Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: p9EbrPxqk86Ph214fUBH4Es3DZUGzNSsV0DgRMttGVk=
Subject key identifier: 70:49:00:B1:CC:A7:CA:CA:62:06:25:DB:01:FA:34:D4:CF:33:40:59
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019D3865BDFEE1F1070D793E769B0FA539B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 140D
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: IdnTQQG14IpnLcxGfNYcA1Hz2460ilcYyFk08uxAkBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bd:fe:e1:f1:07:0d:79:3e:76:9b:0f:a5:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=704900b1cca7caca620625db01fa34d4cf334059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:2d:75:b6:04:f5:53:89:4d:f9:cb:94:0f:
ee:07:6c:6a:26:91:53:38:bb:2c:d4:14:a7:6c:4c:
ee:c1:5b:e8:35:f5:de:61:7b:0c:05:fb:90:6d:73:
0e:a1:3c:19:91:28:bd:e9:f8:22:42:12:94:9b:2f:
f0:67:25:d3:e4:55:95:10:12:38:6f:ef:1c:79:e7:
63:e2:cd:93:ae:81:d4:48:29:12:4c:43:d2:a3:11:
19:26:de:40:88:37:d4:18:e8:fb:e9:6b:80:08:90:
ed:e8:36:1c:65:db:98:98:48:b1:d9:91:a7:d9:23:
0a:59:ad:18:70:0c:34:a7:bc:73:62:53:59:b7:78:
ba:e6:7a:9f:7c:88:50:de:26:a3:ed:cd:7d:17:58:
6a:3a:8b:b5:d9:03:97:a4:d7:68:2f:1b:aa:46:1f:
d8:b0:2b:80:56:9e:a4:18:48:6e:98:e5:29:d5:2c:
d2:a1:97:61:78:fe:de:ff:e3:ca:ae:2b:ec:47:f3:
25:7a:3e:ac:17:8f:6b:2e:5f:91:69:f9:c4:e2:21:
b4:41:22:de:fa:c9:14:d4:c5:53:71:89:0f:44:ad:
ac:0d:87:3a:56:d3:5c:64:35:97:a7:15:2f:38:cd:
49:26:80:29:b6:72:3f:5a:84:92:dd:07:e8:1d:c7:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:00:B1:CC:A7:CA:CA:62:06:25:DB:01:FA:34:D4:CF:33:40:59
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ce:b1:13:ba:7f:8e:3a:60:cc:bf:b6:cb:f0:24:d8:1e:96:
e3:ab:b6:a2:69:66:61:b7:66:1c:22:e3:24:86:4d:68:27:7d:
b4:ed:56:5d:94:b8:24:59:d9:8d:b7:d6:32:3b:14:68:7a:c0:
9d:1d:cc:74:5a:20:9c:58:fa:43:8b:cc:6c:1b:01:82:2a:66:
3a:78:1d:03:72:02:cf:69:1c:a0:83:05:40:e0:21:00:6a:31:
08:90:3d:8f:ca:a4:85:60:9b:77:16:23:a9:a6:83:c3:0a:6c:
9d:31:c5:f4:e9:04:9a:5b:51:ca:b8:9b:44:d9:15:c0:ff:ea:
d4:20:0c:7a:b0:f6:4c:39:62:42:53:a3:66:be:1e:c0:8a:85:
2c:26:df:9c:67:3b:37:58:7e:42:89:de:f0:e6:e5:e1:fb:98:
cd:b5:6c:9e:62:84:1b:e8:49:af:46:23:9d:3f:6f:dd:f2:1d:
6e:9e:db:5d:44:10:79:ba:c8:d4:26:6e:f9:fb:e7:a9:59:a4:
f0:b8:ab:d1:be:ef:03:93:5b:c5:0e:57:8f:6b:ea:c7:e0:17:
fd:11:4d:b9:71:b6:94:03:f1:65:03:03:f4:e0:1c:58:93:6a:
f4:14:c8:0f:cf:08:e6:9b:90:be:87:f8:f8:5d:40:ed:4a:a1:
75:a3:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:35 2026 by rpki-client