Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: vMPmtek7UO75MXsy0SZuxUgSwmtIZHX7Fx0+UCzmrec=
Subject key identifier: BE:D5:FC:E1:81:5B:B8:DC:D2:F0:0E:73:21:76:53:E2:C2:9F:F1:6D
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019D273ACF01A870A0052F5F265B540234BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0CD3
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: Tk/ke1KU7ieeCLSCX1G7rYjm3xb/F8IQPRBcDvMetKk=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cf:01:a8:70:a0:05:2f:5f:26:5b:54:02:34:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=bed5fce1815bb8dcd2f00e73217653e2c29ff16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:3e:30:3b:41:ad:5d:46:46:fe:83:ec:7b:
04:8c:8a:4a:2a:c7:17:ef:1c:11:b4:e1:46:b1:04:
b9:98:73:a1:9c:6c:2c:4f:27:74:32:8a:96:f0:33:
12:fe:65:c9:b6:00:8d:c4:02:40:fd:bb:10:36:bc:
84:06:dd:ee:94:53:ad:84:76:9b:58:d7:9a:73:90:
ea:82:86:23:aa:6d:78:96:77:2e:8a:86:5b:60:88:
6e:e9:bb:d0:18:54:9d:5a:7e:0a:56:ed:01:f5:ca:
12:b5:cd:d3:92:49:52:c3:3e:fa:cb:62:e8:c4:24:
6b:42:d2:8e:b2:99:54:f6:59:2b:60:82:0f:ba:31:
26:ed:14:66:8b:37:51:0d:92:3b:96:5c:80:7b:b8:
ad:e7:08:3d:ea:67:57:02:5c:5c:28:2c:67:af:ca:
2f:1e:99:50:b8:c4:9d:e4:f9:30:6c:f2:da:ae:a6:
81:10:b4:aa:aa:04:9f:11:87:0b:4f:38:54:ec:25:
41:cc:57:96:66:31:37:5f:52:9f:74:41:d0:17:ae:
0a:4e:75:ca:0b:35:d9:96:25:46:e3:c9:72:b0:1d:
6f:70:95:e7:cd:bd:fe:b8:01:f0:c2:f2:42:b2:a2:
4c:d5:94:f8:6f:44:33:d6:9c:52:38:94:b1:49:f4:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:FC:E1:81:5B:B8:DC:D2:F0:0E:73:21:76:53:E2:C2:9F:F1:6D
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:db:4b:92:2a:99:c4:51:96:bb:11:fe:31:c1:26:74:a5:
b7:3c:51:b4:5f:87:23:30:50:b9:50:83:d7:e0:c1:bc:f1:da:
3c:10:22:84:f5:e2:4b:55:43:89:64:f8:f2:e5:0b:54:de:6a:
b9:13:d7:ef:9d:a0:74:aa:61:43:22:9a:98:51:05:c9:f6:98:
93:dc:8a:b2:91:5b:5b:53:a5:f2:ac:a5:a7:2d:8c:fa:b2:13:
d4:d5:c9:d3:97:5d:e2:6f:2e:9b:46:5b:ee:6b:18:31:ec:89:
b5:81:b4:94:5b:fd:9e:91:6a:dc:5c:f2:5d:45:bf:92:e7:0b:
2f:b4:9f:a7:73:9f:20:fe:bf:4a:14:11:12:42:77:d5:86:bc:
cf:27:04:82:04:7e:cf:5d:51:b5:87:0d:a0:d5:2f:c8:1e:29:
c7:62:12:ea:c3:a4:69:04:e1:4f:3d:f6:7b:68:2d:af:4d:83:
41:6f:62:ac:e5:bf:0f:24:45:6e:51:dc:d2:2e:d4:35:c1:04:
48:7e:44:75:20:98:62:85:82:5e:ad:d8:08:ac:1c:90:de:50:
05:69:b9:28:69:09:64:01:f4:12:7b:3c:d1:a1:24:18:87:99:
bf:c5:a5:69:db:c8:06:eb:c0:3c:ba:de:50:b4:fe:cd:a3:a9:
0b:31:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:19 2026 by rpki-client