Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: zvG1FGAdbBxVqEJpvXqoM2iVpflneEwkax6Mwb/Sy4w=
Subject key identifier: 5D:6F:21:36:4F:0D:DB:94:48:75:B7:C5:38:1E:B5:A4:49:C1:69:E6
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019D29972E6AFADB7DF78D330DCF4DC2D5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 148F
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: Yur37w0R/uORPvnbuofuK1vM+v6sG0Wu66izgYudJyU=)
2: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (hash: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2e:6a:fa:db:7d:f7:8d:33:0d:cf:4d:c2:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=5d6f21364f0ddb944875b7c5381eb5a449c169e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:e4:f9:50:ef:64:69:f9:95:b8:99:c0:ed:
b7:bf:6c:3b:21:20:88:c4:e6:30:d9:b5:70:98:0a:
23:35:7a:ea:df:aa:e2:9c:6c:26:0e:9e:eb:e2:6c:
53:fc:80:30:75:71:ed:f4:9d:47:cc:51:be:6f:42:
7a:4e:f9:0c:0b:64:71:fb:67:7e:09:1d:f8:0b:a1:
2e:48:38:b8:4b:71:3e:8b:72:c9:5b:d4:7b:d2:91:
23:46:1b:f7:c1:db:d8:28:f4:e9:fd:07:e3:5f:58:
cd:d8:e4:78:62:28:74:ce:9e:eb:dd:b9:be:85:14:
d6:65:26:6e:b0:fb:3c:f6:d0:cf:b7:50:d3:90:41:
eb:f1:50:35:7a:9c:69:7f:c2:1b:85:c2:16:26:85:
63:bc:86:04:92:3f:7f:66:3c:90:5a:59:82:0b:a5:
98:50:13:eb:99:37:64:7c:0d:68:f8:ad:bb:a6:1e:
0d:fa:e3:8f:e6:34:37:a9:b8:a4:fb:70:3b:15:4b:
64:6d:12:e1:b9:71:32:a0:d1:93:e7:01:3a:cf:b7:
53:5a:14:04:51:5c:69:9f:ea:f1:49:6d:c5:26:d9:
fa:39:2d:63:c1:a6:f3:62:71:8d:1c:d7:80:49:d7:
51:d6:df:8d:ee:18:60:20:44:b1:bf:4c:ae:96:ac:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:21:36:4F:0D:DB:94:48:75:B7:C5:38:1E:B5:A4:49:C1:69:E6
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3d:2a:d5:2f:80:2e:e3:f2:68:db:14:85:23:3a:25:33:a0:
3e:e5:f7:c5:ac:0c:ae:c6:b8:be:3a:1d:75:9f:4a:f5:5c:35:
a9:ff:0c:3c:4c:37:df:7b:dc:bc:b8:59:1b:36:04:61:98:6a:
43:bd:a7:d7:ec:9f:d0:05:d8:c4:f8:ab:59:47:a7:0f:02:52:
8d:f8:a0:3d:fd:1e:06:8a:f5:8a:d6:40:ee:35:ff:d0:ba:03:
9f:4c:4e:d8:03:9b:8e:48:d1:2d:0a:e5:b3:1f:50:15:61:2a:
fb:9c:e1:14:93:ae:5b:77:0b:88:a8:61:22:e9:c0:33:6d:ce:
3a:30:9f:3a:96:c8:d8:3d:2c:57:f3:0f:55:72:d1:63:3c:34:
51:76:2f:e2:d4:75:c6:19:5d:ad:a1:55:74:2b:b2:00:67:c6:
91:57:f6:a0:f8:88:3e:1b:37:c9:1a:38:29:09:b6:91:58:99:
9e:3f:3c:01:5f:0b:6c:2f:78:81:dc:e7:8a:13:93:4e:52:f2:
1f:57:e5:81:8a:72:04:7f:a3:4e:25:67:8e:30:4c:85:b2:6e:
33:13:5d:01:55:e8:28:fb:39:a1:22:2b:96:6a:6c:8a:d4:37:
db:12:18:aa:d8:c4:90:7e:b1:cd:6e:04:f4:c5:cb:ac:24:c5:
2f:ef:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:16 2026 by rpki-client