Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: vOPOIWMGBSDl7igVsh6ANvSDdJFRzTFl0cZq8UtvCu0=
Subject key identifier: B2:33:55:BB:04:E5:67:60:94:27:97:79:C9:A7:6A:7A:5D:1F:5D:D1
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019CC7502A3A27F473AE5B62449D1E7833AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 11FB
Signing time: Sat 07 Mar 2026 08:00:45 +0000
Manifest this update: Sat 07 Mar 2026 08:00:45 +0000
Manifest next update: Sun 08 Mar 2026 08:00:45 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: EGoFBnXh/Y4S605vmu+HgVUsaKYLFJwwj5Gb5+dAjQ4=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:50:2a:3a:27:f4:73:ae:5b:62:44:9d:1e:78:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Mar 7 08:00:45 2026 GMT
Not After : Mar 8 08:00:45 2026 GMT
Subject: CN=b23355bb04e5676094279779c9a76a7a5d1f5dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:43:1d:95:db:07:cc:c0:55:38:f7:25:a6:
23:ca:40:99:28:2b:11:05:04:6e:c1:e1:2c:e4:b7:
05:8f:08:df:fb:ee:49:3d:90:57:26:7c:43:20:9b:
76:f5:49:d0:82:59:01:a3:40:ef:36:cf:cb:cc:6c:
75:3f:4f:56:8b:8c:a7:4c:18:d6:4b:65:8e:ea:53:
0c:ea:bc:ce:84:1c:fa:e6:d4:f1:87:06:97:a8:46:
1f:8c:2e:31:92:b3:92:be:40:a6:3b:e9:13:30:8c:
80:16:34:65:4d:63:86:57:73:03:95:9b:88:ff:19:
18:94:87:65:80:05:0c:54:6b:80:28:f4:b5:7e:2d:
44:95:82:bb:7a:71:85:63:c3:3c:37:8e:0e:b7:8c:
73:8f:3e:13:e1:a0:63:ff:b9:71:16:94:c3:37:36:
a1:e7:5e:03:9b:b4:3e:2e:b0:be:e8:d9:43:f2:d6:
1e:f6:63:bb:d1:89:72:d9:93:40:fe:9f:d0:b3:3d:
52:f3:d4:70:e9:b9:a2:31:4b:0f:f3:58:88:b3:1d:
66:8e:1a:d8:3e:e9:78:c8:90:ff:eb:9b:b2:3a:ae:
91:13:2b:a8:eb:2e:1a:56:20:88:19:92:b6:1b:77:
b3:53:1a:85:dc:07:1f:97:88:bb:e2:6c:66:5c:31:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:55:BB:04:E5:67:60:94:27:97:79:C9:A7:6A:7A:5D:1F:5D:D1
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:7b:81:e7:ed:30:77:0a:d7:0b:8f:d7:48:8f:04:0d:64:
3d:02:4e:15:f6:24:58:65:00:4b:c3:34:07:29:61:bd:29:72:
df:17:58:db:21:bf:16:1f:62:a8:39:75:af:b4:27:89:a4:43:
4a:25:07:93:1e:37:7c:07:34:51:ed:2a:4e:11:c1:b7:08:13:
0d:8a:16:7d:b7:b9:87:c0:2c:be:9a:37:45:9c:6b:03:e9:68:
fd:05:08:4a:cb:4c:76:d2:b3:e3:f0:83:fb:8d:c7:ab:1e:1e:
7f:ec:03:5c:6a:d7:be:8c:20:cd:be:06:fd:95:8d:ce:2b:19:
32:47:5f:02:e3:cd:2c:78:9d:c0:9a:2b:bc:20:cd:6d:25:84:
2f:32:85:9c:ac:8c:57:99:11:a1:45:7a:d4:c5:51:5a:6f:ab:
c7:15:25:e1:bc:09:ad:be:81:38:91:cf:23:34:ed:80:94:b3:
ff:9d:f8:b3:ea:fc:b9:13:ca:28:0c:8e:7b:2e:e8:d2:68:36:
4a:af:a9:0a:d5:8b:be:24:15:2c:a5:85:39:e1:de:48:6b:f6:
b9:7a:82:ee:76:f2:eb:1a:b3:a4:41:c7:ac:2f:7c:8f:47:84:
fe:70:a3:29:51:17:1a:6f:f8:4e:b1:19:77:cc:85:32:80:12:
58:8b:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:47:32 2026 by rpki-client