Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: +F0+vvgH+XAlZ5vsPf16p1mjeXeryg8+rJVeHa65BVQ=
Subject key identifier: 15:17:74:43:43:36:38:00:6D:25:E6:D4:D3:74:61:00:29:CF:FC:99
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019CABD96B5BD4EE4327184D83415D2F476F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0BFE
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: JihcnDEuFbJO7mmbVjGxzeEFe0FQCZtLIAH3GVXKyNc=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6b:5b:d4:ee:43:27:18:4d:83:41:5d:2f:47:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=15177443433638006d25e6d4d374610029cffc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:d8:07:b8:bc:73:c3:91:22:8f:45:57:03:
4c:cb:b9:66:48:55:a6:c7:52:98:e7:db:28:70:39:
ce:1d:e1:02:27:ba:bd:7e:b0:f2:f3:9c:80:fa:f8:
75:39:ed:52:9c:ea:8c:6a:c0:ed:f9:8b:8a:6d:e2:
32:69:df:61:a8:35:a6:ad:19:5e:b2:94:2a:eb:dc:
89:e8:3f:13:38:71:01:98:72:22:52:a3:52:e3:ab:
2f:1d:e2:72:f5:30:40:0c:d9:5c:09:0d:f2:1a:91:
88:0c:22:36:88:21:fc:54:a0:dd:db:16:8f:20:fa:
7b:3d:a6:52:5c:15:6e:65:34:24:3f:69:11:d2:b5:
13:fa:5a:50:a5:80:16:7e:f0:5e:5b:66:93:17:29:
54:e1:0f:e3:51:61:14:f5:7a:fa:0b:d1:16:1a:96:
77:2c:f9:66:1c:5d:32:bc:bd:d9:54:f1:0c:84:2e:
26:dc:6e:77:f6:a9:a0:c3:f3:48:c4:52:31:6d:18:
f2:0d:b6:e9:3d:35:c5:f6:70:9e:af:4b:40:b1:96:
67:f2:36:43:8d:f2:0b:70:9b:ae:2b:f2:27:2a:02:
9a:3e:1f:bb:12:db:6d:64:ad:56:93:0e:64:29:cd:
9d:4c:65:a8:78:04:71:1d:f3:12:10:27:6d:99:22:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:74:43:43:36:38:00:6D:25:E6:D4:D3:74:61:00:29:CF:FC:99
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:64:42:bf:be:92:a1:b4:cc:06:3c:8d:6f:57:21:3d:1b:
6a:19:90:d6:6f:f1:af:71:44:7a:b8:4f:ae:cf:87:19:e4:a5:
70:d7:14:82:a8:77:80:cc:ba:00:96:c6:4f:d7:7d:8c:41:b6:
69:27:6d:2e:40:fb:22:ec:fa:8c:a0:f1:ae:a0:80:28:c9:e3:
23:c0:93:4e:00:80:16:c1:a3:37:74:9c:20:30:14:88:80:12:
47:2d:57:0a:57:9b:00:cd:eb:c7:de:77:f8:e2:8c:52:8f:d6:
ae:ae:de:74:e1:c0:f9:da:5e:98:12:a5:40:c6:74:7f:11:8d:
3d:6e:f9:2b:aa:e4:cc:7f:f0:b3:43:d2:59:df:cd:60:15:b3:
1e:63:27:3e:9e:41:f6:86:b1:1b:e8:45:e3:ba:50:51:f1:3e:
bf:78:43:18:3f:53:c4:93:67:23:26:e6:0c:db:4c:f3:90:c4:
47:3e:b9:70:e7:d9:80:c4:3c:1b:d6:e4:f4:1e:df:66:2f:e8:
3a:5f:81:35:5e:93:fd:a3:a9:bc:3c:02:17:0b:b6:90:51:20:
0b:3a:d2:e4:eb:30:c1:de:f6:5a:ff:3a:a6:56:d9:8a:76:4f:
45:32:44:6f:2c:43:94:8c:63:57:b0:ea:13:b6:ec:99:41:84:
8a:79:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:24 2026 by rpki-client