Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: PzY0+V8KmI5c8dG2JkXTEyHpvx/8nelzxVHmSBK7fJU=
Subject key identifier: F4:97:32:17:C1:6E:4C:BA:24:52:3F:D3:2C:7C:89:83:6F:74:CE:31
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 019CA90EDF07396BF3095CD9B0BF090AB50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 0FE1
Signing time: Sun 01 Mar 2026 11:00:49 +0000
Manifest this update: Sun 01 Mar 2026 11:00:49 +0000
Manifest next update: Mon 02 Mar 2026 11:00:49 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: RReSeXlF/O49Iob5yx9MjO1bfB1O9AAUo7ZMSEyGK1I=)
2: 2qEJf-3plphGQsWl8SQW6YyPVOo.asa (hash: 4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=)
3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:df:07:39:6b:f3:09:5c:d9:b0:bf:09:0a:b5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Mar 1 11:00:49 2026 GMT
Not After : Mar 2 11:00:49 2026 GMT
Subject: CN=f4973217c16e4cba24523fd32c7c89836f74ce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:89:e0:46:ad:11:1b:3b:b8:b7:c5:2c:15:
8a:6e:26:0c:d3:30:a7:cc:b8:e6:08:1d:c0:01:13:
d3:b2:ee:2f:68:78:2f:de:bd:02:e8:e1:13:55:5a:
0a:91:31:a3:7e:59:b6:53:15:95:c4:24:c9:66:b8:
5d:a9:4e:f8:54:9d:bf:8a:19:48:86:6a:68:5c:59:
45:8e:f6:8a:1b:0b:d9:35:b9:81:c7:f3:d1:a0:e4:
18:77:18:98:f6:6c:b9:70:04:56:55:52:fb:e7:61:
bc:1b:9c:a2:92:de:3c:27:3f:03:f3:b5:6c:cf:df:
9b:52:25:c3:b7:86:7b:7a:23:8f:59:ae:87:a1:c1:
e1:00:38:56:53:ea:af:f7:fd:ff:40:e6:c9:d8:ad:
72:0f:15:dd:21:fe:17:56:9d:f5:aa:27:d1:11:5f:
28:1b:26:fd:95:44:5c:ff:d4:9f:69:e5:66:66:62:
89:f9:ad:07:bc:d2:9a:ec:e9:bd:4d:4e:8e:c5:90:
94:a9:64:2a:95:1f:77:2d:a0:0c:38:10:3e:a9:23:
92:97:97:89:cf:77:1b:a7:68:8c:c4:c3:84:1e:a3:
7f:3a:eb:34:1c:7f:57:35:69:30:98:6e:a1:67:33:
4b:23:bd:af:77:45:30:99:44:0b:d2:8c:22:e7:2a:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:97:32:17:C1:6E:4C:BA:24:52:3F:D3:2C:7C:89:83:6F:74:CE:31
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4f:d1:f6:48:c1:cb:1d:5a:be:a2:f8:6b:9e:f1:36:16:a0:
16:57:75:af:48:3b:1d:b2:df:94:72:e8:c9:83:74:64:03:63:
a3:70:65:5c:2a:28:65:88:d7:6b:ca:d6:b8:44:cb:9d:15:aa:
de:34:b9:d9:3e:1f:ae:ac:69:1c:6e:fb:8f:8d:5b:5f:58:af:
b3:63:05:2d:e7:50:e3:30:ac:f6:95:ca:22:d5:a4:99:e6:60:
2f:2f:9d:cc:85:97:77:56:af:18:d7:ce:e7:a6:a5:ff:3c:6e:
b1:39:5f:7b:1c:fb:1d:a5:36:83:42:d5:19:be:af:ff:7b:6f:
3c:dd:f4:85:74:58:c3:65:f1:04:44:d9:d2:20:7a:07:1f:71:
b8:d7:f3:e1:52:99:2e:dc:cd:89:82:68:13:f0:55:d8:73:61:
cc:96:6f:71:13:30:f2:07:39:a8:44:f8:1d:63:2b:a8:7f:b2:
5e:d1:ea:a0:c2:09:bb:c8:b8:47:5c:85:7c:f3:c4:55:5f:82:
19:e3:bf:f3:67:49:68:4d:b0:00:25:2a:55:40:11:06:31:5c:
6f:d9:40:69:2f:a7:3f:b6:06:09:4d:58:03:f8:ac:6f:ac:77:
4a:fb:12:e2:83:ab:71:8e:2d:c9:0c:2f:2f:a8:6c:d1:27:33:
5b:ad:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:42 2026 by rpki-client