Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: GnWvJOibJvVxKWduNSaKPl5DIYxVxm4lsD0IyoZ7iYc=
Subject key identifier: F7:4A:CB:1C:07:1D:E9:BE:FC:04:30:AA:39:A1:6D:D0:EB:B9:49:A7
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019D2A3C2EB151EB62354AE0052B13779649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 15D5
Signing time: Thu 26 Mar 2026 13:01:20 +0000
Manifest this update: Thu 26 Mar 2026 13:01:20 +0000
Manifest next update: Fri 27 Mar 2026 13:01:20 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: 69n6RdDtOY3p8TMnHH4YTEjpp7JXZhCZQdKIgIle0F4=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2e:b1:51:eb:62:35:4a:e0:05:2b:13:77:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Mar 26 13:01:20 2026 GMT
Not After : Mar 27 13:01:20 2026 GMT
Subject: CN=f74acb1c071de9befc0430aa39a16dd0ebb949a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:43:24:e2:23:73:dd:4b:ed:c0:37:10:25:
bc:e5:50:13:3e:f4:9d:ef:74:f3:de:4d:ea:1c:38:
43:62:68:db:7a:66:fd:90:2b:d3:20:fe:ba:fb:6f:
cf:2c:6c:6e:b8:63:03:79:97:83:28:45:8d:f5:12:
f8:c1:8e:36:f3:1b:4e:89:ef:42:1b:63:76:72:ef:
0b:16:c7:03:74:63:10:cf:e2:2f:f0:72:45:59:1b:
f8:a5:93:2e:a4:fa:b0:a2:12:c6:58:1f:47:03:0b:
ff:3c:c3:45:3a:ef:f8:8b:25:b2:b4:34:57:a9:3e:
0d:03:d0:22:a5:a1:1b:84:35:42:61:b7:b9:1e:1b:
a3:5c:49:b3:ba:f2:63:25:ce:b9:46:b9:cc:20:81:
71:b9:f4:b9:a9:73:17:bb:bd:46:ff:10:ec:0d:3b:
6e:a4:29:63:1b:b7:e1:f1:af:b1:60:82:33:21:ac:
30:b4:b0:3a:82:48:af:30:44:81:94:03:86:50:8b:
e1:6b:b3:02:e9:11:b4:79:3d:b6:26:63:15:74:99:
87:52:e7:b2:a4:bf:ab:78:58:5b:ba:34:10:e8:97:
51:4c:f8:c0:e9:21:58:45:52:c3:81:aa:2b:ee:a3:
cc:3b:b7:e9:86:6f:04:a8:5e:70:37:14:2e:10:f1:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:CB:1C:07:1D:E9:BE:FC:04:30:AA:39:A1:6D:D0:EB:B9:49:A7
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:08:86:27:06:a4:10:f5:61:33:cd:5c:59:5d:ca:16:71:86:
fe:d0:99:a8:6a:ab:f7:73:0c:70:2c:61:7d:5d:d3:69:41:90:
d7:38:c9:0f:b2:a6:d6:81:9b:10:06:c9:23:09:75:5a:40:7d:
74:a1:76:e5:6b:d2:83:f3:e6:21:ab:10:6d:60:30:ce:d3:6c:
15:ab:7d:e0:45:3d:f7:8a:a3:fb:a7:4a:7b:10:22:94:2a:45:
8e:fd:30:cf:d6:6b:c2:84:27:7a:f5:e4:19:e3:ea:29:ac:e0:
d6:6a:78:b8:fc:46:a2:1c:b5:8a:97:9e:6c:4c:5a:7d:f0:f9:
d3:4b:f8:4d:74:8c:32:17:72:cf:7a:28:03:cd:aa:9a:be:21:
c3:0f:75:89:ff:88:6e:e1:c0:b8:49:3d:2d:81:56:c5:00:c7:
48:e1:cf:96:06:d3:c0:ea:73:e4:01:d3:d9:d8:79:5d:43:59:
45:d2:3d:e9:b8:b7:74:ae:d0:74:1a:4a:72:91:dd:37:27:1b:
a8:0d:6d:a8:96:44:56:2c:db:2b:a1:ba:7d:fb:a1:a3:39:ce:
d8:3f:52:f9:4b:19:93:6c:3a:9a:80:fd:9f:4e:d2:a1:44:68:
e8:a3:ca:9d:e1:65:da:66:43:10:bd:0c:e1:51:1f:44:b2:2b:
3e:94:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:10 2026 by rpki-client