Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: yOwsb7LtwXXY+ucRCkVMkVcd8ok3fCkFsjMt3JwHGQY=
Subject key identifier: 8E:7B:93:FA:BD:2A:9F:F1:94:BF:0C:15:5A:D6:FA:B0:26:C4:5A:BC
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 019CAC46EF228F01C14ACF5EE32179429010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 123E
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: YQHnfm/Q+xcNMbdO2SIFEaQAz/LMzt1bURkHUFL/KEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ef:22:8f:01:c1:4a:cf:5e:e3:21:79:42:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=8e7b93fabd2a9ff194bf0c155ad6fab026c45abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:1e:81:5d:c2:9b:98:55:ba:ec:ec:76:5a:
68:ea:8d:d3:68:1e:48:fb:05:91:b8:4a:cb:7e:da:
a8:60:9c:f7:c0:94:27:46:56:08:63:2f:60:00:a5:
db:d1:94:17:ac:cd:68:ae:64:75:44:33:da:2e:85:
0f:83:5d:16:26:dc:87:9d:be:a1:c8:17:ea:e1:d7:
4c:0f:2f:3a:02:ce:fd:de:4e:59:78:2a:45:e8:c0:
45:34:09:32:a7:5f:88:69:fd:ec:b3:67:21:b4:a4:
8d:ba:46:6a:61:30:9b:79:03:e5:10:3b:29:e0:39:
29:09:0c:18:98:25:d6:50:a1:7b:fb:2d:68:fa:08:
7d:14:ed:4c:52:2d:21:b5:45:ca:68:db:01:d9:0e:
24:b6:ad:a0:25:78:05:2c:31:17:a8:ea:f7:cb:5e:
07:42:d6:3e:5f:52:61:2a:93:4b:cf:3f:10:26:97:
99:11:74:d6:ca:e6:31:c5:15:8b:e1:ea:55:b1:32:
da:f1:52:3f:ff:f1:3b:86:87:0a:2b:31:a5:73:d7:
73:16:17:a5:d5:00:b2:24:d4:48:82:2a:2e:da:ca:
5c:2b:f5:a1:3d:ce:ee:86:80:06:63:63:2d:6c:a8:
86:e6:7b:cd:c3:b1:8c:04:71:49:a1:1a:ad:1e:e2:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:93:FA:BD:2A:9F:F1:94:BF:0C:15:5A:D6:FA:B0:26:C4:5A:BC
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:48:53:a5:bb:61:f8:9e:fe:e9:a9:da:08:de:05:ef:a9:19:
f3:be:57:11:3a:b6:07:12:1a:10:85:a5:6e:c9:a9:30:da:16:
d2:51:b7:49:af:cb:c3:74:5a:6e:21:93:d7:74:d6:34:11:68:
9e:9c:9e:b9:95:90:5a:b8:bf:0d:95:3e:5d:7a:6b:69:06:69:
76:65:c6:8b:be:7d:55:00:28:26:e7:d0:1a:76:03:53:94:1d:
3a:4e:32:2b:02:14:dc:05:0a:9f:c4:d8:9c:bb:1f:d8:c0:ef:
f6:5b:46:be:25:d1:96:0f:83:cf:50:57:03:dd:21:1f:4d:f7:
b4:45:65:eb:e1:89:44:5e:7b:de:cc:dc:7f:71:22:3e:44:d3:
76:33:a0:f0:a8:61:66:38:98:ec:34:62:34:6f:14:64:be:1f:
af:7d:21:32:b6:8f:6c:ab:21:b4:80:b8:b4:89:4a:d4:5e:3e:
31:19:3f:d6:ac:16:79:aa:eb:6c:81:9d:6e:7e:9c:3c:c6:20:
67:1a:6a:53:7c:fa:1c:86:81:33:5c:a1:72:f6:5e:78:a7:6f:
54:b4:31:23:c9:89:88:ef:54:00:c6:47:8f:f1:e2:54:ef:5e:
72:58:4a:8d:dc:61:8e:95:7c:0f:f6:18:a6:01:8c:da:3c:66:
70:18:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:45 2026 by rpki-client