Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier: 6UOcKH7pljQywP2BRz2uxr424+8DAAN8abhtwT0yRoo=
Subject key identifier: 02:01:F0:0B:E4:47:56:B1:DC:E6:17:04:30:2C:B7:F8:29:11:A9:3D
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer: /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial: 019D2703930A705D4C6A9C7CD77C0342C408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number: 0CD2
Signing time: Wed 25 Mar 2026 22:00:38 +0000
Manifest this update: Wed 25 Mar 2026 22:00:38 +0000
Manifest next update: Thu 26 Mar 2026 22:00:38 +0000
Files and hashes: 1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: 6TcCGL0P+tMP24uj86bLlfoL1DA24d00Ir9Cnxwj6YE=)
2: UvT296TDY2CQIThciNgffZ0wmFU.roa (hash: vTAhfAAI/q2ZHiUMxy01M4sUZUAz0nKerT6JRvUEa5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:93:0a:70:5d:4c:6a:9c:7c:d7:7c:03:42:c4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Validity
Not Before: Mar 25 22:00:38 2026 GMT
Not After : Mar 26 22:00:38 2026 GMT
Subject: CN=0201f00be44756b1dce61704302cb7f82911a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:b8:b3:96:e1:bf:6e:6d:ef:10:96:00:86:
55:be:33:66:67:62:d4:e4:0e:9b:62:3f:2c:b7:20:
36:ba:de:c4:f9:97:b9:80:e3:88:86:3d:3e:6d:9d:
55:62:a0:92:9c:95:46:11:84:4e:de:f4:c3:a7:07:
90:9e:0f:2d:67:74:ae:08:b6:5e:bc:fb:66:b8:9d:
2f:1c:10:35:e5:af:ab:3e:4f:e3:af:a2:70:a0:06:
40:76:e1:48:20:cf:0b:3e:39:3c:c9:9c:44:fd:8a:
f8:a7:04:ff:59:11:77:62:ff:6e:74:97:51:50:74:
14:63:0a:89:2f:09:c7:ad:20:3b:08:b3:4b:e0:60:
36:9a:b4:37:ae:b7:6f:93:8c:9b:3c:f1:f3:7f:09:
f5:8b:85:68:d0:da:b3:04:12:e6:aa:29:c3:69:07:
13:eb:2d:f9:48:29:a4:4a:65:3a:cb:59:af:6d:fc:
a3:ea:f1:49:d4:a0:d3:05:86:40:c2:61:58:18:86:
87:79:fa:17:a8:b2:53:79:e8:dc:0d:af:f9:10:8c:
99:7a:21:eb:30:f8:61:97:d8:7c:81:68:16:b3:f9:
86:c6:23:50:a6:b8:83:50:70:93:d9:70:04:f4:1e:
2b:9c:75:e7:54:25:4d:33:63:4b:60:23:9a:07:15:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:F0:0B:E4:47:56:B1:DC:E6:17:04:30:2C:B7:F8:29:11:A9:3D
X509v3 Authority Key Identifier:
keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e2:89:35:4d:26:68:72:6d:bc:3b:56:6c:58:b0:c1:86:fc:
48:5a:92:2b:18:5c:0b:b6:42:92:05:fd:b1:9f:03:b9:3a:c9:
32:2f:b9:06:0f:65:3c:79:76:32:f4:9d:7b:70:26:54:ef:aa:
0f:36:00:41:9b:40:2e:ab:9e:8e:f0:aa:25:7e:28:74:42:fe:
4d:bc:ca:86:0e:78:d3:b8:1d:9a:5c:6a:76:f0:db:1d:40:b5:
76:f9:fc:6d:f0:a5:1a:bc:ec:7b:1a:c7:1e:97:2f:ca:24:03:
0c:93:8c:fe:e4:ec:c2:78:cf:fc:02:a1:2e:a9:f6:ef:09:6e:
d2:d5:92:ec:f5:8c:59:26:d2:78:6c:35:5d:1a:70:85:92:14:
17:a0:23:0d:eb:3d:a9:92:eb:70:ca:a8:f2:21:4d:46:b9:0a:
2a:38:89:b4:23:53:00:b3:6c:1d:16:0c:58:22:8a:86:12:45:
c0:2b:85:0a:b8:7a:48:ec:68:67:d3:c6:06:66:d4:fc:9c:df:
68:94:ca:33:9c:ed:a3:ed:c6:c8:e1:bc:61:67:9f:69:2d:13:
cf:a7:b1:c2:bd:87:b5:a1:25:38:31:68:00:58:04:13:ab:9b:
21:e5:75:bc:fa:bf:f3:8f:41:1e:65:5c:76:95:78:5c:76:55:
26:93:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:56 2026 by rpki-client