Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: osdw2UjoSPKfin9CqYiEeT2AM/l5WVBL0t7dWy1PEF0=
Subject key identifier: E8:59:3A:F9:0B:D4:CD:30:4B:F7:94:7D:7C:85:C9:0C:D2:81:3D:C0
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019CAAC5F9D9D8E2F7CA8358A5EEAEB0B765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0961
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: WiTiDYX2dyQdwEaXfwvbDMXZGpD3/d1Z+8kjupVWKPQ=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:f9:d9:d8:e2:f7:ca:83:58:a5:ee:ae:b0:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=e8593af90bd4cd304bf7947d7c85c90cd2813dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:13:c2:ba:69:db:e5:55:8a:0b:47:3d:64:
2e:f6:66:3a:f5:c2:f8:5d:62:a3:c8:a9:0c:a7:f7:
a6:4a:56:e8:01:e2:eb:5f:8e:15:07:97:39:7e:3f:
43:00:61:f5:fe:d1:7e:68:5b:ea:57:4d:42:dd:65:
cf:0d:8f:3d:39:79:bc:5b:c6:9a:46:b0:40:72:14:
6f:2e:46:d7:d8:2a:2b:85:9a:68:56:94:af:39:3a:
be:79:2f:e3:47:f8:44:74:9b:7a:6a:64:e4:ba:2d:
a2:5b:51:b7:7c:90:94:05:25:bc:77:d2:fd:06:a7:
09:61:58:f1:ce:20:f4:3a:04:05:dc:9d:21:ee:79:
1a:3f:6a:df:ff:e9:d2:4f:35:87:15:65:43:27:1f:
eb:db:01:9e:d0:da:33:17:2a:6d:d8:0d:94:37:ee:
2e:05:fa:4f:cd:3d:ae:90:90:01:64:95:bf:e9:39:
b3:56:fd:53:15:47:bf:b1:37:a5:69:bf:56:68:90:
fc:f7:e8:e7:ef:0e:77:0f:aa:5c:9e:b6:09:3a:d2:
55:f2:86:56:d3:ad:27:c9:0c:03:36:db:08:ae:c2:
78:a7:99:6f:ef:32:5c:2f:b1:dc:c4:01:7d:8f:bf:
ec:31:35:e4:ea:6a:91:c5:59:3e:d0:a5:8f:c0:09:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:3A:F9:0B:D4:CD:30:4B:F7:94:7D:7C:85:C9:0C:D2:81:3D:C0
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:60:6b:3f:4c:e9:ea:f9:e5:a0:0a:e5:73:7b:14:31:1b:
2b:4a:fe:4a:02:b3:a0:26:f1:f5:a4:f5:4c:f7:e2:f4:d5:06:
c2:0c:be:b0:56:fa:f7:94:96:c3:36:10:68:7f:c8:00:31:22:
c0:ad:96:93:fc:b5:6f:30:bb:c2:3a:b2:bd:45:83:20:c0:6a:
8a:df:fc:96:ee:f2:39:ab:67:a9:c5:33:cd:ce:45:1c:33:53:
a6:8f:59:81:85:7e:61:9c:fe:ff:a4:50:7f:03:f8:b4:ae:22:
c8:bb:40:08:a6:2e:b3:80:be:f2:8b:a8:10:a9:65:96:72:1c:
bc:a0:80:27:fe:aa:23:72:0d:8e:71:a2:99:0a:cd:49:57:59:
9e:7f:ee:4e:ff:f8:08:44:24:cb:e6:94:54:cc:5f:9f:7a:08:
76:d7:1b:92:4a:06:07:64:c9:cf:b8:1b:11:1c:60:bd:33:2e:
1b:71:4a:6c:5c:c8:74:60:2b:eb:28:95:55:b9:7f:ad:47:82:
68:b5:a8:80:2c:c9:82:1b:58:8d:26:ca:1a:68:96:fa:a3:71:
cb:01:b9:76:4b:6e:6e:c9:07:a0:d4:0c:c1:2a:61:ff:99:af:
f7:b4:ea:21:6c:06:7d:17:f6:55:97:26:90:34:4d:f7:a2:f8:
f8:85:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:14 2026 by rpki-client