Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: VfThvJdJyj1ZNYTWhnREMAL70wpq4YRe9gi6RQ8lorQ=
Subject key identifier: DC:F6:A5:18:C3:D2:11:F9:0A:8A:C5:0A:40:02:EA:ED:F7:C3:65:00
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019D299702A591029312919C6C8D6AB7DEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0AF2
Signing time: Thu 26 Mar 2026 10:00:55 +0000
Manifest this update: Thu 26 Mar 2026 10:00:55 +0000
Manifest next update: Fri 27 Mar 2026 10:00:55 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: 7UVFuhCgwo8cM9/EDLky0Jslurd7M3a1P4xpNeGnEb8=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:02:a5:91:02:93:12:91:9c:6c:8d:6a:b7:de:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Mar 26 10:00:55 2026 GMT
Not After : Mar 27 10:00:55 2026 GMT
Subject: CN=dcf6a518c3d211f90a8ac50a4002eaedf7c36500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:c5:03:d3:67:26:ca:5e:c3:e3:02:b6:a8:
6d:9a:40:ee:ef:4e:66:7f:35:28:ca:89:87:1c:59:
65:61:a4:da:6d:0a:d2:55:86:2c:20:df:3b:b4:70:
e3:44:85:f7:e4:7f:61:64:06:0d:7f:30:08:6d:7a:
58:b4:6a:7b:00:61:c5:c1:04:c6:d2:2a:1e:b2:50:
36:6a:5a:62:c0:ae:46:50:56:81:7c:0b:bf:97:63:
3e:0e:58:86:41:43:b6:95:45:31:8e:08:39:ab:77:
67:d4:1f:8e:7a:a7:4c:2a:21:b1:6e:b9:51:c5:64:
de:6a:64:ca:6c:9b:7a:dc:a3:3e:5e:73:74:c3:af:
52:c9:1e:e2:c8:04:83:bc:5e:2b:3f:fe:e8:e2:b9:
3a:d5:1a:91:a2:b6:44:1e:6f:78:ce:98:77:1e:5e:
a3:2b:a8:5f:03:1c:e1:6f:3f:ba:f8:33:3b:43:6f:
c2:8c:d5:01:38:83:28:f3:75:b2:8c:c3:09:f0:33:
c5:c6:df:b0:ca:1e:98:a1:1d:19:69:32:95:02:ca:
7b:9e:83:51:95:a2:90:8d:16:a1:57:ff:20:0b:18:
10:1b:fd:7d:dd:f9:33:fb:2d:46:e8:3d:5b:e6:9b:
e1:01:bc:44:28:67:f0:35:b0:35:07:66:a0:b7:14:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F6:A5:18:C3:D2:11:F9:0A:8A:C5:0A:40:02:EA:ED:F7:C3:65:00
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:49:e8:25:35:aa:1c:cf:a9:ee:fd:4a:87:b4:34:3d:b1:
96:d5:87:b0:09:2b:f6:cd:f3:90:bd:4a:97:ec:d6:cc:5b:87:
01:6a:d1:16:d6:d4:88:55:4e:39:ae:e4:5c:4d:9b:a4:2f:97:
6f:fb:f9:a4:ee:c0:47:a0:0b:64:08:b7:55:91:c3:08:66:f2:
7d:d3:28:71:ab:8d:aa:f0:06:f7:8e:0b:81:7d:44:39:37:89:
d5:ea:51:e6:97:4b:9f:a4:6f:04:fc:a7:57:cb:e6:be:0a:79:
ea:47:67:83:65:29:ce:58:ee:9e:56:95:03:94:6b:d6:d1:4f:
2a:f4:89:2d:96:d8:61:32:34:73:14:e4:a8:58:1d:80:11:72:
57:ba:29:76:ff:cf:d7:2a:b1:00:53:48:a6:8d:74:4d:e8:d5:
aa:da:d5:27:0f:23:6c:4a:8c:51:0c:75:0a:83:3b:91:ab:c6:
65:bc:df:3f:b1:53:df:88:db:88:75:72:30:23:82:8a:98:40:
ef:bb:c9:a0:41:31:25:1a:65:59:32:06:ee:31:72:8c:7f:3b:
e3:b8:74:a5:ff:38:1b:5c:1b:a7:41:17:b4:d7:ef:e8:07:04:
c6:a0:fe:80:36:87:b2:02:13:3f:46:09:5c:4e:16:3d:21:4b:
b7:9f:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:22 2026 by rpki-client