Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: vW4JekUsguSthWKn0AJgNsImcaQF0CB6p2iSRDZ2NIg=
Subject key identifier: B0:57:97:AA:DB:3F:4B:E6:6C:38:D2:D3:AA:17:77:25:C1:C9:C9:1F
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019CF0F0E2ECA64EB76D50517E95FC37E8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0B99
Signing time: Sun 15 Mar 2026 10:00:44 +0000
Manifest this update: Sun 15 Mar 2026 10:00:44 +0000
Manifest next update: Mon 16 Mar 2026 10:00:44 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: F0phnRX+Sixi5M1mbXiVFxuc+KlGBbKxF/RARkwtH0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:f0:e2:ec:a6:4e:b7:6d:50:51:7e:95:fc:37:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Mar 15 10:00:44 2026 GMT
Not After : Mar 16 10:00:44 2026 GMT
Subject: CN=b05797aadb3f4be66c38d2d3aa177725c1c9c91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:40:cb:b7:48:99:cd:3d:e9:ab:83:e7:3b:
f3:df:25:79:50:c4:a1:ac:1a:ed:48:86:63:51:dd:
ba:86:df:51:9e:a0:bd:49:9c:b3:99:21:9f:61:3b:
04:08:32:98:a1:78:48:75:5c:b2:76:5c:ff:c8:b1:
fb:68:87:13:50:46:9e:b0:14:54:13:90:26:7c:6d:
e0:ec:5f:c4:01:80:ff:0e:e0:db:77:5a:e0:ba:80:
d8:31:cc:00:dd:c7:45:c7:89:ae:03:0f:be:d0:0d:
eb:4e:4e:74:43:03:f9:27:39:6a:3c:f7:f0:07:b9:
d8:23:49:d4:4e:c9:72:79:7a:f5:d3:ad:75:ba:79:
45:f2:28:47:1d:a3:91:43:5a:96:00:cd:b2:0a:59:
71:cf:ca:5f:62:4c:4b:1d:51:db:c8:aa:d5:45:c3:
73:e7:f7:62:6d:5d:dd:46:ed:27:d3:65:4f:5d:f4:
6c:43:68:e9:17:fd:e7:39:4f:28:3a:99:83:ad:48:
a0:1c:fb:c7:f7:a7:42:8f:f5:75:11:28:b6:f6:75:
d4:d6:14:d9:01:b4:27:a3:35:87:15:1d:d9:8b:b7:
33:e2:ee:b8:4d:a4:95:5a:28:d8:16:8e:4f:af:54:
5f:63:5e:c9:a2:d5:cc:32:5b:3d:b9:49:ef:8b:17:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:97:AA:DB:3F:4B:E6:6C:38:D2:D3:AA:17:77:25:C1:C9:C9:1F
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:ee:92:64:03:b0:32:e1:9d:6e:07:3a:0d:48:98:1f:e2:
9c:79:be:09:4a:cb:6c:f4:aa:97:ef:dd:1b:8f:83:2c:8e:c2:
09:7b:a3:93:8b:47:3a:c3:8f:c4:fe:e7:ef:53:13:e3:1a:5b:
2a:78:20:f8:ba:94:e3:d0:4f:98:ad:b5:bf:e6:b7:fa:b0:38:
5c:5d:b8:b7:15:12:63:e4:e8:22:40:26:5b:fd:c5:55:e8:72:
9c:a9:0b:2e:14:4d:76:c1:87:98:32:cc:d1:93:22:03:4c:99:
5f:e7:48:79:a5:ad:3b:58:76:e2:c1:62:df:67:2c:f9:41:64:
9a:90:46:80:8d:96:74:19:22:c7:6a:2c:a7:a8:dc:58:03:0e:
1e:ea:d4:e0:e8:1d:16:1a:5d:46:85:7f:77:fc:ce:3a:aa:20:
63:68:b3:ac:00:ab:2e:33:02:11:a1:d6:e1:08:49:63:69:86:
6e:0b:74:56:6e:83:e7:73:5e:83:40:7e:68:b2:f5:82:24:62:
e8:81:3d:f3:9a:b4:75:61:c5:e1:42:6c:ba:ec:c0:cf:9f:2e:
34:4d:0b:10:b0:ff:63:ff:67:f9:c7:5d:af:07:e3:de:79:76:
cf:f1:15:40:93:b0:d3:0e:45:74:37:27:ff:77:c4:38:b2:f6:
4b:09:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 16:40:01 2026 by rpki-client