Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: 1fYyyFXdh9JZVLQoDh39luxcapVcs/LSicbDhiPQbxI=
Subject key identifier: 35:CE:E2:C3:B1:BB:D1:D0:2C:47:A7:C3:CD:25:20:95:26:40:45:D2
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 019D25F1CCF7D357FD61F349954459D2FDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 13D7
Signing time: Wed 25 Mar 2026 17:01:36 +0000
Manifest this update: Wed 25 Mar 2026 17:01:36 +0000
Manifest next update: Thu 26 Mar 2026 17:01:36 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: IqTio4mSGN6HG5oMMI4WkckLpK9VPRfwJ/KXA+tjNew=)
2: svPKQJREMYzzw4nrwOykMCA6_Ws.roa (hash: OO4K57XkP/w3/FtcBT7vUzOVhuobiN05zaoo8Wri7/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cc:f7:d3:57:fd:61:f3:49:95:44:59:d2:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Mar 25 17:01:36 2026 GMT
Not After : Mar 26 17:01:36 2026 GMT
Subject: CN=35cee2c3b1bbd1d02c47a7c3cd252095264045d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:c4:31:13:29:3d:3f:28:99:d0:e0:d3:f4:
ef:7f:78:44:63:37:68:bc:12:67:f1:1a:a9:dd:84:
44:e9:e3:e6:e9:c0:00:20:d9:cb:22:c5:d2:14:20:
a1:7d:c1:02:c8:ab:89:d6:09:b0:7d:04:64:25:af:
1e:96:62:36:60:48:55:b0:de:05:4e:8d:29:57:b0:
f3:6b:71:e9:21:1d:2e:20:17:f1:16:7c:19:ab:d0:
7d:72:25:fb:62:6e:72:78:38:54:68:e4:99:e1:fc:
9f:e8:c0:fd:25:b8:88:bb:b1:71:f8:68:9d:bc:50:
a9:d5:70:a7:54:8b:72:7e:35:1f:82:0a:ea:18:78:
6b:b9:94:93:a1:07:a9:7c:50:cf:27:ae:eb:e5:a2:
11:32:5e:14:b8:fd:92:f7:88:7f:74:3f:f8:68:45:
cf:9a:50:b9:47:c0:e7:f1:1a:0f:1b:0a:73:8c:f5:
43:e7:cb:d5:58:64:36:21:71:95:a0:26:f8:bd:b9:
31:64:19:35:93:d7:41:d3:7b:30:4b:b1:39:48:7c:
50:36:6a:56:d8:ba:b4:e3:17:9a:de:02:bb:70:f4:
bf:10:fd:43:c3:4b:e2:f4:fe:09:6f:80:53:65:1c:
51:a7:27:af:4c:c8:c2:fb:12:bd:d1:97:d0:06:e8:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:E2:C3:B1:BB:D1:D0:2C:47:A7:C3:CD:25:20:95:26:40:45:D2
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:b9:d4:02:5e:4c:fe:28:f8:f9:01:42:9d:b8:3c:c5:c4:
e7:ca:de:89:4d:6b:4a:f1:94:53:a4:5b:08:01:fd:10:a4:5b:
c8:8b:29:75:fd:92:ef:35:f0:92:77:b4:74:8d:1a:76:38:c0:
ee:b5:08:0b:59:6b:86:c4:55:b5:55:5c:d1:2c:a7:63:f5:d6:
31:35:e9:ce:e4:46:e4:30:80:29:b1:23:5b:5e:35:70:9d:98:
41:24:c2:9e:ca:0c:73:ca:4c:d5:a4:ff:b7:36:4d:5f:d9:65:
c5:69:c9:6b:1c:8f:26:d9:f2:32:34:ec:c6:1e:5b:d4:12:a4:
ff:90:f2:56:79:d4:21:25:ba:57:a0:cd:a6:47:0d:1a:51:5f:
f5:ab:91:73:aa:93:63:f6:e5:95:b7:e6:c2:0a:80:78:9a:20:
0a:75:2e:9a:99:dc:ec:08:cc:67:4a:a5:7a:32:c2:08:70:3c:
04:21:42:27:0e:84:51:68:f3:ef:7a:0e:3a:c5:76:25:2d:9c:
87:8c:44:eb:05:51:d1:ba:02:d1:04:f0:64:c1:74:fd:a6:fa:
10:bb:a1:14:24:be:c9:86:f1:0d:da:a9:d3:3c:2e:3e:cb:00:
bc:b1:66:01:6f:b4:d7:7a:78:87:23:9f:c4:83:24:be:75:16:
20:55:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:00 2026 by rpki-client