Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: yp04LS8LDeLITpaPWI3wJw3awpORhpHCCyzsWIiHIgo=
Subject key identifier: 0C:11:67:F9:98:D6:3A:27:87:C5:C3:EE:37:39:EE:9E:FF:A2:EB:63
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 019D2696425F603504369FAF67939FAE3497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 1271
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: bAqvaOAbS_zyWG89lZX643VSXiY.roa (hash: aCU8YvRzFkWCl+qdiCxPi41xQwSF9YId56RdRoh8KaQ=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: FmjPCZ94aJGO3MEjeKA0TK6JK/u+WtCUwzZzWwd/9WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:42:5f:60:35:04:36:9f:af:67:93:9f:ae:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=0c1167f998d63a2787c5c3ee3739ee9effa2eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:0b:42:47:3b:da:3d:0c:d6:05:51:33:d6:
64:99:f8:4c:50:b7:f4:ff:8a:29:d9:ab:64:2a:b5:
60:40:8d:19:3e:c9:b5:6a:cd:82:73:a2:c6:cd:1c:
0c:fe:35:72:ce:01:fd:85:1f:7a:d7:66:f9:d2:52:
d2:b4:12:e6:3c:4d:41:13:87:19:cb:72:d7:76:e2:
97:43:aa:f6:cd:ba:94:52:65:64:64:09:47:10:63:
5a:60:ff:ac:e2:fe:68:0c:7c:5d:6f:6d:6a:c8:3d:
49:5a:ab:e9:99:3f:bc:74:2d:07:0b:31:9a:7a:a3:
7a:a6:cf:e6:34:94:c0:54:45:d8:e7:07:37:b5:91:
db:3a:7e:86:a6:0c:3e:e4:ab:8f:16:8a:6c:90:cf:
7b:4f:30:b4:46:fa:49:b4:03:c8:e2:15:0d:b3:8a:
58:e4:c7:3f:a3:af:96:20:b0:5b:2b:29:ff:51:53:
ce:cf:3a:26:84:c3:90:de:78:4e:3e:9b:91:22:38:
63:ee:86:54:69:1f:a3:d2:40:2d:74:c6:f3:68:74:
79:77:98:19:ff:fd:43:80:45:29:c7:f1:5f:72:d5:
f1:e8:d1:d3:d0:db:24:a6:40:be:47:8c:2d:60:9b:
b4:95:93:56:b6:23:eb:f4:0e:9c:cf:93:03:1c:d1:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:67:F9:98:D6:3A:27:87:C5:C3:EE:37:39:EE:9E:FF:A2:EB:63
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a6:54:08:ec:9e:53:e3:47:05:fa:c2:f8:98:f5:7c:92:a9:
b1:89:43:fb:85:fe:87:49:59:f0:95:03:5c:2f:02:0b:5a:ca:
8f:d0:92:ef:25:84:1a:20:dc:67:fd:5f:fb:33:1c:78:11:4b:
7f:68:ab:c1:79:cb:a9:d4:81:82:ff:61:65:f4:4b:01:1d:33:
fd:fa:44:1d:69:a6:b1:93:31:a3:8c:a3:9e:49:41:b7:d0:b5:
8c:91:15:aa:41:62:27:ba:28:1f:56:0d:cf:a7:d9:07:47:41:
fe:b8:39:3e:20:27:98:76:82:dc:78:8d:a3:d4:b7:21:95:2d:
fb:61:39:0f:85:9b:7e:7b:18:f7:c3:1a:07:df:ad:23:79:2d:
73:2e:66:bb:c4:a8:45:5f:e8:ef:1a:05:dd:1e:da:19:54:72:
fd:6b:81:0f:d2:89:94:ef:11:45:4c:84:a5:63:4c:5d:0d:35:
ba:58:96:e3:26:a2:15:66:78:e0:50:07:94:a7:0c:e5:5b:df:
0a:fd:01:42:fa:ba:a9:da:32:fc:f4:00:75:d3:e4:d5:7c:ee:
2b:29:d2:05:11:bf:42:e6:1d:31:70:30:f0:be:bb:5f:2e:00:
86:cb:cc:e7:79:91:05:d6:42:7e:4c:ae:1b:8d:59:fa:70:42:
ba:4f:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:52 2026 by rpki-client