Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: OpVLuzfeV+9eCYXeHy+siZRu//LZ2hA5vxIvZ2rEd5c=
Subject key identifier: 50:7D:D2:C8:33:8C:DB:F1:BA:4A:99:79:C1:F8:F6:40:33:05:AB:FE
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019CE4486038C96723CEBF86F0227C08EA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 05F5
Signing time: Thu 12 Mar 2026 23:01:14 +0000
Manifest this update: Thu 12 Mar 2026 23:01:14 +0000
Manifest next update: Fri 13 Mar 2026 23:01:14 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: pSPPphBx8C9s7OX93ub0OmZvvA7Dxz3dh/GrylRpDrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:60:38:c9:67:23:ce:bf:86:f0:22:7c:08:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Mar 12 23:01:14 2026 GMT
Not After : Mar 13 23:01:14 2026 GMT
Subject: CN=507dd2c8338cdbf1ba4a9979c1f8f6403305abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:96:16:bc:4a:03:84:b4:3a:28:bc:bf:32:
35:28:ba:bc:cc:4e:15:dd:de:85:ad:a8:bb:c7:0a:
af:48:4c:0b:12:0c:75:a1:34:ce:17:15:e6:cf:db:
a0:04:b5:2c:9e:fb:fb:99:17:70:6b:1b:68:c1:0f:
63:d6:cc:71:28:a5:b9:58:a6:2b:0f:d1:b7:fd:96:
8e:77:cb:d3:33:46:80:05:83:a0:8b:17:23:e5:2a:
ae:d0:8c:00:8f:c2:d2:c6:98:0e:69:28:b4:49:45:
87:30:0d:7f:70:90:28:94:1d:3a:4c:ad:45:12:b9:
53:6e:9a:64:83:57:b0:e2:79:be:6e:85:a2:0d:be:
7f:3c:6e:d9:2c:b6:c3:d3:48:4a:34:87:46:3a:51:
4c:8a:3f:39:f1:18:8e:a8:40:4f:02:42:7f:d0:7f:
70:d4:41:7d:22:54:4f:aa:ff:b6:6b:d4:b4:a9:53:
52:54:dd:a1:23:dc:41:ad:21:d2:fe:98:3b:04:81:
b1:4a:ea:00:c8:2c:c4:a0:e7:45:00:62:79:cf:d2:
a7:0e:1b:6f:ea:06:fc:a8:43:37:13:4d:60:15:93:
e4:0d:7b:e5:a4:30:65:4d:d6:c0:10:95:c9:04:37:
77:90:ad:97:1f:bb:79:62:a3:ec:b1:c2:f3:3c:4e:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:D2:C8:33:8C:DB:F1:BA:4A:99:79:C1:F8:F6:40:33:05:AB:FE
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d7:31:0d:99:3c:a3:6e:f6:68:ea:de:ca:2d:b0:ad:6a:03:
c9:7d:ed:95:15:2c:be:63:21:17:2e:1d:9c:29:ec:7a:c6:71:
e7:5b:de:10:13:25:72:b9:cf:62:96:17:24:35:79:a5:29:5c:
71:4c:f6:9b:af:45:57:ba:11:c7:c5:9c:0e:ad:fe:c8:69:e0:
01:32:63:58:b4:76:cc:e2:aa:ca:b0:28:b0:f5:c2:64:36:48:
79:de:50:5f:b7:7d:54:8d:9e:01:f3:8a:d9:49:6e:74:df:cc:
76:ea:74:70:f8:50:5f:ed:e0:51:9e:9e:9c:6f:b8:fb:fd:65:
9f:ea:89:52:67:82:64:77:d9:2e:b2:ea:f0:cd:8a:60:30:4f:
34:7d:73:04:9a:9f:0d:53:83:ed:d1:74:25:eb:e1:4c:55:d5:
22:89:3c:bf:e2:a6:ff:3a:fa:ae:09:76:f3:8f:c9:98:54:d2:
e2:a2:5c:dd:e7:42:89:37:54:cb:98:1c:12:95:1b:36:5f:e4:
8f:9c:39:99:37:fb:55:06:03:db:e4:f3:f2:bf:86:75:94:57:
59:d5:35:19:79:dd:35:69:d2:f3:81:c9:83:eb:eb:6c:40:a9:
5c:89:9a:e3:34:34:c0:bd:1d:19:00:89:56:07:fe:e5:8a:db:
14:28:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:38:40 2026 by rpki-client