Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: uWKpjNsTJgSNub97kdrFLK9gXHoIoE23EbV5f9dyK7M=
Subject key identifier: 28:E6:4B:8B:87:3D:66:34:46:D4:73:A4:30:28:6F:68:FD:99:28:B8
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019D265F99B03A1CE5AB3D2EE1AC23FD5804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 1023
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: MmK2fKKsKx+7K4znHS7kAQTVkyLWIa9nW37TP2/cD2E=)
2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:99:b0:3a:1c:e5:ab:3d:2e:e1:ac:23:fd:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=28e64b8b873d663446d473a430286f68fd9928b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:1b:86:21:60:bc:a4:ba:9f:7a:dd:86:65:
6d:5d:18:4f:fb:01:81:2b:aa:f2:da:fb:8b:5f:4f:
ff:0f:ec:ef:1e:0e:82:13:96:e0:c6:0c:7f:3a:31:
e1:b0:0b:23:0a:44:5c:53:4b:b5:81:4e:30:76:9e:
a2:d1:a8:73:18:53:7f:1f:35:d1:10:bf:32:e9:0a:
eb:dc:40:f2:c2:10:a8:8a:5d:4b:07:7d:b0:5f:7c:
66:d6:3d:73:dc:32:d9:97:1a:b9:9b:2d:b0:60:9c:
67:b5:59:57:29:e6:f9:b4:20:75:5a:f3:ec:6c:1f:
1c:2a:a5:dd:1c:5a:c2:4f:e5:78:2e:0d:7f:f4:41:
16:86:5d:af:d8:73:56:59:a9:9f:12:38:a3:db:a0:
32:79:d6:44:e4:f8:66:26:85:b1:8c:af:50:df:42:
ba:90:26:34:10:96:3c:f4:6f:91:a4:af:f9:36:fe:
74:0f:54:fb:55:cf:ec:39:bf:ac:f1:56:b2:ab:17:
26:cf:32:4b:50:db:b1:9f:bf:46:37:bb:07:ce:ef:
3c:15:6c:b6:55:84:8e:7f:a1:1c:c2:ee:1a:52:c3:
e1:6e:07:e4:44:f9:68:a9:7a:c6:92:3b:61:6b:ff:
ae:5c:16:06:a3:4e:fb:71:9a:84:38:c2:78:29:e6:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:4B:8B:87:3D:66:34:46:D4:73:A4:30:28:6F:68:FD:99:28:B8
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:5a:98:69:d2:54:bb:99:61:42:45:12:25:9e:8b:40:c7:
f3:98:af:2f:02:68:37:52:55:8a:f3:95:18:df:f3:3c:09:22:
bc:21:01:33:d3:63:d8:2f:10:f5:25:2d:f2:7e:92:b2:3e:6a:
c3:12:3b:13:40:e1:12:71:63:79:95:20:96:06:e7:31:fc:50:
31:13:bc:80:fd:bd:1d:43:20:82:7c:40:17:28:4c:b3:29:6d:
08:f1:0e:90:c1:a6:ab:9d:58:e5:92:02:ff:72:e1:89:05:99:
0c:1f:28:50:40:f0:ba:6d:d5:4e:00:b2:ef:3e:7e:25:b2:4c:
3a:6b:64:51:f2:86:4c:d7:4f:d3:76:bf:75:70:6b:d2:ec:7c:
e6:12:25:21:e5:bd:d5:eb:2c:d4:a4:c1:9c:e7:01:db:40:f1:
b2:cd:f3:18:e1:39:5d:ab:45:6f:5e:6d:3e:c2:17:a3:05:e4:
a8:86:1f:8e:60:89:d0:22:fa:da:7e:a4:3f:00:57:35:cd:72:
87:7b:5f:f6:24:3b:aa:8e:87:09:e6:85:b8:88:49:07:d4:e7:
ba:66:bc:cb:86:b3:ae:e4:b5:c1:82:32:94:45:2b:e5:a4:79:
15:16:bc:cf:90:a3:a1:f0:40:6b:2f:b1:31:32:8d:61:b7:68:
a2:71:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:16 2026 by rpki-client