Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: PDiitKURJKapUU9iokCDNj5oF9SL2y/2fM2Afw1nSgg=
Subject key identifier: 1D:D6:01:5E:A2:79:A0:BD:5F:F3:CB:4B:E5:13:8B:3B:66:CD:39:39
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019D270449A56F1E7728C168D834AAF5201A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0A74
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: 3djNYm6Gh41NSxuw7iPqgpvST3aR1T4hjGNk6XoG6Yo=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:49:a5:6f:1e:77:28:c1:68:d8:34:aa:f5:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=1dd6015ea279a0bd5ff3cb4be5138b3b66cd3939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:3f:4b:bd:10:33:d0:89:14:2c:5d:5e:32:
cc:92:51:7f:fb:95:49:5c:38:84:24:f3:ab:7e:c2:
4f:36:b5:e0:72:2b:17:f6:99:33:24:81:3f:95:51:
a2:6d:d2:e0:4c:c6:0c:0e:fd:5f:22:29:ff:81:7a:
b1:c3:13:21:cf:bf:79:c0:4f:da:9f:31:74:57:d6:
1e:ae:c7:55:6c:04:10:47:59:7c:1e:8c:86:61:60:
8a:dd:2f:3e:31:ca:d7:6f:58:6f:0f:33:74:a8:84:
e2:0c:0f:c5:01:92:2d:61:37:84:4b:ec:ce:b2:79:
f7:d9:6d:4d:d2:15:44:86:7b:2d:f4:0f:c8:a6:62:
c1:fb:f7:34:0a:b0:5a:80:ff:0a:43:cc:08:c8:e8:
96:17:77:31:ea:1f:06:eb:df:0b:76:a0:f0:37:e1:
05:e2:6e:1f:c5:4b:23:2a:1b:79:fc:a4:2e:03:d7:
bb:79:03:bd:9f:70:af:3f:de:94:25:17:eb:55:c0:
1f:3f:54:95:40:04:53:5e:f0:66:ff:4c:b2:af:b3:
c1:f9:77:8b:84:56:2c:0e:29:27:5f:c1:25:2d:7f:
34:65:5f:fb:e0:0b:6b:99:08:28:59:ad:eb:ae:5b:
56:ad:00:28:2d:56:e4:35:dc:bf:15:23:80:5a:3a:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:01:5E:A2:79:A0:BD:5F:F3:CB:4B:E5:13:8B:3B:66:CD:39:39
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:67:4f:04:e5:34:51:c8:85:f0:df:82:3d:ab:db:9f:59:1b:
cd:ec:b7:1f:5f:84:08:65:ca:24:08:30:36:21:e8:1e:dc:a4:
3a:19:7e:43:8c:f3:de:70:8a:47:92:e5:a9:40:8d:3a:c7:f3:
9b:8d:41:a9:04:48:3d:6d:9e:ab:b0:ed:97:d8:b8:cd:42:29:
71:75:17:39:da:82:5b:d8:f0:a5:26:40:6e:4e:51:60:f5:a4:
39:ce:8b:d3:70:23:8f:95:52:57:98:7d:14:ec:03:5f:e0:99:
5c:04:00:05:94:58:e4:c7:fc:24:98:ee:6b:a6:13:ec:d5:22:
ec:22:c7:e4:f8:ff:07:0a:1e:89:e9:8f:29:00:1c:25:f8:f2:
39:1a:e7:b2:94:2d:39:aa:46:ba:be:26:fb:a7:dd:6c:ae:24:
86:3b:f2:25:a8:5c:a9:5e:a6:7b:81:93:e9:aa:70:56:8d:a1:
90:e7:4f:bc:06:f1:bd:52:3b:bf:66:fb:73:d4:9b:00:87:c5:
98:8c:79:25:84:49:7f:f1:e5:2d:cf:1f:ff:9a:f2:d3:18:b8:
0f:b7:61:31:45:91:b1:80:e3:b3:05:4f:e0:2c:37:ef:5a:66:
6b:3c:11:70:d3:e8:51:01:01:fe:a8:9d:c8:60:87:e0:a9:7a:
89:c7:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client