Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: 1NWxH/qxruKPvtQ2supWid2WO7gqK9hM7byRoZe5OLg=
Subject key identifier: C3:0B:79:A1:25:5A:38:9F:AF:B1:64:D1:4B:D0:3C:98:A8:F5:D4:0D
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019D27E0071B7CD4FC99E834DD8E4524E872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: WCF9yaqBFoZqKDcCTMqdByiddhWpaMO1wG2RIVsTXHs=)
2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:07:1b:7c:d4:fc:99:e8:34:dd:8e:45:24:e8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=c30b79a1255a389fafb164d14bd03c98a8f5d40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:ab:fb:49:c8:41:94:f0:e3:30:05:31:5a:
f6:9a:20:53:21:d9:7a:b2:4c:f8:cd:4d:1c:72:b5:
b8:71:30:bc:f4:87:d9:6b:b9:8a:fc:bb:da:04:9b:
aa:39:55:0d:35:7d:20:98:68:13:30:96:98:e1:ef:
8a:80:86:df:55:d9:e9:c0:25:f4:8c:be:6b:56:62:
f4:59:5f:be:eb:56:6d:59:4e:07:96:ed:d0:31:c3:
a4:54:d6:50:3a:fe:fe:58:b4:a3:c6:00:42:1e:58:
66:14:39:d4:75:73:6f:af:40:d2:3c:98:a4:81:36:
ef:39:a1:f3:a1:55:f6:82:de:3a:f6:b5:db:46:68:
a3:2e:21:c6:20:55:32:d1:a8:6c:b8:80:c7:eb:dc:
4a:bc:5d:6d:d7:75:61:27:ea:47:74:ff:f8:d9:ac:
f0:5a:78:b5:85:84:fd:1d:48:2b:7f:73:59:33:7b:
0e:77:a9:dc:ef:a7:bd:b5:7f:d0:be:7e:06:47:b3:
63:76:9b:27:ab:73:55:de:e4:f1:fc:49:bc:5e:62:
86:b1:6a:f7:a6:e9:64:18:4a:9b:9b:b2:e9:16:f3:
86:b2:2e:8f:05:9b:32:1b:4d:32:55:95:23:8f:9d:
94:3d:f6:5a:14:36:67:41:95:0e:5d:47:f2:b3:b4:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:79:A1:25:5A:38:9F:AF:B1:64:D1:4B:D0:3C:98:A8:F5:D4:0D
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:ca:53:33:c5:73:c3:ae:ec:8e:b4:b9:1b:13:cc:d0:2d:
df:f9:2c:fb:3e:7d:d9:23:d4:24:d5:7a:8f:73:ff:16:62:e1:
d5:0e:4d:fd:e2:8d:a8:9c:89:51:75:1f:98:34:e3:3d:a0:8a:
4a:a9:60:e6:7f:d3:69:5d:da:18:f1:8a:7d:c7:43:9d:41:b3:
16:23:bb:75:8e:b3:98:12:58:9f:2e:6c:05:6e:d1:ea:d9:fe:
8d:74:5f:67:c6:e1:1f:96:f5:ab:96:44:7e:a3:e8:62:94:af:
ce:b4:c7:64:dd:ce:d6:0d:6f:f1:55:7c:f3:ed:8b:90:92:96:
00:76:6b:73:89:45:1e:36:d8:4f:e2:cf:ca:7b:e4:2f:8a:fe:
da:7c:66:51:b3:6f:c1:fc:e7:8c:86:19:f6:4e:d7:57:5c:63:
6c:1a:d2:03:69:fa:3f:16:aa:a5:60:02:6d:fd:6b:11:78:22:
6d:0e:fc:38:1b:30:bc:27:7c:6a:3e:08:a9:04:89:78:0c:1f:
c3:8d:69:b8:85:96:9d:1d:56:10:a9:b6:46:4e:9a:e2:43:e9:
6f:60:f0:2b:d1:6f:f8:1f:7f:09:9c:f4:7b:c1:44:fa:7e:42:
fa:ab:d6:33:bf:f5:89:da:4a:2f:32:3e:f2:40:00:ea:33:01:
ae:e0:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:55 2026 by rpki-client