Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: cW9zJJBM0Zic6qCMaztyG56iMByQa6OybX4PdmZaTPo=
Subject key identifier: A0:B2:12:0E:08:53:03:39:13:B5:9D:64:AD:3C:A1:9F:09:ED:23:72
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 019D265F7FA527B7344A5CE2D5AF04B2E9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 098A
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: WSXBPyosHY7DPpfOMB1g22D9QTMIN8Jo5EojcmgnEnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7f:a5:27:b7:34:4a:5c:e2:d5:af:04:b2:e9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=a0b2120e0853033913b59d64ad3ca19f09ed2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:0b:70:31:cb:10:4a:be:f6:36:fa:36:3a:
cf:78:61:43:7e:f6:8d:f1:7e:99:91:c3:a5:3e:3f:
aa:9f:77:02:62:45:94:d1:b8:04:9d:31:ae:0e:81:
89:f8:5e:2a:79:8c:05:9d:92:9c:b7:a0:1d:7e:2b:
a5:e7:bf:a2:3d:56:f2:65:ca:ba:5a:d4:1c:26:27:
22:48:9d:c4:48:17:5f:43:78:f7:0e:40:1b:a5:e6:
f7:2c:94:32:c6:d8:4e:09:b8:8a:7f:96:5d:e4:e5:
c7:10:d8:81:e7:73:bc:81:55:3d:73:fc:13:5b:03:
fe:51:8b:eb:4b:ba:31:f6:6e:91:1c:76:90:7c:18:
55:e0:3d:0c:4e:4d:55:ba:e7:11:a5:e8:8d:a5:15:
c7:f5:c2:9c:d4:4d:92:a3:01:c5:97:4d:a0:a8:bd:
d0:37:fb:fb:16:3f:99:19:2f:30:79:ac:50:ec:c2:
e4:95:a1:e3:b2:57:77:dc:95:9e:71:2f:15:77:f8:
5d:92:2d:57:56:67:90:53:ec:0a:0d:dc:4a:e4:3a:
58:07:24:52:82:e7:db:96:d4:11:fb:19:e9:51:2a:
b7:90:26:7e:3a:0a:54:66:03:66:0e:67:0f:da:40:
51:79:2a:3f:9d:e4:21:e1:70:73:e0:11:38:54:a9:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:12:0E:08:53:03:39:13:B5:9D:64:AD:3C:A1:9F:09:ED:23:72
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b8:f9:03:40:2b:4a:c1:50:f7:9c:bc:65:b6:87:da:2e:9a:
8c:10:b2:7c:96:fe:b8:e3:88:68:3e:32:0c:a3:da:8d:ca:60:
73:31:ad:c6:79:bb:dd:5e:97:31:dd:95:29:ca:95:fd:4a:65:
06:82:85:79:06:44:e9:40:9b:fd:94:3a:00:b0:06:59:e5:0e:
cb:13:51:78:3f:6a:34:74:f3:74:dd:fb:3b:a2:7f:4e:a3:97:
fa:31:c2:4d:fb:ba:97:cf:d0:58:72:19:60:d1:6d:6a:de:62:
fe:0b:6c:e4:70:3a:26:9b:bb:79:f6:8c:91:a3:c3:31:41:a6:
29:61:60:e1:05:e9:f6:9d:84:f4:94:d4:bd:fa:cb:55:22:56:
de:a6:79:e6:f0:52:8b:d6:8d:d6:75:8c:bc:8a:a3:a8:74:56:
b8:e8:5f:da:19:19:98:8e:8f:ce:68:08:59:ab:9e:ee:51:14:
fd:dd:ae:62:c0:ad:a4:60:80:69:6e:57:75:5c:ea:68:af:2e:
c1:07:53:7d:2c:68:f4:b5:e8:f9:dd:be:6c:b2:19:85:38:a7:
d7:b2:d4:ca:27:bf:40:95:cc:4a:ca:8f:44:5b:a9:5f:b6:8e:
ac:fa:60:71:e6:3d:3d:ee:f1:42:67:29:13:42:03:73:89:31:
7b:4a:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:27 2026 by rpki-client