Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: 6YWZZr0jvhKUg94dGTLvI9burYUoiwa+uPiV9mvXxrA=
Subject key identifier: 0A:4C:23:83:05:48:46:93:8C:B2:F6:05:AE:42:A3:84:12:0C:DA:B3
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019D28163E12033FE2F6C08BFFD401C88D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 176E
Signing time: Thu 26 Mar 2026 03:00:39 +0000
Manifest this update: Thu 26 Mar 2026 03:00:39 +0000
Manifest next update: Fri 27 Mar 2026 03:00:39 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: S/MjDY0cb5Cq2FI8r7xjmdRTLSW2yQAhzafhSXJqZVQ=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3e:12:03:3f:e2:f6:c0:8b:ff:d4:01:c8:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Mar 26 03:00:39 2026 GMT
Not After : Mar 27 03:00:39 2026 GMT
Subject: CN=0a4c2383054846938cb2f605ae42a384120cdab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:1f:73:e7:11:d7:84:d2:42:b7:78:ad:e1:
a3:93:2c:51:1d:f7:90:ae:7a:ed:aa:e7:74:1b:29:
df:3e:2a:0e:03:ed:71:ae:0d:63:e0:8b:91:24:16:
ec:da:c2:28:62:f9:95:85:a4:e7:1c:ca:71:b1:70:
ce:a4:59:be:9c:cb:14:04:9b:4b:ef:dc:b4:ba:06:
c4:60:44:37:45:81:ca:75:ae:a4:71:4a:f2:44:26:
a3:5a:23:79:4f:fb:ad:57:a8:dd:19:6c:32:82:b0:
36:88:79:e9:b7:0a:79:18:57:45:dc:7b:b7:20:04:
1b:f3:0e:a4:d8:fa:62:17:e8:49:ff:ab:67:e0:dc:
ba:02:a6:f6:17:f6:df:e0:17:6c:02:6a:2d:59:0a:
e1:d6:2f:5c:9c:60:b8:7d:fc:d6:d0:dc:e7:01:ec:
ee:24:40:8d:b9:c5:e6:c0:46:96:fd:c9:16:04:72:
44:36:09:0b:fc:c3:96:83:1c:22:9f:c4:b4:0b:77:
b4:a5:d7:f1:cf:a6:84:b3:dd:de:a2:82:a1:ad:99:
fd:69:25:8f:93:77:be:96:c2:fe:3a:c2:50:99:db:
25:5d:5b:45:be:d5:48:5f:6d:40:62:8b:9d:c3:9f:
12:fe:35:f1:c3:62:e4:93:77:a4:f3:af:49:97:ff:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:23:83:05:48:46:93:8C:B2:F6:05:AE:42:A3:84:12:0C:DA:B3
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:46:26:e8:36:2a:bf:bc:78:eb:e3:1d:0f:eb:72:7e:cd:02:
11:6f:4b:f5:da:1f:f7:8f:c2:82:8d:35:4f:6d:0c:2b:93:e5:
b1:84:52:5e:ec:05:9a:22:d8:c8:51:45:80:82:9e:f7:99:5a:
4c:6f:ae:b3:0d:08:c7:30:01:61:01:84:ac:00:3b:bf:27:b7:
fe:60:50:4e:96:e7:4c:e3:4f:29:e1:16:1c:19:4f:02:11:a0:
57:1e:d6:bb:08:12:74:9e:72:a2:da:44:f6:74:58:88:bd:84:
49:0a:02:41:07:fe:43:47:02:56:93:90:21:00:59:8a:ed:df:
44:de:5c:40:5c:a5:38:75:e5:2e:a8:e4:74:ad:9b:54:01:18:
36:d3:f8:bf:bb:52:8b:d2:91:70:a5:73:19:17:79:5c:52:04:
56:a6:b9:5e:5f:56:29:b8:c0:53:a6:db:28:ca:7f:42:99:b2:
69:b2:4a:a4:d0:26:53:23:9d:cd:d0:f8:36:d1:de:f1:40:a7:
0a:80:bb:22:66:da:ae:ca:2a:1f:41:e2:1e:de:9c:94:73:4f:
4e:aa:62:91:30:00:c5:06:2f:16:1f:4f:fa:c4:85:91:43:2f:
9e:a7:66:7d:33:3c:cc:6a:27:c9:cb:b6:17:a1:6e:0b:27:ef:
bb:d3:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:09 2026 by rpki-client