Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: cfFVX8muN9J40NpMzvXXy8pDM5g4RU5C/KkQe9nnFaU=
Subject key identifier: 2E:87:56:55:9A:2C:13:93:00:D0:F3:14:DE:42:B2:2F:0B:82:3C:96
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019D3A1CF35AEBAC2DA18D14B14BEBC7605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 15:01:08 +0000
Manifest this update: Sun 29 Mar 2026 15:01:08 +0000
Manifest next update: Mon 30 Mar 2026 15:01:08 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: qj2Gau2NpEfIh9UfdnJejW2t+2b7PGWA+Wrwfld4DRo=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f3:5a:eb:ac:2d:a1:8d:14:b1:4b:eb:c7:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Mar 29 15:01:08 2026 GMT
Not After : Mar 30 15:01:08 2026 GMT
Subject: CN=2e8756559a2c139300d0f314de42b22f0b823c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:52:d9:30:b2:4d:75:0f:c5:12:51:3e:9c:
28:e0:96:03:7b:bf:a4:41:f9:0b:af:43:a1:11:04:
ab:09:2e:fd:51:f3:b7:31:37:06:33:e4:62:b4:4c:
3a:9d:1c:2f:23:0d:b5:c1:79:29:63:24:f4:d3:51:
be:e4:08:bd:95:b9:d0:ad:b7:eb:40:13:50:e7:ee:
19:22:24:0f:bf:a7:75:34:65:ae:aa:8d:17:cf:0f:
2e:6a:18:38:db:5c:80:21:ea:88:fb:8e:2c:81:3d:
bd:6b:72:92:37:57:3b:b0:f2:2e:84:54:f5:9b:1f:
c4:fd:7f:ea:6f:4b:03:ba:cf:6f:05:0a:ad:cc:95:
20:f0:f8:be:2b:6a:a4:ef:bb:b7:51:36:51:5a:df:
3a:76:0a:0e:a1:5c:f4:cb:6c:a3:35:9c:72:35:52:
4e:9a:7b:b9:90:dd:1d:74:20:51:b0:7e:01:de:fb:
e7:46:c0:be:87:00:b9:8b:0f:67:b9:82:a9:22:f7:
55:11:0b:00:c2:1f:38:6d:5a:32:42:c0:89:da:54:
dd:4e:be:b0:19:27:98:02:80:d7:3d:75:ff:55:8f:
66:0e:c3:61:49:74:cb:63:8c:a4:0e:d2:e3:e2:be:
44:a9:9a:72:5d:71:b2:21:ff:f4:dd:3e:c5:1d:75:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:56:55:9A:2C:13:93:00:D0:F3:14:DE:42:B2:2F:0B:82:3C:96
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6e:9b:97:3a:eb:51:e7:d9:fe:43:48:05:61:37:f1:4f:c8:
5e:e1:fb:13:62:0a:73:62:b0:59:26:e8:87:bd:cd:1b:13:6b:
f2:3a:55:e7:67:66:87:6d:d0:ec:15:15:bd:ce:5b:5e:7a:02:
a4:85:eb:51:9b:91:54:eb:fa:9a:a2:b1:c3:dd:9c:af:a1:e5:
7a:99:99:fb:ee:2d:34:e8:83:b5:f2:40:4b:84:33:9b:af:35:
95:23:57:db:d2:89:2f:e9:25:a3:e1:a9:fa:c1:a7:1e:78:56:
fd:60:68:4d:a8:bf:3d:26:9a:7e:e6:90:ee:a4:df:f3:03:eb:
49:71:2e:47:aa:dc:f4:3e:41:b9:f3:7e:2f:5c:52:a7:ba:6d:
7d:20:9a:f2:85:22:87:46:94:95:d8:d5:db:f5:54:6d:8c:d5:
ca:05:6d:52:4d:50:4d:02:89:70:c7:92:ab:cb:59:0c:4e:c1:
7c:00:81:15:72:8d:c7:31:94:4f:e6:97:b8:48:3b:a0:3e:03:
61:17:a5:b8:3d:3d:1e:95:89:3c:da:eb:2e:44:1f:b8:7a:6f:
95:f3:f8:44:6a:1e:76:b3:ce:c3:ba:3a:52:0c:e5:05:77:d6:
54:72:f6:88:8c:55:a8:ba:5e:87:31:24:62:75:5b:0b:bc:0b:
31:df:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:26 2026 by rpki-client