Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: RVe1QHlkswQzPVE89e+g7D/iv+2BlNadyACMrQjq4kQ=
Subject key identifier: B7:87:5F:71:36:93:87:F9:23:88:7D:DE:77:6B:89:79:F0:FD:87:D8
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019D262800BD7822708959AADF3CEF90DE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0291
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: afMKLGYpERc96J/2KqEWX9ht13fkPiUETMRzDWYpl24=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:00:bd:78:22:70:89:59:aa:df:3c:ef:90:de:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=b7875f71369387f923887dde776b8979f0fd87d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:03:93:ba:94:17:c9:34:41:b3:f3:00:69:
02:85:03:5a:56:a8:6d:91:eb:60:81:b1:3d:ac:cd:
5a:84:39:df:84:54:82:63:ec:22:6e:da:6c:4d:40:
5c:d8:d9:a4:57:53:00:9a:df:23:9a:a7:6c:8c:d2:
d5:e5:0b:68:f5:50:fa:6e:dd:83:5b:68:89:6e:de:
cb:aa:9c:ad:4d:d6:59:cf:e7:ce:a9:96:8a:7b:13:
e3:ca:f1:bc:84:0f:a7:ff:91:07:06:75:38:d3:54:
cc:c4:7c:94:cd:67:16:01:68:a0:93:58:d4:95:ad:
23:9f:0e:17:b9:b4:88:5f:f0:3f:b8:3d:4b:c5:d8:
82:e8:17:9f:07:46:84:d3:20:72:67:c7:fa:b2:0d:
42:d1:59:61:98:78:b9:e5:bd:c4:40:df:2a:a1:1c:
46:10:7b:59:d2:ca:4b:f1:a0:77:66:99:6f:a8:a9:
5f:92:4a:16:25:e5:91:0f:7d:8a:61:1a:21:67:56:
bb:ff:57:05:50:02:f4:16:83:b7:4e:35:62:54:94:
58:d6:23:d3:09:18:6d:34:50:92:83:35:b5:c0:47:
29:77:82:9f:2c:27:a4:7e:37:3c:9c:00:92:26:90:
26:88:1a:65:6f:e9:c4:ac:30:26:6f:0e:6c:f1:03:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:5F:71:36:93:87:F9:23:88:7D:DE:77:6B:89:79:F0:FD:87:D8
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:8e:21:32:fd:2e:f6:46:1e:2b:52:9f:e2:53:12:d9:89:
18:c8:a8:e5:e7:81:a1:ea:75:15:6e:a2:9f:93:fa:19:41:8c:
ca:b9:30:ac:c5:3b:31:0e:0e:44:cf:f3:5e:a8:98:ac:5a:66:
4b:45:30:03:a7:9b:8e:e8:84:da:e8:19:df:25:a6:3e:37:0a:
74:a1:43:7a:97:98:06:2d:ce:eb:30:6c:fd:2c:15:07:d1:ff:
02:f1:44:61:bf:5f:61:bb:2e:1d:ce:33:81:90:27:af:55:4c:
aa:b6:fb:f2:01:3c:45:3c:46:a4:39:42:d7:d4:4e:59:5e:37:
3b:e3:a5:ef:cb:67:69:cb:11:37:e1:9a:41:26:a5:1d:3c:33:
d5:59:41:4e:42:48:94:d3:96:95:3d:61:82:fa:5e:5b:41:5f:
60:e3:54:b4:d0:b9:61:b8:8a:14:18:76:e3:7e:17:ba:59:06:
11:a1:04:74:3f:bd:89:49:9a:71:2d:e0:75:10:a6:90:1a:10:
12:7c:36:5b:95:cd:7e:d4:c2:68:6b:cb:4a:4e:22:67:d8:ce:
89:e2:7b:ad:6f:56:02:e9:68:02:9a:ed:5e:42:4e:5d:a8:66:
70:cb:38:11:e7:67:31:07:05:cf:ec:b1:a6:16:f0:4d:8d:98:
d5:20:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:28 2026 by rpki-client