E1:F6:22
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:fc:98:c9:ba:bf:98:fb:08:3d:a2:72:a9:25:be:4e:06:
48:2b:34:60:13:15:ef:7d:59:53:d7:cc:0f:07:1b:25:84:6d:
ed:00:8f:e9:7c:90:87:3b:30:43:ea:05:55:c2:b8:b5:00:2a:
5e:14:23:41:da:15:c2:ec:78:f5:d9:f2:01:71:02:63:07:b2:
9a:e6:ed:08:7e:01:54:2b:2d:6d:d4:eb:df:f1:21:35:c7:41:
3c:aa:79:fb:08:1f:b9:e7:b1:27:a0:3b:18:7f:26:80:2b:ce:
b3:ad:15:f2:ff:26:a5:72:74:4f:68:65:89:8f:fb:3f:4d:18:
cf:33:b7:2b:d8:9e:60:e5:92:4b:a4:02:19:22:b5:b4:4a:85:
55:57:14:77:2d:b4:3e:33:d7:30:66:1a:55:2e:d7:00:4b:ca:
2d:62:f6:9a:2c:a7:32:f6:69:c4:48:8d:6f:fe:42:45:31:9b:
65:e6:09:2e:74:55:db:a4:99:36:99:dd:b6:8a:75:13:45:d2:
00:19:37:72:d0:53:ed:d3:6d:45:a1:35:d9:c3:f7:d9:fe:9f:
bc:1f:b7:c1:16:ce:ad:a9:69:d2:97:cc:bc:f6:5f:f3:3e:a2:
cc:8f:47:81:19:c8:bd:90:c5:e4:dc:ea:d7:17:76:46:16:4f:
37:c7:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:19 2026 by rpki-client