Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: dKTiJ66CU1GfyfoPpCyig5exLJGQlMdVT9jiYgvGRKo=
Subject key identifier: 63:DD:57:FA:43:B8:86:2C:8C:FB:2A:77:BB:39:69:DB:26:A0:BE:31
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 019D28848F6AA89A5E2537F5381351071BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: kjda14CLrLYxOU8sy028JHQ0PEo8ovV9Pehd5Lang6Y=)
2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8f:6a:a8:9a:5e:25:37:f5:38:13:51:07:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=63dd57fa43b8862c8cfb2a77bb3969db26a0be31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:86:fe:de:1a:f4:cc:c8:5d:de:73:0f:21:
3b:06:94:e3:fe:0f:22:4e:d8:90:bc:4b:f1:c6:60:
54:09:05:32:a3:13:d0:62:62:dc:31:28:5d:2c:46:
a2:fe:15:86:65:64:f5:02:8b:ec:0f:e2:6b:f5:9d:
8f:0e:a4:0e:5a:b3:84:57:b1:b7:11:d3:dc:9f:c9:
e0:2e:a9:ea:fc:53:c9:4a:84:1b:a4:c7:ee:b3:fe:
24:b9:92:91:1c:f7:35:8d:33:9e:51:a4:43:d2:45:
f1:51:29:bc:5e:5e:32:44:e1:66:6f:77:75:10:f6:
08:03:ae:0c:d5:0d:d6:df:70:63:fe:c5:a8:7c:8d:
0a:08:0d:31:5d:28:1f:07:c8:85:e3:c9:dd:89:06:
c4:26:f9:ab:bd:43:bd:d6:8c:ac:17:05:da:db:54:
7b:e6:1e:77:4a:d1:c9:09:b2:86:83:67:93:36:b1:
5e:65:3c:5a:df:dc:fe:97:aa:fb:7d:20:e8:25:07:
7d:07:11:4d:44:59:1c:74:d1:be:0b:c4:4d:4b:e9:
ae:f6:f8:99:ac:77:9c:3c:b6:51:24:e8:c4:9f:9b:
9b:4f:f6:a3:d1:5e:2f:c5:e8:5c:9c:c7:19:75:a2:
df:65:e9:55:36:d4:2f:5a:72:5b:57:64:7c:32:a0:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:57:FA:43:B8:86:2C:8C:FB:2A:77:BB:39:69:DB:26:A0:BE:31
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ca:42:54:a0:7e:1c:6c:cf:29:6c:36:e4:0c:67:87:e6:f3:
7c:f0:e5:42:9b:5e:f0:11:5a:ec:79:a6:6c:ad:7a:05:fa:19:
62:ad:5e:9e:45:d8:59:0a:5a:f8:37:82:52:6a:4b:31:bc:fb:
19:5b:8d:2f:e0:dd:ba:a6:cc:3e:d2:b6:ac:f1:99:68:63:2f:
77:84:7d:6f:38:0a:6e:55:c8:2b:a6:fa:23:35:d5:3f:16:c7:
98:6c:65:9e:a6:99:40:fb:f8:4a:11:34:54:e8:86:8a:4b:8e:
e4:65:2e:c7:c9:20:43:83:c3:64:9f:c8:a3:46:ae:e2:a1:6d:
c4:81:5a:6c:19:1e:9a:9f:d3:c7:6d:8e:9c:6c:fc:d9:e3:78:
c8:36:53:00:a5:f0:5c:d3:3a:7c:4b:e8:c5:a0:67:7f:8d:b0:
6b:61:e1:3d:0a:c2:0d:2c:6c:6a:0e:73:ed:19:ed:74:30:2a:
07:82:d7:bd:35:14:1b:5e:08:4c:f0:fc:1a:b8:b6:be:78:20:
cc:06:9a:1e:a4:b1:1f:25:e1:a9:16:88:8f:7d:09:15:4d:b5:
44:b3:6a:8e:f5:39:53:13:59:22:5c:15:e2:74:89:cf:07:2d:
70:3a:73:de:b7:75:3a:66:f9:f9:be:a4:58:7b:c4:c3:59:a6:
cb:de:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:22 2026 by rpki-client