Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: fCcpfzlDVIrZSFCMr/xJebqaI5si+QVF/zdvIyZkQVs=
Subject key identifier: 7D:8C:18:4F:A5:35:58:62:B3:98:AD:05:AB:21:86:EF:D7:2B:76:29
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019D2695FAF17E1D962DADE96A72EB8A61FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 0373
Signing time: Wed 25 Mar 2026 20:00:56 +0000
Manifest this update: Wed 25 Mar 2026 20:00:56 +0000
Manifest next update: Thu 26 Mar 2026 20:00:56 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: oFz0r//9p1CWf1/MqvwNT+fwx1S6DGCsGIcCVmd3K10=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fa:f1:7e:1d:96:2d:ad:e9:6a:72:eb:8a:61:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Mar 25 20:00:56 2026 GMT
Not After : Mar 26 20:00:56 2026 GMT
Subject: CN=7d8c184fa5355862b398ad05ab2186efd72b7629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:8f:9d:7c:28:7b:1d:b7:3a:73:90:8a:e4:
5b:89:af:85:19:80:b4:6a:4c:97:b8:fe:20:f8:2e:
7f:ba:b6:a6:a2:62:0f:e8:32:cc:46:63:c2:52:5b:
07:f1:9c:71:45:f1:b4:a4:7a:4c:e6:3e:61:b8:be:
da:37:d1:03:0f:74:71:5e:2d:28:37:14:2d:c4:96:
05:80:4b:15:61:95:aa:75:55:1f:14:0e:b6:c6:df:
72:c7:0c:14:77:66:f0:b8:5e:f6:e4:bc:a6:41:80:
d2:34:d9:0d:08:62:ee:fc:df:50:db:0a:8e:ee:8a:
aa:fc:66:88:2c:d1:6c:2c:ff:8b:6c:c4:e9:32:52:
84:d0:f5:be:c7:2b:1b:2e:fb:f5:0b:78:55:59:2f:
f4:5c:70:29:84:64:40:1b:5e:14:69:d3:6c:b3:28:
f9:8b:b7:e5:a3:ee:a8:36:43:b9:9b:bf:94:50:a6:
12:03:3f:11:d3:ee:ad:00:09:1c:e8:62:98:8e:62:
d7:f7:00:6d:03:a4:d5:d8:a9:97:ac:ee:85:23:8c:
eb:a4:c0:ca:c9:4c:51:28:54:07:4d:3d:a5:10:a4:
dc:f1:f1:db:11:bd:73:97:19:fc:52:ac:5d:8d:27:
a4:60:37:72:71:85:c9:db:a4:fb:a2:74:b7:c8:dd:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:18:4F:A5:35:58:62:B3:98:AD:05:AB:21:86:EF:D7:2B:76:29
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:b7:bb:32:e7:29:38:4d:21:d0:af:8f:d5:ae:38:c6:bf:
40:71:76:f9:bc:ec:95:3c:78:9f:67:08:53:42:07:77:0c:65:
40:64:a9:09:8c:2b:bd:42:57:40:a2:d0:f6:89:3c:53:00:cb:
a7:e6:68:b4:96:05:2c:bd:c7:9a:10:0f:f5:61:09:f4:5c:da:
08:e0:89:cf:0b:d4:a7:6a:b9:e6:5e:f7:67:23:14:be:88:b2:
a6:8d:72:ec:e5:01:8a:f9:8a:47:ca:c0:e0:48:27:c4:9d:32:
11:48:d2:ce:b0:41:f5:f9:ae:2c:36:de:8d:35:19:42:db:a7:
51:52:21:3f:b5:55:da:84:3a:11:99:1f:81:f8:5f:c0:33:91:
b6:e7:19:8a:5d:d5:cf:f0:7a:ee:a4:98:5b:32:30:fa:3e:54:
4b:8e:5a:0f:6c:77:27:6b:47:71:dd:47:ce:80:af:4d:d1:35:
72:7e:14:36:69:e3:63:ba:91:a6:57:ac:2d:16:0d:18:04:59:
db:ff:99:cc:fa:09:20:c9:c1:8d:e1:f5:bc:73:3f:e3:16:88:
bb:2a:7c:99:c4:0d:03:33:64:80:f5:7a:69:f1:2a:a2:4e:51:
fe:3c:e7:94:c9:a2:2e:73:7c:da:99:5d:90:cc:8f:cd:01:52:
bc:21:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:43:52 2026 by rpki-client