Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: 5zdqhc5GlncdIplV5SyBwM5NVWIivZU+RYfZv0ug2mk=
Subject key identifier: CB:4E:86:7A:CF:5A:11:28:9A:21:AE:CC:FC:17:47:8E:29:6B:D2:8B
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019D258415F21A5818012B916F9509513B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 02EE
Signing time: Wed 25 Mar 2026 15:01:46 +0000
Manifest this update: Wed 25 Mar 2026 15:01:46 +0000
Manifest next update: Thu 26 Mar 2026 15:01:46 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: 4Pv9QZ7//YIeE/EnEPuFmgfu9cmM1yHffrv81KeCNkk=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:15:f2:1a:58:18:01:2b:91:6f:95:09:51:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Mar 25 15:01:46 2026 GMT
Not After : Mar 26 15:01:46 2026 GMT
Subject: CN=cb4e867acf5a11289a21aeccfc17478e296bd28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:84:ca:98:65:38:5e:f1:aa:cf:c4:3b:73:
24:97:e1:b7:86:9f:54:dc:6b:5b:b7:fc:eb:fe:f5:
ee:00:aa:a8:ca:f3:b2:ac:54:30:b6:a3:7d:25:ef:
e0:7c:4c:25:f0:c5:bb:84:05:be:6e:46:8f:dd:3f:
01:b6:76:12:47:b8:5e:60:64:88:01:d9:00:5e:eb:
62:a2:46:8a:f0:d0:f4:cd:cb:a5:ed:d3:c8:33:ca:
06:aa:9d:27:0c:0c:6c:12:4a:63:0f:df:fa:31:32:
ba:6f:96:f8:b7:33:db:52:f5:fb:42:5f:d4:b2:cd:
15:61:e0:5b:6b:98:ae:ae:3d:62:16:53:d2:cf:26:
10:27:35:d4:65:22:07:89:c0:f1:ce:b4:09:c9:e3:
e4:3f:6d:ab:f3:d2:95:fe:71:e6:f4:53:12:f0:5a:
a8:2f:52:7a:c7:5e:79:e5:bc:92:e0:c3:de:06:07:
12:20:48:88:9b:7b:6c:10:c9:b8:37:67:b5:3c:cd:
d0:66:b7:1a:b5:78:12:1a:3c:29:5f:fe:1e:52:00:
b2:ff:b0:f1:ee:00:00:39:75:73:ac:ed:ca:b2:9a:
ee:c8:06:5b:e3:37:cf:56:86:67:dc:53:37:ef:70:
99:6e:96:df:db:bb:30:73:93:10:43:0a:71:13:6f:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:86:7A:CF:5A:11:28:9A:21:AE:CC:FC:17:47:8E:29:6B:D2:8B
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:0e:46:5e:72:80:70:a4:52:02:f8:9b:87:4f:88:01:a4:
03:a4:04:7e:b8:b3:2a:ba:d3:74:60:39:06:4d:99:61:b9:ac:
28:70:d5:02:e8:db:b7:c0:11:1d:94:41:47:5b:e2:d6:84:6e:
0c:59:37:6f:fa:32:36:40:c7:cb:14:52:b8:3f:99:5b:8e:0e:
30:32:27:3f:3d:ac:f0:7b:1f:b3:e6:cb:c6:e8:d7:27:30:18:
67:90:7a:cd:e0:14:7a:03:b6:4d:f1:fd:f0:5d:9c:bb:d9:83:
6b:c1:e0:57:b9:57:39:3e:00:d0:f5:0b:c5:2d:53:2e:b4:ed:
0f:1b:cd:a5:45:ef:6c:10:62:76:9b:fd:0b:29:d0:5b:bc:32:
d7:be:ef:e7:fb:53:76:3a:1e:7a:06:1e:45:6d:4e:57:7d:65:
b4:c9:0c:ab:0d:77:e5:02:75:7a:76:8c:00:ba:ae:4d:9e:98:
e5:5d:5f:16:9e:df:5b:c1:0a:9d:3d:25:7e:2f:f8:5e:dd:d2:
a1:c0:c7:2c:ae:66:28:0f:9a:f5:af:a2:82:ad:64:80:b5:b4:
5f:be:a4:59:cf:96:86:6e:17:08:86:81:75:d8:7f:9f:b3:05:
ed:dc:b3:0d:df:68:99:f2:68:86:3f:c0:7f:a4:25:56:09:e8:
fb:d2:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:28 2026 by rpki-client