Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: DUgUjZb+oCudgRJyYhx/0EPTXb/rOZvnhnKAuzIiXvU=
Subject key identifier: 6F:4A:B7:CF:A2:8B:61:BB:D4:CC:E7:98:5E:6B:AC:7F:6E:92:5A:FB
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 019D273B2B4CDFDFCEE75126ABEAA338DA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 0368
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: j0LOTqTsQDyghDQinzs5OMYbVwcCYbGpEKu2KTLPFX8=)
2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2b:4c:df:df:ce:e7:51:26:ab:ea:a3:38:da:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=6f4ab7cfa28b61bbd4cce7985e6bac7f6e925afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:d7:47:68:8d:07:1c:78:7b:04:1d:20:b6:
97:a2:45:a8:43:31:48:32:d6:8a:66:70:89:f0:66:
80:ed:bb:7e:9a:e2:98:88:ae:e0:c1:1a:f6:e4:c0:
2a:8a:69:62:2b:b6:db:b2:ca:28:07:0e:b1:d4:90:
12:e1:ac:c8:f6:f8:9e:b3:c9:81:cf:8d:ba:3d:93:
66:d3:6f:65:03:f7:f1:bb:62:7a:99:a2:94:f1:73:
ea:d0:9a:74:5d:5b:12:07:6e:17:de:38:26:17:af:
54:3e:d9:a5:65:70:51:2e:46:88:16:79:16:37:0b:
fe:19:e3:3e:e3:7c:5a:05:fc:c0:cf:0b:5e:f2:50:
d0:08:2b:c2:45:7e:2c:ed:0b:ae:3a:90:ad:d0:de:
e6:ea:ad:df:e6:32:0f:7e:01:2f:37:71:ab:1b:b0:
c8:82:e6:65:41:4b:e9:ad:19:8b:11:04:43:76:61:
9c:82:5f:8b:1a:db:b1:98:e3:55:0e:e1:81:27:8e:
8b:fa:80:29:96:fa:e9:39:a7:21:f0:9b:b8:44:2f:
8f:5e:da:3b:ee:dd:40:8f:2f:81:c2:b3:44:31:3f:
7a:45:06:97:58:49:d8:6c:1f:8b:82:db:64:e9:26:
64:45:b9:73:b2:53:20:91:bd:dd:69:44:c3:61:dd:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:B7:CF:A2:8B:61:BB:D4:CC:E7:98:5E:6B:AC:7F:6E:92:5A:FB
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:28:48:9c:15:88:b3:67:e3:85:01:7f:cc:a8:19:36:37:48:
70:d9:31:2e:e2:6e:28:60:e4:d5:7d:84:df:00:fa:da:c5:98:
e3:18:22:25:dd:fc:a9:69:40:8a:1a:43:f8:42:18:95:f4:3a:
c4:a7:b7:4e:ec:cc:d9:4e:4d:26:85:a7:5d:7e:f1:0c:7c:cc:
eb:44:50:ef:4d:d0:5d:19:76:42:8d:e7:76:e3:bd:f6:26:3f:
be:b7:83:7f:b6:5b:8a:2d:c6:fe:4e:c4:c3:53:e9:2c:19:58:
fe:1d:c5:3b:e6:e6:9d:11:db:68:82:85:34:c0:74:b1:0c:81:
f1:f3:da:b5:3d:45:4f:01:a7:f8:33:8a:db:ae:6c:e2:98:62:
c1:47:a6:d7:f4:5f:75:c5:af:2b:85:db:9c:1a:f7:d8:2f:00:
32:46:d3:1e:d1:0a:fe:07:fc:e5:22:87:fe:a0:d2:3c:18:50:
98:73:2a:d2:6f:25:93:23:39:a7:33:b2:d4:d7:91:1a:fd:54:
da:83:5f:98:04:ce:dc:bb:49:39:5b:da:5a:b2:15:d0:58:55:
2a:18:dc:c6:e8:37:20:e5:cc:d4:06:cf:76:92:e8:28:be:dd:
9f:4d:4d:92:81:60:21:82:32:0f:25:85:66:9c:6a:60:fb:c4:
92:b3:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:35 2026 by rpki-client