Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: G5QbBEp56IY+gBCtrONAmXoXXfEQ4BW3mBgY2KApH0k=
Subject key identifier: E3:6B:73:0F:EE:A4:92:EA:09:CC:AF:15:23:4C:46:06:91:B7:0F:7A
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019CB400DFA1377546CC83B52F7B31CA8713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 15C3
Signing time: Tue 03 Mar 2026 14:01:21 +0000
Manifest this update: Tue 03 Mar 2026 14:01:21 +0000
Manifest next update: Wed 04 Mar 2026 14:01:21 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: c0NeWanqwzj4RFy/n8OByJGDQhJosnIiNQlZaw6CubA=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:00:df:a1:37:75:46:cc:83:b5:2f:7b:31:ca:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Mar 3 14:01:21 2026 GMT
Not After : Mar 4 14:01:21 2026 GMT
Subject: CN=e36b730feea492ea09ccaf15234c460691b70f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:e2:49:04:27:8b:7a:45:dc:bb:ec:02:c8:
39:00:60:4d:45:ef:1e:ee:37:4d:c1:84:b6:a2:c4:
d0:3c:06:bf:61:6f:0c:7b:06:f5:d3:48:41:9e:fb:
dc:a2:cf:68:df:fe:9a:51:b7:09:8e:06:e3:6d:c6:
c6:16:c9:45:08:1f:44:d0:94:27:5f:88:40:93:53:
3b:f4:25:0a:96:76:f7:01:37:e3:eb:89:0b:23:a6:
29:d9:32:7e:1f:a5:08:62:13:d6:bd:e7:44:2a:e3:
c7:cf:d0:c8:eb:c0:db:17:ca:e7:15:f0:dc:83:03:
60:84:a8:bf:46:93:15:b8:b4:9a:5b:32:cd:3d:b5:
95:f6:b9:ec:ac:66:86:d0:a9:44:f4:4e:9c:07:bb:
3f:0f:8d:52:d0:58:1d:6e:31:d6:d1:48:33:a5:90:
f7:7e:42:bb:e0:d9:18:51:f3:87:e2:4c:44:a8:ae:
98:4a:30:1d:61:b5:1a:17:97:aa:f0:79:fe:ae:91:
84:6c:6c:40:12:82:d1:aa:d0:09:c5:07:51:62:49:
1e:9e:02:9c:5d:c3:93:fd:9e:a4:cd:0e:7f:ca:49:
df:32:0c:c4:eb:09:f5:bf:ce:d8:8e:4d:e3:3d:dd:
7e:97:64:2c:f1:b9:90:af:b4:19:9c:3f:7f:14:cf:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:73:0F:EE:A4:92:EA:09:CC:AF:15:23:4C:46:06:91:B7:0F:7A
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:47:85:aa:e5:d3:c4:f8:2a:f6:62:7a:18:17:04:3f:1d:
de:9b:fa:47:80:3f:9b:44:ae:d4:18:82:11:a1:5b:a2:75:69:
08:b1:9b:fd:58:68:02:d0:d6:8b:1a:99:5d:1c:e7:60:5c:db:
d0:f6:8f:b0:d3:c1:ed:1a:31:92:66:7f:3e:bf:35:c8:88:ff:
e1:1a:7b:41:0a:68:9c:ec:3a:6a:34:30:76:ad:ad:cb:cf:fc:
7d:6e:1d:24:4a:95:a4:fd:50:33:5a:64:18:85:8b:ab:b5:e5:
11:1b:04:7f:f5:20:20:70:03:90:72:a4:f3:57:a0:f2:da:c3:
35:c4:61:b4:88:8b:9a:af:a5:b4:bd:38:20:55:84:53:72:66:
ec:a8:1b:e9:ac:84:c7:d1:17:aa:df:92:ca:4d:cc:7a:58:45:
7b:f8:b8:c3:db:ef:c5:3f:f7:84:28:a0:a0:46:df:32:a7:80:
d8:82:11:49:af:de:58:a4:97:e6:5f:a9:9f:d0:93:4a:93:4c:
4a:bd:27:4b:e8:46:5c:03:ef:b1:ce:01:ec:52:26:01:dd:b6:
50:3e:38:84:d7:35:f3:bd:42:d3:6e:60:b1:b3:5a:00:fd:b7:
9f:f1:bd:4d:15:0f:3f:00:5c:63:ca:cf:98:40:94:fb:4d:bb:
63:89:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:56:16 2026 by rpki-client