Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: 5qiwMk2CEzIu+zaTFuNJHVNKkxVg4jTHoShgyYcbf2Y=
Subject key identifier: 67:69:6F:B7:57:A7:7E:99:41:36:47:D7:E0:38:3C:EF:81:F3:1D:0E
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019D288493A31132C1D746E19CD8949184F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0D91
Signing time: Thu 26 Mar 2026 05:01:10 +0000
Manifest this update: Thu 26 Mar 2026 05:01:10 +0000
Manifest next update: Fri 27 Mar 2026 05:01:10 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: mzX9y4GO7F+1PXaERMdh6lcHihVyp24YMqIGbFJofK4=)
2: tTSKZ9SBm5TzwVGPFr99l5iaN7Y.roa (hash: 6iyRKX1ykzt8wMyhT1hUZtasJQSEcc9fv+Jwo+YKOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:93:a3:11:32:c1:d7:46:e1:9c:d8:94:91:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Mar 26 05:01:10 2026 GMT
Not After : Mar 27 05:01:10 2026 GMT
Subject: CN=67696fb757a77e99413647d7e0383cef81f31d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:05:d1:ce:68:26:43:39:a5:44:66:38:e3:
01:86:dc:a4:1c:22:03:01:de:e6:6b:02:bd:37:20:
00:8b:3a:b3:5c:df:b6:83:cb:4a:97:e2:8a:5c:2a:
1a:4e:19:93:24:a7:16:f8:ca:ea:d6:22:90:dc:a4:
be:db:d8:c3:2e:54:1e:54:40:01:8c:61:ca:16:30:
c4:4e:80:7e:29:6d:3a:3e:b3:59:c4:3b:78:e1:39:
ff:69:cc:df:20:af:8e:34:37:d4:c4:ed:e0:5e:aa:
30:57:8e:62:7d:f3:00:57:ad:38:cc:e6:72:cb:eb:
45:e8:e5:e0:1e:ec:d9:77:17:41:52:da:7d:e4:46:
88:59:f5:96:01:86:be:dd:85:a1:8e:51:ff:bb:f7:
de:e2:18:ac:f8:8b:47:09:e1:e9:32:60:c8:f7:16:
60:1d:21:95:60:b6:4e:16:1d:b8:33:7a:ef:d4:ad:
a2:51:f2:65:c8:05:75:1a:3a:09:b4:29:9e:27:a6:
6f:97:52:08:20:24:d8:a1:73:0b:72:a9:8c:6d:fc:
3f:6c:8e:d6:72:03:c3:e6:ab:af:c6:f4:7a:9d:0d:
03:bc:a9:ec:2f:b8:d9:6d:1f:f0:4f:26:4c:29:4c:
b6:07:16:61:70:92:34:97:b2:51:17:d5:d5:3c:93:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:69:6F:B7:57:A7:7E:99:41:36:47:D7:E0:38:3C:EF:81:F3:1D:0E
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:be:0c:91:6b:e5:34:38:43:c0:70:ec:f0:1f:04:e4:4b:de:
4b:06:62:b1:5f:0f:43:82:f2:10:8b:72:d0:2e:0b:ce:ba:5b:
c4:04:f9:ec:ca:f9:f3:f2:ce:b7:92:ce:35:c8:8f:da:08:d3:
77:5d:eb:0e:9e:26:a1:e8:0c:0f:80:bc:50:2e:07:07:af:59:
8d:43:45:f2:36:e3:99:00:ba:cc:cb:fe:74:d1:d4:54:95:1f:
4a:52:d9:db:d7:9e:7f:04:32:23:36:42:dc:23:27:7f:c3:02:
e5:69:5e:0c:19:ae:e3:2f:a6:22:54:32:2e:e2:c6:b8:c2:f0:
58:d0:20:09:f8:98:bd:d4:c7:10:88:95:85:de:d2:58:68:56:
5c:37:81:aa:67:6b:47:e2:fa:02:7c:9c:e8:84:3e:0e:22:94:
05:07:ad:40:33:63:2e:81:e2:86:68:b7:65:9a:1f:47:2d:e4:
05:ba:14:a4:d4:a0:4b:31:7b:bf:e5:4b:22:f5:c2:a2:0c:b1:
71:4d:d4:6b:00:12:4d:9a:32:cf:92:23:71:37:38:70:2b:2f:
64:ab:31:25:91:d4:c2:5c:0b:b4:e1:34:e3:25:f3:f4:fd:2a:
97:93:38:5c:3e:31:67:01:23:d2:a3:75:51:71:d9:63:e5:ac:
8c:4a:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:27 2026 by rpki-client