Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: 2SBzgGO0zc0A0+bCtdYCbrv4bE8wmsEvSwTDmT/Jf+A=
Subject key identifier: 7B:09:8C:AB:92:22:3F:AF:DC:F2:E5:0E:29:B9:55:3A:AD:33:14:7F
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019CE5C94B4434E76800811D7ECF97CEF46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0C1C
Signing time: Fri 13 Mar 2026 06:01:40 +0000
Manifest this update: Fri 13 Mar 2026 06:01:40 +0000
Manifest next update: Sat 14 Mar 2026 06:01:40 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: Z57IoDE1mOiHpSoxxIyBMSnfM747EvAJ3KBJoZsAsjg=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:4b:44:34:e7:68:00:81:1d:7e:cf:97:ce:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Mar 13 06:01:40 2026 GMT
Not After : Mar 14 06:01:40 2026 GMT
Subject: CN=7b098cab92223fafdcf2e50e29b9553aad33147f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:28:c8:95:74:a6:c9:e0:17:3e:59:13:94:
45:fe:b9:7d:82:2e:a1:4e:59:46:44:f0:15:7f:8f:
d4:ff:44:bb:84:fd:cd:c2:b9:5f:d6:96:75:e8:fb:
f1:24:29:d4:9d:8c:37:9b:23:8b:c4:c9:45:5d:81:
09:ab:8d:bf:e1:b3:3b:47:87:5c:be:1b:ce:d6:85:
a1:c4:3c:8c:68:02:94:b7:6b:42:92:bb:d8:88:63:
2d:c1:11:37:19:79:98:ff:a7:75:f7:7b:9f:3e:c1:
66:ed:03:01:67:13:29:60:c3:09:9c:a6:f1:b0:9a:
ff:96:a9:8d:57:db:c9:fc:ed:4e:7f:54:c5:51:fb:
96:0c:70:5f:e4:bd:80:6c:71:83:bd:54:88:fa:59:
72:92:df:fa:9d:7c:91:57:39:b4:a9:c1:46:d3:dd:
8f:1f:1b:6d:ba:2d:9c:eb:e4:b6:4d:7f:0c:39:7d:
c2:39:bb:a3:47:b4:36:63:1b:3a:e1:26:70:9c:e5:
91:0b:6d:ee:fa:89:d2:13:d5:b9:20:ac:8f:a3:1a:
6f:52:ed:c1:13:e2:24:c4:26:f0:4b:3c:16:34:01:
b8:c2:6b:1a:fd:72:63:81:12:c9:a8:d5:23:34:fa:
d3:28:e1:a6:01:8a:dc:a4:2a:49:f3:b3:c9:93:8a:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:8C:AB:92:22:3F:AF:DC:F2:E5:0E:29:B9:55:3A:AD:33:14:7F
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:92:a0:89:8c:f1:3a:75:f1:ed:c8:4f:fa:24:01:db:56:3a:
e9:67:48:ba:2a:71:e5:f7:5a:5a:a9:13:65:77:3f:61:5f:77:
e5:b7:d5:27:b4:25:7b:b5:d7:6e:c0:d5:17:37:8c:21:55:95:
52:55:09:3b:a7:d2:ef:dd:80:3c:55:5a:3d:a4:7d:6a:68:63:
05:21:6c:d4:1f:a7:1d:1a:f7:60:65:98:c9:94:2c:87:bd:e9:
8c:70:06:2e:b4:7d:34:e2:ec:ce:87:f9:54:67:d5:f9:df:92:
be:f6:5f:f9:e6:08:f2:0e:e5:c6:b1:21:44:a7:fa:26:ab:49:
e1:c3:e0:43:ab:9e:02:dc:6e:61:84:b8:c7:b5:ae:fa:c2:d5:
aa:40:12:c8:22:68:27:77:f3:45:11:aa:20:c5:58:90:da:fe:
d7:51:c1:13:e4:81:e6:90:02:06:0c:6f:76:b1:5b:c9:ff:97:
33:7d:19:08:fc:17:cb:f1:01:43:78:bc:d4:4b:4f:f6:56:22:
0d:8e:27:23:14:77:cc:48:fc:5c:5e:29:c5:a1:cd:b5:7f:b4:
3a:6c:4b:e6:b4:5b:db:2a:4a:d8:a6:d2:16:a2:b3:fc:ab:21:
c6:c5:0d:5e:8f:7e:a4:9f:97:dc:74:03:bf:9d:ce:3b:85:84:
3c:11:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:15 2026 by rpki-client