Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: xPhNslaZVeQJw1ynP5E3gChXmIpdUbk/2tJml7HaqU0=
Subject key identifier: 1D:24:45:FF:F1:E9:9C:A6:8B:F4:9A:E6:F7:B4:D3:8E:18:59:31:46
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019D2B4E64A934401D75A4B3EA03AB34EA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0C40
Signing time: Thu 26 Mar 2026 18:00:50 +0000
Manifest this update: Thu 26 Mar 2026 18:00:50 +0000
Manifest next update: Fri 27 Mar 2026 18:00:50 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: vKmiwVeaK+KdwRx3/+ze0FlEWtl3TM/5ex49C711hJU=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:64:a9:34:40:1d:75:a4:b3:ea:03:ab:34:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Mar 26 18:00:50 2026 GMT
Not After : Mar 27 18:00:50 2026 GMT
Subject: CN=1d2445fff1e99ca68bf49ae6f7b4d38e18593146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:a2:88:20:18:71:ba:06:47:19:a0:1f:86:
03:e0:91:7e:f4:10:42:f1:ab:6f:25:7f:ce:ee:c6:
34:03:1a:58:c0:27:41:8a:15:bc:5a:18:12:32:16:
3a:c3:c4:82:7d:97:37:08:4e:a3:84:51:59:31:53:
2d:c5:74:47:d8:d3:45:d6:a7:e2:e6:8e:3e:ec:8e:
09:fc:3f:16:de:f2:21:ba:67:0b:c7:6d:fd:d2:05:
cc:90:7e:ce:20:9d:72:89:48:1d:c3:f8:f6:b3:ee:
fd:c4:86:ac:22:df:f4:32:2e:c1:83:63:4a:b9:34:
f9:c8:db:63:2f:8f:34:d2:7c:26:5d:6d:d0:db:da:
9d:fd:10:8f:40:54:79:39:f1:b8:c8:61:5f:0b:82:
93:e1:17:cf:ad:2d:63:e1:be:7a:c8:63:99:80:9a:
29:cc:35:d0:3e:08:3e:1b:8d:af:65:1b:54:f6:68:
65:8a:d4:11:9c:d9:f7:75:ec:dd:e5:65:22:1f:52:
30:5d:05:0e:f2:9c:f7:3c:ab:e8:08:b8:53:c4:30:
98:de:3c:4e:16:d1:ba:50:29:75:18:8d:e3:c6:75:
c3:d1:40:98:5b:eb:d1:88:ca:2b:7f:c7:20:c3:6b:
c0:ad:39:f8:c5:c3:8b:b6:e9:91:3a:3b:6a:17:52:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:45:FF:F1:E9:9C:A6:8B:F4:9A:E6:F7:B4:D3:8E:18:59:31:46
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:ae:d9:e2:b0:3f:7c:24:a8:00:04:8c:5b:f4:00:b5:e1:
e8:db:67:58:3d:e7:69:3b:fc:a5:40:d5:27:33:37:35:87:50:
a9:bc:ce:95:98:c9:cd:49:e4:53:d7:2a:a6:e8:16:2a:16:a3:
14:d2:91:b4:6f:90:cb:32:78:98:83:0f:c2:80:71:a0:de:c6:
c7:7c:bb:2e:f4:97:f8:50:d4:3b:ae:c7:68:cf:34:ed:59:94:
4c:be:a6:55:0d:fe:cc:ad:41:8c:43:16:56:70:bf:1f:a5:c8:
4f:6b:ee:0e:ec:28:06:58:27:ff:e5:87:be:77:dd:fd:bb:9f:
f0:93:31:d9:9d:cd:54:26:06:60:07:4d:53:59:1b:ad:bb:5d:
b2:be:9a:7a:21:3a:5d:60:8b:a2:2c:f1:b1:19:b1:53:22:6e:
5e:8d:bd:1b:b3:5c:3a:d6:e8:71:9f:37:03:de:39:57:8a:e4:
21:24:f3:36:a6:f3:80:c6:a1:2b:9e:f4:ea:1e:9c:8f:de:32:
5e:e4:2a:76:d2:1e:0e:9b:b4:08:27:8c:8b:8e:7d:10:f7:f2:
70:f4:0d:12:56:ca:ec:0e:27:9a:df:7f:12:11:01:1e:af:c8:
6a:34:79:67:21:b2:e1:16:9b:fa:dc:60:28:b8:e8:85:41:d7:
05:c1:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:38 2026 by rpki-client