Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: 6osEeY1okmfB9PJHdNCAYFb+QbZsfnZq2OA4ZhLXmuU=
Subject key identifier: 89:F0:9E:20:A4:71:9E:F9:A0:32:87:20:49:74:3E:34:4C:9D:D7:64
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019D2996F02AECEBFB5C53FD5AF8DFFC37E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0513
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: TcG5uHkDHiNgAKo227AvV6YG0EPrcs3WXGaDWDhUZ/0=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f0:2a:ec:eb:fb:5c:53:fd:5a:f8:df:fc:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=89f09e20a4719ef9a032872049743e344c9dd764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:40:7c:60:20:c3:64:b2:df:20:6f:d8:a3:
5e:ec:16:90:0e:bc:d9:57:1e:21:32:fe:ee:1e:c3:
80:f9:5c:9b:c5:76:1d:14:e0:6d:39:fb:10:dc:d3:
0e:88:45:4a:97:f7:88:36:12:96:b8:18:59:8e:03:
59:b8:94:14:2e:63:c3:9f:a9:0e:a1:90:24:d2:f0:
4b:39:4d:74:f4:a6:4d:bf:13:f9:aa:e6:cf:0a:ab:
76:27:43:14:a3:46:26:c8:bf:cd:fc:c0:8f:47:fd:
09:c1:dc:44:42:c5:33:90:2e:18:f4:db:d7:c0:17:
59:c1:b9:13:f7:e8:3d:b1:74:ce:d9:72:c4:32:fa:
bc:12:0a:c4:6d:e1:8a:7f:4c:48:6a:83:1a:32:1c:
10:57:85:09:c7:c5:91:8e:f7:97:23:b3:30:79:1d:
61:ee:1b:a2:14:76:e8:2c:8d:d2:bc:84:bc:20:35:
60:fb:5c:19:0e:f0:7b:c7:2a:a5:aa:82:6d:63:c4:
41:37:c5:da:db:56:26:10:43:a4:de:26:94:3c:2d:
02:98:b8:88:02:c2:6d:37:39:cf:ee:9f:e6:bf:53:
9f:ff:18:8a:09:0f:4b:e8:a1:4c:81:37:da:05:30:
83:92:49:f2:9c:c4:f7:4c:33:23:12:91:1d:58:71:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:9E:20:A4:71:9E:F9:A0:32:87:20:49:74:3E:34:4C:9D:D7:64
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:98:f0:a2:39:62:80:fa:a4:9a:39:91:9f:96:62:b6:46:5b:
be:c8:93:3e:b4:bc:93:5e:72:73:4b:f8:77:28:2a:aa:43:66:
51:fd:62:3a:39:28:7a:66:96:88:64:db:8e:b5:81:93:33:e3:
54:28:41:dc:82:7f:c8:38:e3:49:2a:94:12:a4:d4:8e:0f:17:
b9:0b:27:c2:25:01:c9:11:05:69:d8:29:d7:fb:50:bf:a4:b8:
2a:fd:ef:ec:92:59:60:eb:a9:c3:d5:de:47:e0:46:cb:83:8c:
e0:04:66:de:1a:86:a5:21:4b:cf:4e:02:2f:35:6a:88:82:05:
90:0c:31:62:5a:38:70:c7:d6:0e:f3:a6:22:87:30:84:ea:00:
58:fc:5a:86:3c:94:bb:5c:04:33:5d:3d:f7:7b:73:0f:b3:a0:
43:94:5b:5a:64:0b:32:eb:3e:24:8e:29:77:b4:44:21:8d:78:
67:60:f0:91:d6:7d:53:c0:65:bb:99:5a:46:2f:cc:28:8c:33:
9a:81:99:71:2b:a5:72:17:8f:60:1f:08:e9:0f:e3:a7:f1:43:
3c:36:c8:d5:da:99:ee:e1:81:cc:02:a7:fc:cc:7c:8b:ff:c0:
02:d3:9d:db:ee:d4:06:73:ea:21:c1:54:03:19:d9:3c:c3:bd:
cb:24:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:29 2026 by rpki-client