Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: +Uki89kgNBngvcj0QoYPG/X70y1/ahtqk+ISzDHsoXQ=
Subject key identifier: F2:91:DE:AD:6D:0E:07:25:C3:88:8E:00:8F:C3:B9:1D:45:F1:98:C0
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019D2696169ED78CE44E8C93F2A63BC7BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: D6
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: oah4ao4BQYnFS997Vk1duLiy7zq5kvGOSwKN8fWEPcI=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:16:9e:d7:8c:e4:4e:8c:93:f2:a6:3b:c7:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=f291dead6d0e0725c3888e008fc3b91d45f198c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:16:8f:02:b9:34:ea:56:eb:34:dc:e7:59:
73:ab:90:b3:8d:c5:a3:c5:19:5d:e5:fd:90:f7:b2:
bb:7e:dd:2d:f0:d2:00:0d:0c:19:83:b0:34:bf:97:
ee:45:8c:22:53:03:e7:84:56:91:27:c8:79:59:81:
73:87:51:ce:95:9b:b4:09:2f:e7:b3:c5:98:7c:c1:
2e:db:ff:03:72:72:b9:37:55:2e:1c:ac:c6:68:08:
49:95:82:d1:6c:0f:53:0f:d1:08:4e:fd:e6:ee:37:
16:8d:a0:39:2a:7d:b3:0f:e8:39:e8:7a:18:75:39:
17:76:fc:55:3e:48:0f:a1:d2:fd:b1:0a:eb:22:5e:
27:62:d1:3b:ca:14:6f:c6:8d:f2:43:27:4c:3c:ed:
78:a2:36:ed:c6:fa:32:db:f9:ee:62:b5:28:30:fb:
7f:39:e1:37:40:21:a5:41:4c:f8:d2:87:95:a9:30:
9c:00:56:0f:d1:71:31:4f:5c:ac:e0:9f:d6:c0:9e:
75:f8:0c:2a:d8:9a:a7:37:97:78:71:6a:c1:e8:c7:
84:7f:87:79:29:c6:73:2f:93:bc:ae:16:72:a9:03:
d8:5b:1a:0d:19:35:59:ae:35:e1:c5:5a:7a:09:04:
f5:82:d7:18:87:d3:38:a0:3a:f5:70:6a:ed:67:61:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:DE:AD:6D:0E:07:25:C3:88:8E:00:8F:C3:B9:1D:45:F1:98:C0
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:70:61:03:e0:71:5e:85:7b:03:8c:83:d6:b3:3f:4a:49:1b:
a5:73:1f:8f:c1:28:3d:f7:d1:1e:0f:3a:2b:de:77:93:b1:2d:
b4:44:55:f5:3c:d2:6a:39:47:9b:33:35:f9:03:2f:0f:84:26:
3c:e3:3c:77:cf:c8:69:85:80:a6:51:31:12:ee:b5:7e:ff:22:
f2:14:7c:5e:d0:c8:19:ea:f5:89:28:8f:5c:6a:7e:0a:ef:91:
82:a7:e0:9c:07:e1:65:40:08:98:cb:df:95:ef:da:20:dd:35:
05:70:37:fb:70:cd:63:94:7c:eb:e5:e4:d4:0e:38:e7:db:93:
da:87:51:10:6a:94:53:31:12:f0:75:47:71:67:16:16:f6:03:
19:eb:b6:3c:bb:13:6f:b4:f9:ab:85:6d:9c:4e:79:2d:10:e6:
83:eb:99:aa:4a:59:5c:23:f1:36:76:b4:3f:88:8b:77:53:38:
f7:ca:8a:7c:39:1f:81:a0:ad:45:d7:74:f4:5a:6e:86:cb:cf:
cc:81:58:d9:b4:7a:8b:c8:aa:00:22:e6:f8:fa:28:3e:81:2a:
26:11:fc:b9:85:11:14:83:43:f1:92:40:c4:67:12:f9:51:e6:
b0:5a:1c:4c:dd:dd:3f:f5:4f:2d:92:62:7b:8f:23:e7:c5:9c:
2a:81:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:55 2026 by rpki-client