
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: eWzNVO5eMmGjjt8pLJRJEzS+wEzan+AQIhvnYdcmvq0=
Subject key identifier: 94:94:8E:14:EC:76:AD:21:17:0C:B7:FB:A2:92:D9:83:AF:37:18:5D
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019D2628849E2F87F6C3B90C9854BEC3B83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: R0dy5AREqSe/YNjbz63/7S9r3Tl6CczknHqHBq6jpQQ=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:84:9e:2f:87:f6:c3:b9:0c:98:54:be:c3:b8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=94948e14ec76ad21170cb7fba292d983af37185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:06:5d:34:83:c3:31:59:dc:80:e3:b8:85:
22:ce:38:ea:5a:56:02:2f:72:f5:ea:b4:5d:ea:e1:
4f:2d:5c:19:63:bf:5d:34:c3:dd:42:e9:e8:8f:64:
42:6a:2d:34:5f:40:01:72:fa:21:ee:4b:f5:39:42:
67:5d:be:c4:f9:30:82:58:e9:f7:16:9b:5f:d6:ae:
e0:bf:de:cc:a8:a6:50:b4:18:ec:9e:00:96:09:1e:
80:25:7c:40:c4:cb:80:e8:1f:24:ee:0a:ff:ec:30:
ee:a9:ae:eb:74:b6:14:fb:ee:e6:08:da:8a:7d:e0:
00:12:21:57:3a:c1:e9:e5:d4:a1:19:ef:54:e0:03:
8b:de:83:d6:69:d4:7b:4f:f6:20:ff:e0:f6:8e:ff:
8a:79:05:9c:a5:6c:11:1c:71:e3:2e:1e:4d:ea:dd:
7f:cb:d5:db:1e:a6:9e:1b:2e:4f:36:fe:8d:7b:94:
c4:04:1d:3a:e9:77:d4:fc:29:75:f6:9a:88:2d:86:
34:da:6d:4f:76:1d:93:74:60:c9:8d:5e:db:a5:9d:
fe:75:52:af:21:ba:ab:80:64:d2:cb:6f:c2:35:2c:
b0:51:4f:fd:55:ef:7e:7f:71:f8:9b:9c:a6:53:22:
f2:f4:98:89:2f:8c:4d:79:f4:54:36:68:7d:29:39:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:8E:14:EC:76:AD:21:17:0C:B7:FB:A2:92:D9:83:AF:37:18:5D
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:20:44:41:b2:2b:95:e9:92:32:ce:21:5c:20:d9:10:0c:
5e:fc:a1:01:3f:18:b9:b8:59:00:d6:54:bd:d8:29:cc:17:2a:
69:26:7d:e2:15:f1:74:3b:f9:a0:ef:4e:ac:49:98:66:a7:68:
88:ba:7c:b3:b3:19:92:16:0a:6c:a6:14:ba:22:c7:53:79:8f:
22:08:40:b0:9f:77:ea:f8:a0:6e:73:c9:65:b8:9f:bc:10:69:
cb:bf:77:7a:93:23:e6:26:01:26:9e:04:a3:f8:48:e0:04:04:
85:3b:81:09:55:71:09:79:c7:2c:ad:1a:6e:93:bc:a2:90:b0:
d9:53:96:23:4f:18:1b:7b:3f:20:d2:6a:b0:09:5d:ff:43:51:
e2:b6:79:21:0c:3c:dd:8e:92:8c:75:56:4b:b6:49:8b:ce:27:
9d:aa:86:95:6e:02:07:91:c4:bf:9f:1b:48:7d:fc:29:0c:33:
c7:b0:26:e6:ce:33:b6:bb:5f:d3:e8:70:a4:18:fe:6c:4e:40:
33:0a:d5:82:3c:be:ae:c5:ea:3c:c7:53:db:2b:ec:12:d3:f3:
86:03:0b:43:fb:f4:82:56:10:86:ac:63:2a:75:77:16:48:8e:
db:af:81:ae:fa:0f:8b:1c:3a:11:0b:2e:3e:a6:7d:0a:97:33:
f4:a4:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:49 2026 by rpki-client