Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: D8s4iGKvoptonInQR9+M3G4NFCO1ENjbCOFCKxvmCZs=
Subject key identifier: 6F:50:0B:B5:DD:20:03:32:F9:06:D7:BE:A7:8C:E5:BB:BF:FB:F6:CA
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019CC7F538120A96342815B559C25DE1A59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 11:01:02 +0000
Manifest this update: Sat 07 Mar 2026 11:01:02 +0000
Manifest next update: Sun 08 Mar 2026 11:01:02 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: uKXk1TqVUiUrlOt1qtmYTuJCUjtiGajoNgZaiIOTNZo=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:f5:38:12:0a:96:34:28:15:b5:59:c2:5d:e1:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Mar 7 11:01:02 2026 GMT
Not After : Mar 8 11:01:02 2026 GMT
Subject: CN=6f500bb5dd200332f906d7bea78ce5bbbffbf6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:6c:a6:d4:72:95:55:81:86:df:55:f5:10:
ec:80:a6:80:b9:51:df:2f:f2:3d:00:c5:7a:02:10:
70:6e:45:23:80:4e:a7:a3:49:d9:56:8f:4c:85:7c:
47:4b:30:30:ad:8a:01:26:50:29:ea:89:59:d0:c5:
6d:5c:76:ab:c0:97:40:29:b7:2f:62:77:34:f6:15:
af:aa:98:9a:4d:e9:03:ab:ff:42:d1:b4:a0:2f:82:
d1:2e:97:73:18:94:ea:31:9b:5f:25:0b:db:93:34:
89:f1:f3:ac:94:95:76:29:d9:a7:e6:db:88:68:ac:
de:cf:26:8a:7e:c1:9b:44:95:e9:43:58:ef:c4:19:
80:93:5a:70:c4:ec:fc:02:94:8d:05:20:7e:ec:db:
d6:5c:b4:96:ff:3e:00:39:2b:be:1b:b0:b8:3c:7d:
d2:a3:6b:d3:bc:65:f3:75:4c:3c:4d:db:fa:87:79:
23:2d:81:ca:58:27:be:d0:64:4d:b5:90:d6:7b:ff:
a3:75:5e:4c:6f:f6:4d:20:a2:e2:06:c7:b6:d4:c0:
c9:c9:e4:62:e8:4c:88:1d:24:dc:9d:78:8a:dd:75:
9a:ff:96:ea:1c:b0:d7:46:fd:49:3d:90:22:7e:ce:
2f:a8:15:47:ca:ea:0c:72:3d:e4:48:b7:ac:cc:ed:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:0B:B5:DD:20:03:32:F9:06:D7:BE:A7:8C:E5:BB:BF:FB:F6:CA
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:ca:c4:89:59:ea:43:28:0a:a4:f7:d2:b2:bc:e9:5c:53:
48:f2:75:20:7a:18:09:b3:63:c4:1f:ce:49:37:b7:51:f6:00:
d5:fc:a1:b6:47:a5:69:42:c3:ed:a2:30:0d:dd:c5:68:0e:21:
d5:8d:c0:e3:92:f2:71:cd:d1:72:a9:69:b1:bb:c4:3f:7d:83:
65:84:cc:20:b6:21:12:64:33:86:51:98:20:a8:35:64:b1:4c:
f3:3c:4a:79:e8:13:36:6e:08:e9:61:57:43:c1:26:67:39:ea:
c9:46:92:e6:b4:13:18:1d:a4:9d:d7:0b:15:21:2b:62:07:a4:
57:48:4d:7a:8b:8a:ee:e3:a2:28:a4:8f:17:54:5c:9a:56:68:
e1:f8:b5:11:12:22:b9:29:46:b8:da:1a:cc:64:9d:c8:34:e4:
1c:9e:a9:12:3f:2c:6d:dd:af:ef:3a:12:a5:3e:93:30:4a:94:
88:e8:45:e9:d1:9c:c6:62:b0:22:38:b5:19:41:49:5b:76:ff:
5f:43:2a:63:86:78:2e:13:39:8b:3e:8a:55:9a:f6:76:15:af:
5a:7f:c1:d1:5b:51:16:bb:45:53:99:e4:0f:6f:b6:40:16:95:
92:1a:32:3e:df:87:fa:3e:df:6b:f2:27:2d:73:b1:08:96:13:
cf:f5:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:12:26 2026 by rpki-client