Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: I4kZSbmBZkAv6f3WHRWPqt/gK3CyDdGGE8U+1Hu6Z4Y=
Subject key identifier: 18:5F:4B:3B:B9:C5:A7:DF:BF:31:5E:6E:94:B5:80:76:2A:A7:81:9B
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 019D25F1C7D3F5D107A6EEB4CDC0D90B953F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: nt691LmH5P/f5YWChC4bvpVP8R90oxU/ODEuo9Taa2M=)
2: mxyRjdGL85xD1WB71F85PjRJOb0.roa (hash: +xewzxEDyTrzGnNo3af2vJnALePnt+9O9HzcMXJ3+M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c7:d3:f5:d1:07:a6:ee:b4:cd:c0:d9:0b:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=185f4b3bb9c5a7dfbf315e6e94b580762aa7819b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:ca:e6:70:6c:0d:0e:94:6d:55:09:76:39:
27:f0:21:05:0d:ab:46:05:09:df:7e:e8:45:ba:49:
fb:74:c5:32:23:a2:f9:cc:cb:4e:af:fc:9a:d2:6b:
d6:32:d8:36:96:13:54:05:cc:af:4c:48:21:32:41:
be:fe:b2:bd:a7:bc:3e:28:35:21:b6:86:ca:d5:d9:
f8:18:08:69:ef:33:a1:3e:8f:eb:4a:9a:94:7c:16:
a6:b9:ca:2f:ee:9f:08:fa:b1:9b:18:ee:4b:c2:19:
fe:52:e2:6b:55:62:df:d9:bf:de:88:1a:49:5c:1c:
d8:e8:82:a0:ac:fc:f1:88:06:fe:88:60:12:b8:9e:
0d:ba:e7:76:1e:64:a3:80:f3:31:ca:24:09:d9:31:
a3:98:67:8b:fc:e9:32:8a:d6:f2:71:94:db:cf:61:
51:f5:6c:e8:82:42:4d:be:c5:4a:8e:0e:0b:cd:cb:
f3:3c:b5:50:b2:fa:73:3d:60:c5:21:b1:20:cf:63:
c7:2e:12:5e:39:0a:eb:7d:30:af:a1:65:88:86:b7:
e2:8e:f4:86:e1:a8:df:8b:fe:99:7f:5a:59:ac:78:
7a:a0:e4:66:4b:43:1e:5f:6f:aa:e9:3b:d2:6e:c3:
88:85:50:82:cc:1a:aa:79:a6:81:b3:d2:98:66:f0:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:4B:3B:B9:C5:A7:DF:BF:31:5E:6E:94:B5:80:76:2A:A7:81:9B
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:38:ef:bd:70:88:f0:cc:77:88:48:20:ca:fc:c4:01:3c:
4b:43:3c:1b:ce:2d:61:bb:23:45:d4:b6:8b:3f:d1:d7:cf:9a:
03:fc:0c:b0:61:49:9b:96:35:7e:21:41:24:68:90:95:fb:eb:
58:51:07:79:6f:04:29:35:1c:a4:ec:d5:ae:8b:ca:87:cc:35:
b1:5c:ed:f1:ae:5d:2f:9a:1f:1c:d5:11:2f:20:55:f7:04:6f:
b1:64:cd:72:b9:3b:f6:58:f1:15:e1:36:46:9d:8e:09:29:d9:
fb:27:7a:cf:3e:70:55:da:6b:d9:a8:c5:53:91:fd:3e:13:53:
4b:59:8b:20:a0:e8:78:c3:ba:00:8c:e0:50:e1:93:80:4e:8b:
3e:83:25:c0:9c:c6:c9:34:c2:0e:b0:63:a2:4f:92:fa:40:20:
c0:c0:14:a0:43:5f:5e:5f:fc:f5:a6:6b:6a:36:e4:20:1d:9a:
95:12:5b:93:d2:24:cd:1d:e9:69:41:d6:69:60:3e:23:38:00:
1f:0f:aa:1a:0f:5e:b3:94:27:42:6d:59:03:91:97:0f:82:ef:
17:27:8b:bd:df:d3:09:65:43:49:00:c8:70:f2:b2:05:84:ad:
50:ab:6f:1f:b3:0b:e4:b1:c7:34:fe:60:4a:f1:7a:04:b1:83:
db:3c:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:33 2026 by rpki-client