Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: kVHQ/h+n4MNhGKtaUTiUMK+b3YzDpvTR+I4588WjmXY=
Subject key identifier: 10:1E:E0:D8:64:44:46:B0:5C:17:D2:56:41:FC:1D:62:96:3F:2A:E4
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019D27A8CD211744E3A9D7C477CE5C9FE1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0F17
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: 1zHHmaR2k+ljGtZc9wfKxojyFf00OwsdRT9P/al9Fr0=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cd:21:17:44:e3:a9:d7:c4:77:ce:5c:9f:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=101ee0d8644446b05c17d25641fc1d62963f2ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:cf:69:ff:db:83:84:0b:0d:e6:e2:3e:3b:
dc:64:83:dd:f0:04:4e:b0:64:b2:69:1b:e9:c5:b7:
73:fc:bf:62:d7:01:4e:70:e6:60:21:5b:c4:c0:84:
93:29:39:00:1c:1d:28:52:62:23:13:08:be:91:e5:
ba:08:be:de:af:8a:74:5a:e3:fd:ba:35:01:51:9e:
8a:41:d6:d7:f3:e7:5d:2e:6c:f6:a0:f1:fc:0f:63:
ad:58:2d:d7:68:26:e6:f2:42:5b:b1:37:3b:20:2c:
4c:bc:e1:27:b9:3a:75:39:a0:66:fe:0f:8f:6a:9f:
4a:31:99:74:b0:bf:f1:c8:a2:8b:eb:03:3c:5b:64:
94:22:70:8e:01:a5:73:80:6d:32:be:26:2c:c3:d6:
88:86:6c:2d:77:89:d7:13:2c:c9:2a:87:8c:ee:1f:
86:05:08:48:2d:0f:a6:c2:74:5c:c6:0f:6a:d3:1d:
b6:d5:e3:8a:ab:7c:f0:cf:cf:ed:3c:d5:63:20:ec:
30:41:cf:76:eb:bb:f1:d2:7f:7d:be:20:45:90:2d:
d9:b7:3f:77:a6:2e:1f:c5:33:84:67:27:3f:2f:99:
b8:e7:b4:d0:ac:b9:b1:ab:58:a8:0a:89:ec:38:1b:
72:19:b7:51:bc:4e:d8:a4:ab:06:c7:5a:46:5e:a0:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:E0:D8:64:44:46:B0:5C:17:D2:56:41:FC:1D:62:96:3F:2A:E4
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:98:03:b0:2f:ba:dd:08:ca:b1:87:ed:01:f6:6a:4f:8d:a6:
9c:c9:75:a4:e2:53:d5:fb:6f:c6:d5:bd:f5:c5:a7:b9:0a:e9:
4b:7e:c2:7f:d6:ae:29:fe:09:17:16:b9:62:97:73:43:60:40:
dd:87:6e:82:c5:23:ec:8c:06:6e:70:6e:c8:60:57:10:1e:34:
61:37:88:2d:c9:de:76:2c:b1:ab:82:ed:46:5b:92:3d:c0:bf:
93:ed:37:1d:62:46:e1:75:8d:36:21:20:d0:18:8e:4a:70:13:
ec:6d:e3:c1:20:15:c5:c7:62:e5:91:de:39:ae:70:5b:22:6a:
75:52:c5:cf:49:fb:ad:af:e3:b2:fe:fc:de:27:ef:0f:e9:b7:
31:01:bd:96:2e:88:74:12:5e:68:12:23:0f:c4:fe:46:41:b0:
de:47:86:52:47:c3:91:2c:6c:d4:fc:47:13:1c:3a:2c:1f:36:
bf:38:66:c9:b7:8e:6e:61:9a:a1:4a:26:3b:8b:be:78:fb:4b:
c8:3e:b4:3f:11:65:04:e8:0e:df:19:92:9b:7b:5d:0d:db:29:
c9:4f:9b:5d:f4:c9:97:c4:04:72:ed:4c:b0:60:11:80:08:ba:
44:63:5c:98:e0:39:db:4e:fd:ce:80:26:bd:a0:c9:03:5f:b8:
33:28:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:12 2026 by rpki-client