Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: CaRzV8XlMC5gGxvjBopKdYLtK6o1jORZMaPB+R1DY6w=
Subject key identifier: 96:C8:54:DA:33:34:76:73:87:73:17:5D:E4:0F:65:83:F8:9A:19:3B
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 019D3A8A60FF62C9374F5985011127E1F802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0D9A
Signing time: Sun 29 Mar 2026 17:00:40 +0000
Manifest this update: Sun 29 Mar 2026 17:00:40 +0000
Manifest next update: Mon 30 Mar 2026 17:00:40 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: YcN5EL5ZrTxxnPudgNFGcsBICQfYOTzVGDQ6RVQceJg=)
2: 5lUQZsEUGyOae8g7ck1qxAKPHD8.roa (hash: n4Xk9RLkEFoassK3zDhzjezu9B6KPSvljIoQuRXwbfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:60:ff:62:c9:37:4f:59:85:01:11:27:e1:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Mar 29 17:00:40 2026 GMT
Not After : Mar 30 17:00:40 2026 GMT
Subject: CN=96c854da333476738773175de40f6583f89a193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:f2:b7:07:fe:dd:4e:b3:18:a9:d0:55:87:
4f:0c:5c:5c:a7:13:2c:3a:2d:84:96:40:6c:48:32:
d6:f4:c4:14:d5:7b:94:1c:bf:83:5f:d1:2b:70:4f:
95:ff:06:dc:f6:b5:3b:ec:21:8f:dc:44:69:2b:f9:
ae:3c:f2:0f:59:3c:62:06:a5:16:bf:c1:ca:de:97:
01:e4:27:6a:a7:c8:8d:d2:2d:a7:0d:e8:87:67:3d:
4d:c6:4f:84:c3:75:7d:48:e9:da:28:e8:9a:20:72:
33:28:62:9e:44:9d:ce:54:56:1d:23:52:be:c3:fe:
79:94:23:cb:02:f5:8e:cb:8e:ea:94:e0:bc:ee:0c:
30:e4:29:da:ba:71:65:25:ca:fb:71:7b:83:7d:c4:
a8:95:ea:3d:ca:5f:8e:a8:8d:c3:11:b0:d4:43:c9:
18:e9:6b:73:2f:6f:5a:6c:ab:68:5d:d7:09:5f:99:
80:1e:4b:e3:9c:e8:fa:24:b4:fd:46:68:f5:d7:cd:
ce:90:be:97:5f:18:7a:6d:0f:c7:13:69:e7:41:d1:
65:ad:8c:3a:d7:27:39:8f:7a:47:29:82:93:5b:2f:
c0:85:a1:1c:c4:eb:d4:42:8c:84:26:30:44:12:50:
8f:40:51:db:6e:b3:ca:5d:6e:c5:dc:4a:58:d3:ec:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:54:DA:33:34:76:73:87:73:17:5D:E4:0F:65:83:F8:9A:19:3B
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:82:b6:78:8e:27:d0:d1:2d:76:a3:12:e4:4d:1e:a8:d3:65:
ff:e4:bd:62:ce:8f:77:57:81:7c:0d:76:47:a7:1a:71:93:0b:
f9:3b:db:2f:bd:92:ca:fd:3e:fd:4b:de:ab:1c:de:67:51:ee:
3e:8f:da:f2:e3:90:80:a2:43:04:51:f7:3d:c7:3c:af:d3:8c:
d4:15:fa:2e:15:2a:15:d1:4e:ea:2a:14:35:ff:60:44:fa:6f:
af:13:5f:20:97:69:fd:df:ed:ce:f4:b7:1b:57:e8:b9:19:68:
36:5d:62:88:06:c9:2b:c5:81:c6:e3:65:a7:c8:6d:aa:d1:07:
07:f4:47:eb:7c:72:15:ff:9d:31:44:c2:37:4f:03:6b:f9:9f:
d9:f6:20:99:da:ca:75:96:84:8e:fa:a5:b9:de:58:68:9c:37:
ee:81:47:f0:83:47:49:8a:51:f9:75:3b:ae:26:4e:ac:e8:41:
12:02:8e:e6:fb:f2:af:b1:fb:4e:83:06:4d:89:23:ac:b3:9e:
d1:c1:5d:0f:0a:21:4b:19:d5:7b:4c:a6:12:02:f4:a2:35:be:
27:8a:eb:f3:3c:24:9a:9e:1a:55:ed:f8:94:23:77:8a:bb:4a:
26:90:75:68:ca:4b:0e:f5:ad:e2:36:f2:71:14:c5:62:dc:06:
ee:2b:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:07 2026 by rpki-client