Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: 7DKOIHp2t8UJksR9ZUlh23tykC2Nao8oJIR1UJqwXLA=
Subject key identifier: D5:3B:A7:49:91:EC:95:22:64:55:F0:8E:A0:74:0A:7C:E7:71:E2:F6
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 019D2816CD7E952D17D94043DBD5791C57BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 01D7
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: VkLbWjG0pFNbhdWuSzXDp3bbOL4b75PZ+WWL1rWvXLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cd:7e:95:2d:17:d9:40:43:db:d5:79:1c:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=d53ba74991ec95226455f08ea0740a7ce771e2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:9d:98:a3:ac:32:bc:6d:3e:e2:bf:07:0d:
77:3d:1d:cd:95:9d:b4:81:e9:4d:e8:32:81:c6:d2:
5d:ae:09:53:bd:6c:49:07:8c:82:95:ee:02:1c:4e:
fa:67:84:6d:96:31:a3:48:7b:96:54:37:5e:cd:7f:
84:0b:92:b0:1f:9d:11:e4:a4:48:c3:34:ac:a9:76:
0f:ff:e3:d0:9b:08:ff:c8:df:99:70:f1:24:6a:4e:
d9:dc:ee:1b:ac:84:b5:8a:f1:17:71:f4:59:4b:d4:
16:c1:2f:30:b5:3b:fb:c0:92:bb:f7:5e:21:33:47:
e4:a5:5a:a4:5a:da:47:6a:c3:6d:87:fb:54:89:ac:
78:0c:52:5d:66:44:26:09:48:b0:f9:49:13:f1:5b:
a2:de:a7:db:a6:b8:6b:af:69:56:93:8e:5f:ac:d4:
8f:4f:8e:41:6c:c3:67:ac:61:aa:50:f2:3c:e4:1f:
a6:a6:8c:5c:82:60:95:75:70:6d:1d:b9:e9:50:8b:
45:c0:e7:3a:75:ab:61:a9:ec:0f:08:50:7d:b6:7e:
cf:06:fb:6d:53:e3:fe:20:70:7f:48:88:08:c2:fd:
1b:96:95:ec:2c:f9:c1:d7:aa:ae:5b:89:ec:d3:06:
52:7b:35:ff:bf:d5:26:3a:f5:a0:64:0b:52:c5:66:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:A7:49:91:EC:95:22:64:55:F0:8E:A0:74:0A:7C:E7:71:E2:F6
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:91:f7:e8:43:98:42:2d:db:d3:ff:33:86:99:02:cc:b7:
3a:f8:47:b5:bb:e9:08:9d:fe:ec:4f:b6:2f:ef:46:91:07:8b:
1b:0b:75:e0:9e:3e:89:cd:93:08:8f:42:ab:95:7b:0a:32:d3:
1c:af:72:a9:cd:2e:38:ab:b4:60:5f:70:bb:e7:db:70:f1:81:
06:d8:85:bb:ef:3d:96:39:7a:20:89:d6:54:0a:05:45:dd:a8:
51:3a:1f:ba:ab:a5:69:a6:01:8a:c2:0b:22:9a:6a:3b:78:59:
cc:76:c7:39:a3:a4:d3:e3:cc:ff:e7:3e:97:7d:42:3c:46:b9:
14:ba:7f:8d:d5:54:8a:b2:0c:24:95:8b:7e:c7:31:a6:ad:0c:
9f:06:4d:77:4b:37:b1:97:c9:d0:fe:41:33:e4:31:2d:d5:68:
ea:32:12:2a:84:a2:3b:41:83:55:7a:19:62:fe:0d:4c:5f:c4:
d4:51:09:35:48:3a:44:42:c0:3e:bc:39:e9:38:4a:96:2f:81:
2b:4d:cc:fa:f0:38:30:f7:38:5f:99:06:c2:24:95:9e:99:65:
92:c3:96:78:eb:a7:48:54:ed:42:8f:0b:2d:5f:84:bc:8c:f2:
a1:5e:22:aa:3e:7b:47:c2:5d:76:83:20:1e:80:1a:3f:2f:f6:
0c:21:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:24 2026 by rpki-client