Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: TNDNKrC1irc0NzGdvqCgwTDY0rYiX1gPPiq7acVrDUo=
Subject key identifier: 82:72:1D:83:9B:C7:7C:87:2F:6E:16:AD:F5:A9:5B:9A:3A:3F:AA:D5
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019CAA21C07EA941DBFDAB49882BD7ECF322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: n5gLSvVcb5c+XGjViLE9fbKlylR1ONeWbHPn4Nd4nlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c0:7e:a9:41:db:fd:ab:49:88:2b:d7:ec:f3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=82721d839bc77c872f6e16adf5a95b9a3a3faad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:1d:f3:66:f7:00:16:8e:db:19:8d:a4:a5:
33:54:dd:af:fb:11:4a:43:92:e9:4a:b4:e0:b0:3a:
f1:f9:4b:49:4e:02:51:80:15:d7:65:aa:f9:96:d2:
40:cc:2b:a6:f2:fe:f9:31:6f:25:78:aa:b8:53:99:
28:d7:c4:aa:c5:ff:a6:fd:78:19:54:1a:be:a3:51:
8a:b1:f3:f0:28:d1:d9:9b:0d:74:e8:2a:71:05:e1:
59:e8:88:9c:e2:79:3d:ab:ba:88:62:b6:ba:04:06:
85:d6:1d:60:7f:7e:09:cd:99:c3:3e:56:8c:21:99:
40:bd:fc:c6:f0:a1:61:c7:3f:95:99:46:fa:43:d0:
83:88:ba:0b:4c:f2:e4:56:53:b1:1b:f8:8b:83:55:
0d:30:07:a0:05:c9:f1:f4:94:f3:26:09:0e:d3:2c:
97:1c:7f:c6:70:15:dd:ae:0f:91:89:fb:06:a5:dd:
37:46:94:14:d8:da:69:0a:52:a8:9d:18:ee:41:ae:
d4:c4:fe:9c:23:57:f7:f0:67:44:7c:b7:94:5f:b1:
d2:fe:38:dc:e4:ac:e4:47:00:cd:5b:ca:82:52:5a:
0b:87:1b:f6:11:5c:ae:e0:fe:1e:cc:85:88:bb:77:
2d:86:c4:49:56:f0:f9:01:dc:87:e8:c3:ca:8e:0e:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:1D:83:9B:C7:7C:87:2F:6E:16:AD:F5:A9:5B:9A:3A:3F:AA:D5
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:34:a9:49:88:ad:e4:07:70:75:84:3e:45:a6:90:3b:e2:
5d:d7:44:8b:da:cd:b2:96:bf:78:1f:a2:fc:c7:e2:28:9e:28:
30:9c:d3:a2:b0:58:49:53:9f:18:67:6f:94:10:af:0b:13:73:
c5:ae:a5:c2:f4:e4:d1:fc:63:27:68:d0:a6:4f:8b:1c:3d:94:
62:43:b5:21:56:25:40:c6:0c:4c:64:ca:b3:44:4b:8f:76:3c:
8a:6d:2c:5d:98:2a:ef:c8:25:17:53:38:63:d8:74:13:cf:5d:
78:04:2c:51:86:d3:72:4c:c0:6e:db:33:2b:89:63:f2:35:f3:
3e:48:3b:e7:de:62:3a:41:0b:48:9d:26:90:87:bb:ba:42:b6:
43:e8:bf:46:26:1f:83:6f:50:e1:6c:43:07:36:e8:15:30:46:
2f:5d:5f:04:4a:a5:b1:46:bf:fb:b1:53:da:58:c6:0b:7e:be:
8a:5b:b1:68:29:6a:37:dd:6c:5b:ed:6a:08:c3:e2:61:a0:64:
a9:1b:15:18:0f:5e:74:fc:5c:0d:4b:ca:6e:5d:36:02:d8:02:
72:c9:31:3c:12:b0:36:4b:17:30:e2:0f:f1:82:21:b1:73:34:
75:dd:f5:c2:cf:7c:bf:61:85:72:47:3a:47:16:72:1c:06:89:
34:07:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:13 2026 by rpki-client