Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier: oP/dHQ9cadcwfiPY2lAqBilPH/wSSGMlo7Dm7v1SOfw=
Subject key identifier: 2A:BE:8F:82:5B:C9:A9:26:B1:70:0D:93:6A:A4:61:6E:2B:AF:2C:DC
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial: 019D3865ABCCE7AA214200C48B1F3EDC9E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number: A2
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: DU/eUaKGYfRttwY4gk1GrXAr5TZVzvIq3X/9WYXzzdg=)
2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ab:cc:e7:aa:21:42:00:c4:8b:1f:3e:dc:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=2abe8f825bc9a926b1700d936aa4616e2baf2cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:90:e9:39:29:9b:24:d3:96:66:d5:85:3b:
24:a2:48:de:0b:e7:c8:64:b6:0a:3d:ea:6e:96:ab:
4b:ea:02:69:ac:ce:3b:15:00:24:3c:fb:8f:88:34:
f3:ec:4e:ec:39:23:be:60:0f:c3:67:00:e7:fe:44:
51:3f:4b:2f:0e:81:e1:3c:d3:fe:7d:2b:dd:ee:38:
e8:64:e1:28:8d:21:16:d5:9b:42:b7:03:f2:e1:1b:
6e:71:25:f0:ea:d7:4d:ce:ef:1e:eb:27:e0:99:a2:
70:c5:47:60:55:92:fe:88:aa:cf:51:ee:09:c0:16:
9a:be:6a:4d:43:9f:aa:c1:f5:07:a7:22:8c:92:cf:
6f:e4:00:76:46:9f:74:1f:de:ee:6b:38:57:e1:88:
de:b7:13:1b:c1:f3:96:bb:90:14:fb:6e:68:6f:4e:
a8:f5:36:4e:8e:5a:ba:77:9e:2a:82:49:03:6c:f7:
f7:86:5a:2f:53:47:79:d6:c5:ed:ed:68:16:a7:86:
67:50:07:39:0a:c7:26:cf:0c:4e:33:4d:87:6d:44:
5b:7e:ca:a4:e5:66:33:16:26:ca:e9:72:4a:e4:45:
7d:f5:f0:23:70:13:8c:cc:1a:63:30:10:ea:d4:68:
a4:f5:78:a7:13:d7:ab:17:b5:22:4a:e2:40:91:6d:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:8F:82:5B:C9:A9:26:B1:70:0D:93:6A:A4:61:6E:2B:AF:2C:DC
X509v3 Authority Key Identifier:
keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:00:11:aa:28:0a:3c:34:ca:7e:e4:ed:3d:09:ea:e0:06:
53:06:5c:eb:9d:cb:de:57:56:be:f5:c2:76:54:e6:7c:0b:12:
2c:44:9d:ea:b9:16:5c:a2:af:52:54:a9:94:96:bd:05:88:e6:
1c:72:82:7f:a5:24:ed:e7:73:20:ff:e3:26:69:ac:7b:e5:0a:
2d:bb:c2:35:4a:81:83:e5:56:c5:b4:a1:08:56:20:bd:12:72:
a9:fc:0d:6c:39:41:09:3a:bd:9b:85:9c:95:98:65:b2:01:a6:
1d:86:61:79:98:8b:a7:8f:64:a5:ab:81:6c:37:e3:f0:da:e2:
a3:ba:c4:e6:31:44:47:ed:33:57:6b:98:3e:2b:c4:27:be:a9:
a2:22:8c:0f:f3:4e:f2:19:a6:a3:7d:59:9f:f8:4b:7c:73:9d:
77:d1:f1:f3:3d:5d:92:03:b1:11:82:8d:90:63:0e:04:90:3a:
4f:2f:b0:88:59:49:3e:93:cb:5d:0c:e6:d3:23:3c:a4:6c:27:
5f:8c:84:e8:46:c1:bc:67:21:db:b3:77:21:a1:05:ae:c1:c8:
7a:bd:bf:35:cb:7a:07:a2:c7:a6:b0:7a:67:04:bd:ca:53:db:
21:5b:92:12:e4:8b:02:78:3e:63:5b:e6:a7:28:c1:91:82:ea:
4c:05:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:03 2026 by rpki-client