Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: r7Lp8OHUokNKBB+UpoIPKHdxWxNZeWO43+y7kOM98oA=
Subject key identifier: 8C:00:27:3E:9F:E8:76:40:02:18:EA:99:AE:20:46:E8:51:D7:CF:20
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019CABD8EACA957A627B0017AFA661DD752F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1028
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: X3AudTX9cmGoFZlp0iJtxAeOxUOmPipGdhGeKAE0YR8=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ea:ca:95:7a:62:7b:00:17:af:a6:61:dd:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=8c00273e9fe876400218ea99ae2046e851d7cf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:34:a9:37:f7:e4:70:de:c8:93:56:49:f0:
94:91:c3:f3:03:7e:73:18:a7:bd:6c:6d:b7:d4:80:
eb:4b:c7:4f:21:31:d2:67:2f:3f:f5:bc:34:e8:e2:
7c:b0:f1:8c:f1:b1:c4:6b:65:4b:8d:7d:bb:8a:9f:
f4:f4:4f:6c:29:94:17:e1:5a:65:64:f1:cb:31:41:
2b:36:2d:25:5f:9d:97:42:a3:28:d5:dc:76:f9:6b:
7c:3b:ab:f9:6a:a9:bd:6b:9b:4e:6e:2d:91:ab:67:
41:b9:b4:56:12:8a:60:17:af:b4:35:80:09:9c:81:
5e:b3:47:3e:33:1a:f8:4f:0e:76:d8:0a:27:04:4a:
2a:f6:a7:ea:7b:5d:5b:87:39:6a:61:38:d3:f0:8c:
2e:cb:ab:ce:5a:0e:f7:c3:0a:87:de:07:47:69:38:
c4:98:b6:1b:ef:5b:36:5e:d7:02:54:96:f0:b4:b8:
f8:be:8f:10:de:8e:53:48:3f:db:5e:da:28:03:fc:
b5:b8:1e:09:35:0f:82:52:09:2e:5d:c5:f9:62:8f:
2d:26:94:5c:36:9c:02:64:03:b5:64:8e:38:fc:9c:
93:be:6c:5b:bf:fb:2b:7d:85:b4:2f:7e:a2:08:4c:
bb:92:8d:2f:b6:79:ba:d6:c0:bd:8e:a3:f8:03:81:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:27:3E:9F:E8:76:40:02:18:EA:99:AE:20:46:E8:51:D7:CF:20
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5e:99:a2:0b:1c:0d:a2:bd:01:67:18:67:a0:ca:22:02:34:
e4:43:3b:3d:a7:5d:da:0b:8a:40:1a:4f:77:28:1f:51:d3:31:
aa:64:d9:9a:0e:03:7e:68:84:2b:40:36:7d:ac:6f:56:00:be:
4f:40:be:c1:6c:25:c7:b4:00:66:05:87:d1:90:6f:8e:ba:d4:
f0:5f:f8:d9:57:dc:b7:54:a2:25:d7:9a:1a:aa:4a:2d:e1:be:
2c:5c:2e:21:05:a1:e7:80:a3:d5:8c:dd:c7:3f:5f:c8:8f:18:
9c:a1:8c:fd:c3:fc:42:11:dc:65:a3:c2:02:1a:77:d0:72:fa:
08:f7:e2:02:44:e6:18:c8:4e:5d:78:91:25:e1:67:50:22:ab:
aa:ba:3f:1f:ee:d0:94:4c:1e:a0:55:09:89:31:65:1f:7b:f2:
4d:6c:09:6c:54:89:0b:f4:3c:bd:3a:f9:e2:d7:ea:be:7c:01:
37:96:25:7f:06:7a:d0:58:95:8c:10:91:cf:70:43:46:23:9d:
49:ab:2e:96:24:78:cc:b4:9a:0f:df:f6:d2:e0:8a:45:07:e4:
c9:2c:2c:ec:74:a7:ec:bb:02:9f:45:96:ef:3e:0a:9c:17:a6:
2d:06:34:7c:fc:4f:f5:9f:c8:ae:60:4e:2d:9a:f7:cf:89:68:
b8:ce:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:11 2026 by rpki-client