Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File: 1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier: ELvW/nNQkWLoZRoWfcDMgr7PijXICoDUGKn47DCl28w=
Subject key identifier: 7A:9C:D8:BA:9B:D9:0D:FD:5C:23:8F:7D:EB:A4:24:FF:D5:9F:25:86
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer: /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial: 019CE2221F5D033C51DC0B8B7C98ADEBF92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number: 049A
Signing time: Thu 12 Mar 2026 13:00:12 +0000
Manifest this update: Thu 12 Mar 2026 13:00:12 +0000
Manifest next update: Fri 13 Mar 2026 13:00:12 +0000
Files and hashes: 1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: YpU6jdkJfXVusFuefIgq33HGDNO/nBxVZ+AUm8fNpos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:1f:5d:03:3c:51:dc:0b:8b:7c:98:ad:eb:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
Validity
Not Before: Mar 12 13:00:12 2026 GMT
Not After : Mar 13 13:00:12 2026 GMT
Subject: CN=7a9cd8ba9bd90dfd5c238f7deba424ffd59f2586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:10:73:5a:a0:cf:3d:75:aa:c1:0f:e5:04:
b0:29:39:4a:fa:cf:12:f5:5c:7e:d1:ae:48:b7:5b:
a8:19:31:39:39:9b:8d:ad:27:3b:c9:da:16:b2:cd:
24:1b:e5:93:7c:93:e8:f7:4f:1b:a6:bf:4d:77:f6:
ef:fa:93:17:de:4c:6f:b8:26:e7:37:b0:99:88:e8:
7d:5f:fc:7d:51:4b:f3:b4:84:1c:91:43:48:0e:32:
6f:32:53:68:e9:97:ec:5e:50:0c:0d:aa:d5:e7:0a:
91:06:aa:38:1c:aa:3b:34:b7:e1:4c:e5:64:5e:24:
d1:aa:6c:b2:33:3f:b9:d4:27:25:9c:c1:f0:ac:b7:
ae:96:c1:2f:89:c8:56:c6:41:d5:c6:b1:a7:1c:e4:
26:11:4c:ee:c1:61:1e:0d:f9:99:fa:04:19:55:08:
fe:70:5f:09:a8:eb:c0:16:1a:7a:26:e8:da:40:78:
6e:1d:fc:27:10:89:b2:25:17:b4:ef:1e:23:52:36:
5e:96:69:70:da:99:a9:c3:8e:0f:12:47:ff:29:e1:
31:db:3f:48:67:10:9b:c2:7c:98:15:be:c7:32:25:
4d:50:10:d7:48:ed:b8:57:f9:4d:5a:44:0c:1b:7a:
f2:3a:36:d5:9b:55:82:cc:fc:c3:12:f9:de:a5:ae:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:D8:BA:9B:D9:0D:FD:5C:23:8F:7D:EB:A4:24:FF:D5:9F:25:86
X509v3 Authority Key Identifier:
keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:7b:08:61:ea:ed:cc:f4:3d:04:c6:c6:a3:59:01:64:88:
70:c2:a3:9e:bd:ec:9f:a3:4e:b0:d9:09:a7:0f:73:d1:93:74:
e1:17:fa:c1:33:cc:6e:12:7c:f6:0d:46:78:bd:22:51:ed:e5:
4d:c8:53:71:fd:e8:9f:1d:5f:fb:7d:52:55:41:be:e8:40:ac:
aa:be:66:60:b9:0c:e9:b9:9c:8b:50:5a:82:dd:8c:e0:e7:60:
7f:02:6f:2c:78:ff:00:f5:1a:36:46:9f:3d:b8:87:3d:00:25:
65:b1:6b:a8:b4:9d:dc:eb:92:a2:9e:f3:a0:b0:83:69:f3:c7:
4f:06:4a:02:d4:43:e0:0f:63:8c:fa:1e:b3:ad:64:81:9d:a2:
30:f8:6b:3f:b7:97:eb:65:30:f1:ff:0f:3e:d8:45:d8:54:9c:
a2:dc:7b:5e:c5:d5:74:d9:12:c9:ef:8a:85:3a:6c:bd:5a:b7:
fa:f2:b4:ef:ef:2a:70:08:2c:33:f6:95:32:c0:61:05:06:7b:
f3:f7:a1:ad:38:30:75:06:ca:26:99:b2:a3:68:32:cb:3e:f2:
a1:28:da:88:f0:77:f4:76:2e:ea:d4:e8:74:22:e6:e2:38:07:
be:b8:40:3b:fa:d0:61:3c:48:52:cc:80:a3:f3:53:19:4f:92:
dd:f2:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:28 2026 by rpki-client