Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: uyKaBxi+QobXGB0gMOokq633yvHTHQu32qMEXNnM0eg=
Subject key identifier: A7:B2:32:4D:C5:D3:FE:43:68:CE:C8:0F:B3:1F:6E:99:16:A8:D6:A1
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019CAB6BE286D4E99CAB38425B92AFDE2EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0D8E
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: AnZ44lSKbZFBdVgqr41I9xxa9ne4AzITv0+AyGfQrtU=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e2:86:d4:e9:9c:ab:38:42:5b:92:af:de:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=a7b2324dc5d3fe4368cec80fb31f6e9916a8d6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:bd:24:80:d4:7c:f8:8f:c2:21:fe:6c:37:
ab:0f:75:ea:dc:56:60:39:70:c5:98:9f:78:9e:83:
df:38:08:4b:de:c8:c3:75:20:b8:5d:5a:5a:92:c5:
de:d7:2d:86:42:78:79:2d:21:49:74:2e:75:e6:18:
7c:f7:36:f2:4c:bd:e1:cf:39:89:eb:0c:8a:88:6a:
a0:d8:a1:d4:73:63:1d:2d:a1:1d:15:4e:ca:53:38:
de:e8:58:43:a0:25:98:9d:77:01:f9:3f:fc:4d:f4:
ca:c1:ce:4e:ab:fb:a0:e2:58:5a:48:8e:cb:19:f8:
02:b3:d5:40:54:94:65:e8:aa:50:f6:48:c1:1c:3b:
26:27:2d:bc:99:9c:57:07:14:44:1a:f3:e3:53:80:
27:7a:80:28:59:66:2b:d9:2d:35:65:27:11:b9:50:
9b:88:72:a0:b9:2d:a6:fe:87:e1:11:23:f8:04:84:
b2:c9:3d:f5:2c:83:bf:b3:22:7c:d4:48:cd:aa:19:
24:d4:e5:89:55:4e:e7:40:22:e1:df:6f:19:4b:76:
f6:29:46:59:f6:80:23:bc:52:9d:d8:e4:17:91:ed:
9e:b2:ee:40:b7:76:67:c9:62:4a:76:04:e5:7c:e3:
a1:36:a2:5a:c8:a6:be:0f:77:d0:e6:85:95:5f:ea:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B2:32:4D:C5:D3:FE:43:68:CE:C8:0F:B3:1F:6E:99:16:A8:D6:A1
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c2:6f:ab:b8:bc:7c:5e:71:40:cb:e2:5e:56:f6:a4:06:53:
87:f5:91:1c:7a:d7:ef:44:72:c1:b0:78:d0:2f:e9:e9:54:57:
39:dd:c8:71:e0:40:e7:a7:0f:32:7f:d6:b2:59:ec:f0:35:b7:
ed:7e:45:45:da:18:24:5c:5a:45:b7:e0:07:0a:8c:f0:76:04:
61:71:5d:d2:e9:94:ac:d1:2d:e2:f2:ab:18:58:f6:f6:37:bc:
5a:83:e0:b1:8d:55:8b:e1:9f:2e:7c:b0:63:99:2e:a9:b3:19:
b9:e4:3b:d4:fc:ac:c8:f4:7b:eb:a7:fe:62:2d:38:5e:a0:e7:
36:83:b6:46:2f:c7:f2:72:83:41:8a:2d:80:e1:6d:97:88:e8:
9b:9b:5b:35:45:ff:5c:d8:bb:c4:7f:80:ec:7f:be:df:3d:25:
36:94:05:32:d1:ae:45:a8:e2:2d:48:ee:8c:2b:1d:98:d7:37:
49:b9:08:7a:3c:24:8b:39:35:89:b4:6b:0c:0c:3f:43:d7:8e:
90:01:36:a0:ef:67:93:46:d1:f1:47:40:48:67:91:d3:69:52:
ed:92:4b:47:40:0f:68:01:3d:9c:b4:35:7f:b3:d6:45:ca:64:
aa:b6:36:ba:78:5f:c9:02:41:e6:7e:80:3c:c3:ee:2e:3e:16:
2e:7c:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:34 2026 by rpki-client