Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: MdrpRxODpFhDouYgfEIZpZT/5Lg1Z6lhafIXqgHutL4=
Subject key identifier: 79:AB:97:B8:F3:91:E1:42:E3:EA:4E:C6:41:B3:07:E9:54:33:E6:94
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019CABD8F6878E6A7EA519F57195F9BF1FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: Jq4cqebEKCnoW5VSE5f6uXlUOy8s4h36DfdzW2JvRL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f6:87:8e:6a:7e:a5:19:f5:71:95:f9:bf:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=79ab97b8f391e142e3ea4ec641b307e95433e694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:56:1d:7c:52:83:cb:fe:d8:4a:0f:30:95:
71:e7:38:55:86:3c:13:b5:65:74:1b:32:58:27:f8:
87:a5:e2:6d:cc:7b:d4:99:f1:4f:c4:e3:35:92:21:
4b:02:19:2f:90:33:7a:b0:b2:22:ba:7f:71:a3:a3:
e2:98:18:d0:90:19:1b:3a:35:40:d2:9f:b6:29:b8:
ef:be:c6:04:cd:29:bd:ea:4a:bc:09:71:6b:1c:d8:
42:9f:0f:df:22:f2:90:ce:be:d3:52:c7:8d:7d:51:
c0:21:3b:a6:01:ce:07:ae:6a:d2:93:77:17:f6:27:
7f:ed:04:97:41:71:10:6c:74:3f:50:f2:f5:6d:62:
9d:aa:92:f4:a8:0b:18:61:d4:8a:16:c2:8b:ef:fd:
26:fe:d7:61:12:4f:0f:a9:d2:11:b1:dc:9b:76:23:
c8:a9:1d:c2:19:9b:fb:69:b3:c8:3c:9c:a7:62:ed:
da:f1:8a:55:48:2e:c9:66:b2:2b:67:47:59:07:89:
3d:72:15:06:1f:8a:e2:d9:d6:b4:4f:bf:da:13:0e:
ba:d9:ac:84:bc:01:76:1d:4f:38:5d:9a:fd:06:9b:
e1:98:84:f8:a3:30:37:33:37:e1:5a:e8:b2:95:29:
8b:d1:86:20:e0:63:bf:7e:25:23:65:f7:21:c8:26:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:97:B8:F3:91:E1:42:E3:EA:4E:C6:41:B3:07:E9:54:33:E6:94
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b5:05:21:4e:97:f5:92:0c:77:9d:5c:bc:c5:22:e5:2f:5d:
d2:df:66:32:b3:a6:c2:af:ec:e2:3c:1c:e8:79:58:3e:7a:a1:
98:7e:4a:87:f6:44:e2:41:d7:5a:d4:55:e6:7d:5c:df:1e:9f:
34:24:30:b9:8f:cf:e6:a1:86:db:16:c9:4b:46:29:8b:14:7f:
48:fe:90:d1:c9:31:bb:82:ac:69:22:54:59:54:4a:ea:6c:54:
b8:b5:70:01:33:aa:46:9e:74:f3:c2:09:4d:22:25:44:e1:b7:
ee:11:d1:de:50:39:b7:eb:73:59:27:8a:fa:2d:b4:83:b3:90:
78:65:ae:96:02:0d:7b:ba:90:6f:7c:86:1c:c1:e1:d2:51:7c:
12:d0:67:f1:2c:e3:b2:7d:2f:5b:65:4c:43:6a:db:86:19:57:
97:f4:b2:95:f5:7e:4f:3c:71:c1:2c:c3:30:e8:17:1a:fd:85:
ed:90:65:74:e2:23:3c:69:74:43:a5:77:3f:39:e9:7c:3f:72:
a3:4f:c6:14:18:df:71:ca:02:11:46:04:db:20:76:ea:39:cf:
5c:dc:87:e1:4a:48:8f:3c:63:0a:54:08:27:1a:9e:ff:27:38:
de:5b:4d:71:0d:00:5a:c5:38:bd:ef:19:e2:fa:d2:32:26:67:
e1:e3:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:43 2026 by rpki-client