Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: 9/BMCJ0KkCKY5iZjTkjc+U3uCPk/MKcqAZuRabuZERw=
Subject key identifier: AC:74:0B:0B:E4:F8:7D:A8:94:D6:28:B8:92:AA:03:C2:A0:44:C7:E7
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019D2584179ABCBDAD66F6565BA8AA622419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 15:01:46 +0000
Manifest this update: Wed 25 Mar 2026 15:01:46 +0000
Manifest next update: Thu 26 Mar 2026 15:01:46 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: vl9qMF4Z7Sy5p4iajQdlO4TphRtzbn0jwVJ5ci39IOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:17:9a:bc:bd:ad:66:f6:56:5b:a8:aa:62:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Mar 25 15:01:46 2026 GMT
Not After : Mar 26 15:01:46 2026 GMT
Subject: CN=ac740b0be4f87da894d628b892aa03c2a044c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:23:e4:e0:cf:79:a2:25:28:f9:04:55:b0:
48:5b:46:43:e4:ac:06:8b:d9:82:7a:d1:c2:14:fa:
fc:08:12:11:29:72:a0:b6:85:cf:0f:62:83:91:db:
5d:3f:ef:bb:76:1b:1d:cc:99:d1:90:c9:ff:e4:f0:
dc:2f:ef:0a:9c:65:3e:81:cc:7f:4b:6b:57:1f:58:
e7:e5:90:57:b9:a6:5c:a1:37:1d:85:e9:d4:b0:f0:
6c:8f:db:4c:98:64:6c:de:0b:94:d8:ee:3f:83:84:
5e:ea:0c:8f:7a:54:50:0a:20:6c:0a:81:dc:4d:d3:
75:ec:d6:da:04:08:ce:a6:b5:3b:ee:3d:ae:33:6e:
1e:b8:e3:7d:8b:49:39:3c:bb:75:bc:a6:ed:cc:f4:
7d:4b:63:f2:22:36:86:c2:f9:35:da:4c:0a:23:53:
73:05:9f:54:ed:87:d4:60:bf:81:9d:cf:f6:3e:6a:
fe:d9:f9:54:2d:72:bb:f6:6a:12:13:47:c7:63:d4:
b4:f7:50:8c:eb:c4:d5:8b:36:da:0b:33:c7:95:74:
e7:ef:68:6d:95:40:b1:e6:8c:db:d8:95:e6:ea:ce:
86:35:de:6c:03:fc:e5:87:79:0b:d6:60:ea:fa:a8:
37:4b:5d:07:31:96:8b:ce:e8:4a:d8:2e:05:f8:14:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:0B:0B:E4:F8:7D:A8:94:D6:28:B8:92:AA:03:C2:A0:44:C7:E7
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:15:af:2c:6a:41:42:0d:72:cb:ac:04:18:2a:1b:a8:06:8d:
24:96:db:cb:21:cb:19:00:f2:83:85:e5:39:bd:58:14:64:76:
ee:6a:5b:d0:5d:85:b2:cf:ad:9c:e5:21:ac:83:13:11:de:f6:
bf:d0:76:26:9d:53:f6:09:c6:da:a5:14:f8:b1:a1:a6:9d:ab:
7b:82:6b:81:95:6f:b4:f6:d9:ac:8d:a3:bc:59:de:14:d2:8e:
ee:9e:09:c3:56:3c:d7:f1:fd:8f:b5:ca:6f:d3:64:83:7a:c3:
44:23:7a:84:64:c0:18:78:ca:39:d7:4a:66:f8:7e:89:18:2c:
fa:b4:e5:9f:86:23:e5:d9:f6:02:74:31:27:70:1c:64:fd:b0:
20:03:5e:9d:31:77:7f:fc:65:5f:fe:40:d2:e6:84:90:4a:b4:
80:de:b8:e9:74:9c:11:82:7d:41:70:74:1b:95:79:27:91:93:
77:f0:9b:30:32:a0:5b:31:84:db:19:5e:da:97:fb:ba:d3:d3:
e7:88:6e:30:4b:2a:27:d8:bb:51:00:68:09:a1:38:d4:91:1a:
bc:f5:07:d2:2b:a2:3c:a0:5a:30:a9:54:e7:80:df:77:41:1d:
ba:ca:e2:0b:87:56:49:15:a9:22:5b:5e:79:54:61:0b:16:91:
58:c8:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:48 2026 by rpki-client