Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: V0n+YgYLZ72hToRIVxuKi17O56vXdj0Beo1tw8PNbmA=
Subject key identifier: 8D:50:05:E1:ED:C0:CD:79:8B:55:EA:B7:FD:7B:A8:97:3C:53:82:93
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019CAA8F836E4DD51BD466C7A4D50D7BC9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 1581
Signing time: Sun 01 Mar 2026 18:00:57 +0000
Manifest this update: Sun 01 Mar 2026 18:00:57 +0000
Manifest next update: Mon 02 Mar 2026 18:00:57 +0000
Files and hashes: 1: 2RPY_DRtkYzxbp8ObFmZTuCpj7I.roa (hash: SWTV6VV0qDNDxzL8a/2qaSf2Dp7oqXVVz/XaDNhIJ2w=)
2: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: j0ysHFuMioFNzSpz1LTX9oBfOPFrI/xQU0vLWWDzU1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:83:6e:4d:d5:1b:d4:66:c7:a4:d5:0d:7b:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Mar 1 18:00:57 2026 GMT
Not After : Mar 2 18:00:57 2026 GMT
Subject: CN=8d5005e1edc0cd798b55eab7fd7ba8973c538293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:eb:ab:a5:7e:c9:f3:b1:cf:8b:16:47:63:
bf:84:cb:bd:c3:4d:4e:23:93:09:2c:ba:89:c1:79:
d8:53:85:72:6e:a8:d7:50:43:16:75:3d:e5:56:28:
cd:05:a7:12:3b:e1:31:16:46:f2:0f:8e:e2:fa:80:
50:09:c4:40:64:6b:c9:91:7a:1f:58:af:e9:b5:ef:
a9:25:48:40:19:46:4b:84:24:c0:5d:37:2a:1d:2f:
d1:cf:75:0a:46:0e:a2:1c:8b:0c:f3:0b:ff:f0:b8:
41:fb:7b:0f:bf:35:97:44:ed:48:14:2c:89:36:a1:
a4:d9:58:6d:d9:5b:be:4f:09:1a:63:5d:ae:3b:65:
a0:56:6c:b8:44:c1:aa:ca:18:0e:7c:e1:ee:a5:bc:
7b:0d:3f:64:87:11:ee:c0:11:5d:fd:91:4f:5e:78:
08:3f:09:63:34:2f:36:b0:85:30:c1:9c:c5:30:27:
93:4a:2b:16:bd:81:f6:bb:22:6a:f8:94:d1:8c:78:
65:2b:c4:45:bf:8b:62:29:0b:ea:92:37:ea:55:36:
87:46:8d:ec:71:5f:3e:2a:cd:3a:09:30:7a:9d:95:
13:f4:5c:d8:cf:b1:94:11:31:6f:8c:f8:58:95:5f:
ef:ac:ce:58:6f:28:f8:c9:56:6e:dc:1f:60:d1:70:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:05:E1:ED:C0:CD:79:8B:55:EA:B7:FD:7B:A8:97:3C:53:82:93
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a5:c3:ff:30:f0:b5:3e:7c:65:84:c5:f2:33:b3:ec:6f:98:
dd:fd:a6:41:51:39:b4:d5:ec:f8:92:df:9f:72:1b:0a:8b:d1:
a5:31:42:48:35:cb:65:23:89:85:2a:10:ca:8f:95:6e:59:0b:
25:10:c3:53:66:cd:65:5f:66:db:47:f6:b5:54:a4:fd:49:d2:
25:f2:5a:43:d1:73:ec:5e:23:ea:85:08:58:8c:da:05:80:49:
9d:cc:ef:79:9e:a2:f8:19:d3:6c:4d:a2:b4:18:56:a6:3d:fb:
62:4d:6f:b6:6f:fc:40:bd:71:53:1e:06:ed:a3:bb:1f:94:b2:
cf:8c:36:4d:aa:5f:4f:f4:10:30:8c:ba:17:f6:5d:e8:d9:9c:
0f:1e:ef:65:8f:6e:c5:eb:1f:91:25:8b:54:ae:d4:8c:13:f1:
b2:c1:45:4d:0b:75:cc:e0:4b:80:6b:36:d8:ab:0f:23:97:10:
31:03:af:b8:50:25:48:0b:d4:b8:90:93:e2:cc:07:a8:0f:a0:
6f:37:4b:16:90:ed:3e:6b:59:de:73:3b:ca:b4:8b:9d:07:d8:
09:67:83:68:c3:b8:61:d2:96:6e:0b:c7:8d:c2:48:08:e2:93:
22:5f:65:5a:c1:fb:1a:d7:e4:30:35:20:b8:00:44:49:18:ce:
e5:72:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:30 2026 by rpki-client