Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
File: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft (raw, json)
Hash identifier: NxOA8exl5TkUVqAPoGowTyjKCVZa/7hplzCwCHZtEg8=
Subject key identifier: 4F:F8:CD:09:0D:BD:E6:95:8B:D1:A6:3C:61:A9:F7:0E:B6:AD:41:ED
Authority key identifier: FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
Certificate issuer: /CN=fac020f12091a4eba81e4c0466de771db7561650
Certificate serial: 019D329AF75647B8B91967E99A1A6EA5EBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
Manifest number: 2D
Signing time: Sat 28 Mar 2026 04:01:49 +0000
Manifest this update: Sat 28 Mar 2026 04:01:49 +0000
Manifest next update: Sun 29 Mar 2026 04:01:49 +0000
Files and hashes: 1: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl (hash: seqXRdmsNWN2dJofJKtqd41QdcTyonnyIjIDRukM0AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:f7:56:47:b8:b9:19:67:e9:9a:1a:6e:a5:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac020f12091a4eba81e4c0466de771db7561650
Validity
Not Before: Mar 28 04:01:49 2026 GMT
Not After : Mar 29 04:01:49 2026 GMT
Subject: CN=4ff8cd090dbde6958bd1a63c61a9f70eb6ad41ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:c9:2f:0a:a2:75:98:aa:c7:a7:f2:69:45:
d7:cd:cb:dd:8a:0b:78:e9:a2:3a:2b:5a:80:54:33:
8e:ad:84:c9:7e:c3:c0:07:47:14:f1:25:16:43:db:
6b:0a:5d:c8:04:46:83:1b:99:7f:40:41:ee:40:c4:
11:f4:ad:8c:8c:1e:45:16:25:db:64:4b:fa:87:95:
a0:cd:0b:43:6f:ca:3a:26:64:a3:50:1b:ef:11:dc:
60:12:ac:ec:ba:48:c8:69:35:72:9a:8c:6c:b0:95:
2a:e8:b6:9e:d5:e1:79:4d:42:96:cb:21:ba:ed:9e:
20:ed:f2:75:cb:12:99:6d:2e:65:6a:3a:c2:36:f4:
26:c1:d2:32:40:01:26:c5:a6:92:96:77:36:54:5b:
fd:80:c3:38:81:46:10:8a:29:0e:78:bc:cd:53:d9:
7e:1f:d1:af:22:d3:d5:66:2f:37:1e:0b:00:e8:c5:
fd:bd:01:3e:10:a4:31:a4:78:5b:82:6e:5b:a8:4a:
82:22:e6:67:d5:4f:7b:0f:46:31:9e:44:b6:a8:4d:
b2:54:01:2d:41:66:ab:c3:f4:b4:54:cd:eb:04:e7:
d0:50:e1:70:35:72:cd:8c:8f:9f:a0:81:ce:26:bc:
f2:16:f4:87:eb:75:d6:d9:e9:a6:6e:94:f8:ec:0c:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:CD:09:0D:BD:E6:95:8B:D1:A6:3C:61:A9:F7:0E:B6:AD:41:ED
X509v3 Authority Key Identifier:
keyid:FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1f:a8:2d:94:c4:30:a3:f7:e0:3b:a7:df:a7:4e:c8:06:13:
ee:8f:a7:c9:4d:de:26:e2:b3:35:a0:70:d6:86:af:78:e6:85:
84:50:64:34:68:5f:2c:bd:2a:73:e0:c4:d7:35:72:83:2c:f0:
3c:90:d7:0e:f1:1a:3b:3c:b9:7d:52:e0:78:39:4d:6f:e9:58:
a9:62:35:7e:c4:2a:42:03:41:77:b9:83:68:43:64:98:de:5c:
75:eb:fc:f9:0b:8e:f5:3a:c7:d8:dd:fc:57:fd:be:45:47:c6:
2d:1f:91:b8:9c:f0:2a:e8:5e:b1:d7:2d:a4:7a:e8:c4:9d:9a:
aa:c4:18:c2:f4:f6:92:3a:a5:36:55:21:a5:0b:27:35:bc:0b:
74:2f:95:6f:93:df:fb:29:8e:e4:38:8c:b0:cb:ee:fb:a7:7c:
02:61:c9:50:24:b9:7b:d2:7d:1f:6c:c3:c3:62:66:25:83:00:
b6:1b:0c:6a:c9:67:9f:e4:e2:8f:ad:ff:90:2f:fe:90:89:89:
8c:c7:1d:fe:f0:d7:73:ba:1a:78:c1:a3:6a:15:c3:74:e2:a1:
59:3f:5b:a9:8d:a3:60:8a:ab:65:29:4a:e4:e9:3d:6d:b8:49:
c4:ea:32:17:c3:df:fe:ae:51:f3:fd:56:da:9a:38:00:61:a4:
5d:ab:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:53:49 2026 by rpki-client