Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: ox3G/gJ4kXn72MLm7VTMeCHJa6dLx0vDaVYOOYYFW5Y=
Subject key identifier: C3:E9:B9:C5:91:19:A0:7C:68:E4:64:11:37:96:79:7F:FF:3C:10:51
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019D27DFC3658E921468B879E1C6683FF5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 15FF
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: vc8V1NjIQdq3fASsDAvggFcs/6yHG54O09asFoVqOSs=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c3:65:8e:92:14:68:b8:79:e1:c6:68:3f:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=c3e9b9c59119a07c68e464113796797fff3c1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:9b:71:ba:e7:35:36:6c:e3:6e:8a:6b:ed:
af:26:f2:0a:c3:be:57:b1:cd:b7:57:88:07:36:12:
77:be:e9:4b:53:b4:d6:d4:7b:c7:ae:ec:6a:30:41:
57:bb:98:57:c7:4d:56:43:e5:60:0c:b7:a5:74:5f:
18:4b:25:b2:ee:eb:b5:fa:ac:c9:48:b4:82:fd:c6:
a2:ac:77:8c:7e:61:0b:90:29:84:92:44:c2:1a:db:
ae:3d:21:30:46:10:8a:42:3f:b5:c2:2c:8b:29:09:
1c:9c:97:de:f2:ca:22:00:d3:17:ca:12:33:85:c3:
69:d3:ec:a9:f0:e6:28:f6:6d:98:88:29:25:de:93:
9d:2c:b3:8d:6d:4e:1b:91:65:b5:09:29:25:05:4f:
a5:d6:cb:e4:c2:be:f5:0b:ce:82:39:c4:47:ad:bf:
ed:5f:87:89:e2:f6:a8:d4:ee:43:2b:e6:71:b5:13:
52:e6:7c:dc:5a:96:db:0c:7c:a6:bc:a9:96:56:e9:
36:fb:d9:27:f1:b6:07:9b:2e:9f:13:1f:d6:cd:b0:
66:2d:a2:b4:b2:cd:6e:d1:5b:4c:b4:84:a3:41:97:
f6:88:04:da:34:56:eb:df:77:07:0c:9a:01:ae:be:
89:48:b4:a1:5d:70:a1:38:63:66:3b:67:22:b1:27:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:B9:C5:91:19:A0:7C:68:E4:64:11:37:96:79:7F:FF:3C:10:51
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:40:32:46:e8:9a:63:35:c0:c7:65:c4:42:6c:1a:97:6e:
e9:02:22:7f:ef:27:da:19:67:f3:4e:e8:9e:4b:b4:42:d7:1e:
91:ab:ba:0d:0f:a4:49:b6:15:c4:98:a2:d5:87:b8:f9:79:9c:
c3:60:99:b3:ad:50:c5:bc:d7:08:ac:31:d9:0c:46:30:fe:6f:
a0:5c:df:ff:96:32:be:c9:2a:d3:7a:02:f3:a2:48:f1:b5:ca:
cd:d2:7f:11:9b:0e:36:81:cb:76:0f:e8:21:07:0f:79:0e:6a:
c3:3e:86:a7:00:12:64:a0:9c:a9:48:17:a6:f6:16:b1:37:51:
54:92:ae:bd:00:96:8b:27:fa:14:56:67:c8:e3:82:e2:aa:fe:
27:e1:ce:58:3e:7c:3a:ea:c5:25:78:09:e3:64:81:11:01:7b:
89:53:b0:0b:53:4e:d2:b8:b7:6e:cf:8e:be:bb:b1:70:3a:4b:
2e:4c:68:1b:12:57:e5:42:a5:04:a6:2a:1f:fd:b3:1c:bb:3c:
70:8e:ab:b0:6d:9a:e5:4a:63:1b:ac:77:96:63:76:0b:01:a2:
74:af:5a:4e:54:4c:b3:88:da:ad:15:8a:ed:9d:da:23:be:dd:
0a:cc:d3:fe:e3:03:79:0e:48:5e:0a:26:71:c9:ae:5d:85:52:
34:78:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:10 2026 by rpki-client