Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: Nx1xFpevCasxwMSiGMZ/sKo839Xm0ZubX0yUjnEj8lo=
Subject key identifier: 16:F6:35:03:D2:5A:7F:1A:EC:B6:A3:4F:FA:EC:87:C5:4A:9A:5D:35
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019CAAFD9536641629478892C38E57642C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: 1/8YUnr3rEv2t32vmcjpT6t5n11WwNVB9URhZ002NbI=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:95:36:64:16:29:47:88:92:c3:8e:57:64:2c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=16f63503d25a7f1aecb6a34ffaec87c54a9a5d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:94:38:eb:e9:7b:d4:c0:78:58:1e:e5:70:
50:08:0e:62:ca:a8:58:11:fe:33:ec:7a:55:9e:62:
ea:07:ae:80:d5:88:4a:73:15:7d:14:7a:cd:52:24:
8a:37:4d:fb:71:4c:5c:3e:75:29:11:78:7a:8a:f1:
e5:32:04:0c:bd:7f:c3:9c:d7:22:56:2c:a1:f5:c5:
38:ec:d6:4d:44:8a:73:ab:8f:b5:55:f1:1f:1a:8c:
c4:bd:10:9a:2f:3d:d1:24:bf:6d:b5:df:a7:f9:ea:
d6:e0:f6:cb:23:84:8e:7e:65:75:e9:cf:10:e7:24:
be:74:b2:3d:6c:f6:29:16:12:35:18:a9:a6:95:be:
02:2d:9d:ef:18:f3:ea:c2:4a:be:ee:58:6a:84:75:
63:8b:f2:73:da:24:4f:16:31:13:96:9a:fc:76:01:
b2:c4:04:28:7e:2b:93:18:72:de:c4:72:da:95:cb:
e5:25:2e:ff:a3:14:df:ce:c4:91:37:eb:a3:98:b5:
00:12:b1:12:64:31:0f:fb:f7:a4:17:0e:7a:04:ca:
63:8d:f6:13:84:f6:f1:11:9f:72:e5:77:2c:c8:43:
5f:8b:de:a5:49:31:74:09:e6:3d:9c:7a:c8:ff:f1:
b4:89:26:7d:6b:c3:9c:bd:9f:d4:3e:15:13:61:2f:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:35:03:D2:5A:7F:1A:EC:B6:A3:4F:FA:EC:87:C5:4A:9A:5D:35
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:19:b2:42:a0:7b:02:ce:76:e2:d2:b2:d2:80:21:1d:ca:
24:0b:bd:a6:b9:8c:b2:37:ec:47:c3:d1:c6:84:6d:3c:29:a1:
ee:91:ba:61:61:be:20:4a:77:37:09:cd:03:8e:14:22:18:68:
21:e8:a8:4b:e9:37:f6:ea:97:a2:c6:3c:53:5b:58:00:e3:61:
56:ea:55:7b:b1:8d:c0:61:5a:1d:e9:70:f6:32:16:43:0e:b8:
2f:d1:b0:8c:d1:ec:5a:a0:a3:d1:e2:a4:04:b0:3b:63:a3:8e:
d8:c0:7c:b9:f0:1b:78:c7:d6:67:ae:70:47:57:8a:d5:2a:9b:
ab:ee:bd:d7:1d:7b:e3:b0:0f:d6:66:c3:96:0d:11:cd:88:bb:
06:e7:65:58:2e:9f:55:63:b2:75:50:e3:39:f1:88:bd:94:3c:
a0:27:02:c3:3d:fd:bb:70:42:21:cd:ce:06:d4:b7:90:13:0c:
b4:f6:07:90:cb:f6:a1:9a:bf:62:46:3d:09:ed:64:ed:28:8e:
47:65:8c:72:79:a6:5c:8b:88:a0:47:65:23:0e:20:7f:75:e1:
51:ae:f9:0d:f2:73:92:86:13:d7:2e:eb:af:c2:b3:79:3a:32:
aa:d8:c4:d0:9e:9d:c8:8d:64:00:b1:7b:83:a0:67:d6:fe:20:
99:8c:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:20 2026 by rpki-client