Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: ixs1kCSU4yFD2Yi6Fl6xxdUX7V6a8mCKI6SXtvKv5KU=
Subject key identifier: D0:65:DA:55:19:2C:28:23:63:57:4C:71:55:56:FD:4F:4B:48:41:40
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 019D2771E904431C300C05F7F4F4F411BF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 16F5
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: PtbnCxuzxnGxPMcNxsPkvokKDhC0sxNq+xoyk1gWMM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e9:04:43:1c:30:0c:05:f7:f4:f4:f4:11:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=d065da55192c282363574c715556fd4f4b484140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:9e:1d:aa:b0:c5:c7:cc:41:0e:cd:94:4e:
94:5d:b8:38:d3:6b:03:f7:21:b3:13:39:27:68:93:
b5:71:38:be:64:fd:b8:0d:4d:a6:86:04:d7:29:f2:
a6:6f:08:7f:58:35:25:a8:40:cd:98:0a:d4:7b:76:
0c:10:b4:e1:c4:fa:02:72:83:48:f9:a2:0d:cb:11:
ad:6d:16:fa:63:ec:5a:07:1c:40:c7:f6:ea:98:9b:
d6:2e:44:e4:2d:a2:fd:96:2e:2e:ff:c3:9a:12:e7:
65:d7:c4:41:dd:5b:68:52:10:4a:5f:ea:e7:87:d6:
02:30:7b:21:fd:20:c1:10:b9:f0:11:15:7d:f1:28:
47:32:03:ec:ff:fa:68:72:a1:fc:19:bc:6d:09:74:
d2:d5:ae:48:25:40:9d:c1:8d:74:de:9f:4d:de:07:
48:3f:b9:ad:69:18:f6:b8:77:02:ee:09:70:d5:f6:
c4:3b:ba:75:34:b4:75:50:24:e1:ef:96:68:b4:60:
c8:3b:30:a1:67:9a:8a:17:c5:51:61:93:a8:b7:2e:
ed:78:a0:d5:ef:0b:b1:37:81:c3:eb:7d:41:1e:63:
cb:b9:bf:e0:f2:f9:af:cf:c7:ec:bb:ba:b2:39:ff:
d9:42:c3:0f:58:a2:69:5d:aa:7a:48:ae:4e:63:59:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:DA:55:19:2C:28:23:63:57:4C:71:55:56:FD:4F:4B:48:41:40
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b7:02:76:4b:31:a1:27:1e:b4:34:5d:e4:fa:99:bc:ae:a3:
29:1e:28:de:2f:47:c8:50:49:d2:df:2a:a8:85:44:08:d3:b1:
5f:37:24:17:70:81:10:9d:d7:14:01:0b:3b:34:0d:15:73:1e:
75:b0:b1:a2:af:22:3d:b0:07:a7:ae:6a:e1:2f:d7:d3:a2:78:
fb:69:de:29:a8:78:65:09:de:e7:ed:72:52:8f:27:26:02:e2:
05:d8:52:dc:98:04:d2:3d:d9:22:a5:91:f9:81:50:16:7a:b7:
04:d4:88:18:60:57:00:f0:fc:06:b4:cc:68:27:88:fb:49:50:
27:78:93:ef:db:42:bb:c4:0e:cc:3b:be:bf:1f:49:6f:24:37:
bc:7b:ae:83:ce:d8:89:1d:96:dc:ab:b4:2b:71:6d:a1:8c:8c:
7c:c9:ca:a3:df:dc:5b:62:3b:9a:91:64:7b:8e:c3:95:93:3d:
1a:f2:08:6b:56:69:8d:af:46:1d:b6:80:2a:79:da:d3:aa:63:
00:ea:d8:ba:82:76:b8:26:64:63:ed:1b:93:9b:bf:9c:1b:c9:
78:53:fb:9d:ca:da:63:62:57:95:df:71:16:16:43:96:b0:ec:
9f:2b:6f:2c:ee:e6:9c:24:6a:fd:71:d1:06:cb:c7:81:09:db:
7b:f6:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:57 2026 by rpki-client