
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: 10DLNkv39SG8D8zbJecf8uZQKEGqAlKw8da55eOmjhQ=
Subject key identifier: 79:8E:E2:B0:17:47:80:1C:93:9C:93:C7:79:6D:F9:01:8C:BA:54:CF
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 019CE290C2EC1C906948912A42DB831B2728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 15:01:03 +0000
Manifest this update: Thu 12 Mar 2026 15:01:03 +0000
Manifest next update: Fri 13 Mar 2026 15:01:03 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: ruN6VU8hlUuNtxRCqWxWbMrqUEaey7Lm41EhhBzQYXU=)
2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:c2:ec:1c:90:69:48:91:2a:42:db:83:1b:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Mar 12 15:01:03 2026 GMT
Not After : Mar 13 15:01:03 2026 GMT
Subject: CN=798ee2b01747801c939c93c7796df9018cba54cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:9a:ef:39:fc:a3:bf:dc:48:4b:24:a1:f9:
c4:e6:2b:cc:0b:5d:1c:1d:4c:25:d9:2f:c0:33:67:
9c:4f:c8:5b:74:5c:a6:24:19:1f:a6:b6:36:79:9a:
e8:cf:19:b7:15:af:6c:a9:bb:33:ed:12:55:81:d9:
fe:61:2a:c5:b5:62:ee:35:26:d0:c3:47:67:38:b4:
e7:0e:01:55:62:d2:a2:e8:03:17:1d:e1:64:07:ff:
1d:83:c1:1a:a9:23:45:6e:5f:32:6f:d3:49:09:1c:
89:8d:6b:82:10:69:ff:68:33:90:16:81:3b:3e:f1:
56:30:48:41:b9:24:b4:00:85:83:c3:9d:53:a2:0a:
7c:48:65:f9:2d:17:3b:97:38:a6:37:1c:66:c5:b5:
59:f9:20:f7:02:21:6f:9b:10:82:8d:d0:fa:c7:77:
b4:17:e9:06:80:71:6a:16:a5:79:e6:42:c9:7c:ac:
ee:67:ae:3b:0d:ca:f0:42:de:87:e8:0d:2b:93:a7:
30:ef:ca:61:04:d6:32:a0:ba:ec:b0:43:84:75:28:
e0:45:58:6c:29:c6:7e:a4:fe:06:a9:a8:0c:d3:fe:
97:90:e8:ff:3a:49:6e:38:ba:65:36:a9:77:c7:01:
f7:2c:d7:1b:50:17:6c:b7:01:cf:c5:97:bf:0b:c9:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:E2:B0:17:47:80:1C:93:9C:93:C7:79:6D:F9:01:8C:BA:54:CF
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:b1:0c:53:d7:18:fc:bd:3e:30:1f:64:04:10:2d:bb:a3:
84:eb:a9:ae:43:5a:c4:4a:8f:37:37:e4:65:88:a5:2a:a1:0f:
8d:18:b5:49:44:16:6a:a4:51:61:75:0e:24:05:42:ee:ed:bc:
84:e6:30:29:96:00:5e:74:c1:de:37:37:a3:5a:67:c3:4e:e7:
3b:63:a0:dd:24:e1:a0:66:41:cb:85:94:f0:ca:77:6c:49:e2:
b3:0a:cf:ab:b5:5b:ff:7d:44:59:0a:56:4e:16:89:7b:fc:a6:
83:ad:3c:b2:bc:8c:41:5a:12:e0:52:e9:4c:95:18:ae:3c:b3:
63:1e:f5:d0:a6:83:aa:a2:6e:5e:33:fd:cb:ff:08:c0:40:94:
52:b1:54:ab:fe:fb:6c:6e:f1:49:98:de:f5:50:44:a2:b9:e9:
0b:01:26:ae:09:d1:0c:87:ab:61:99:31:8f:dd:a5:4c:05:8e:
76:95:10:3e:b8:69:df:7b:1b:67:60:ad:c9:45:4d:11:c7:cd:
0a:9f:8a:03:e1:cc:ef:cc:3b:0c:82:a4:b2:49:02:b0:ef:c8:
6e:88:cf:06:bd:88:ea:e8:d2:d6:44:8d:9d:23:0c:8b:ce:27:
31:e7:70:85:ad:13:aa:25:68:62:92:71:07:a9:97:fa:83:7d:
0d:6d:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:09 2026 by rpki-client