Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: qVMoleRJ53EvwznIIS11PEbJrWQmlcs2LFYsoTLY+Ec=
Subject key identifier: 1A:EA:6D:96:41:9D:9A:6D:9A:80:44:E5:46:CD:3D:4E:6B:D6:05:90
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 019D29CE1D80D5D33E936B6A12547DBDEB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0C32
Signing time: Thu 26 Mar 2026 11:01:06 +0000
Manifest this update: Thu 26 Mar 2026 11:01:06 +0000
Manifest next update: Fri 27 Mar 2026 11:01:06 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: jotFnscePejYbs0k0J3H/JyEcir9MgONj26AmVpyxnI=)
2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:1d:80:d5:d3:3e:93:6b:6a:12:54:7d:bd:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Mar 26 11:01:06 2026 GMT
Not After : Mar 27 11:01:06 2026 GMT
Subject: CN=1aea6d96419d9a6d9a8044e546cd3d4e6bd60590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:8d:31:3f:29:92:0d:e1:13:7c:ff:a0:0a:
0a:3e:87:0c:be:03:d0:11:12:76:2c:80:43:62:9a:
ba:a1:50:1e:09:4a:d7:8b:0d:3c:52:4f:f2:79:ac:
a9:3c:58:3a:34:fe:7a:c7:88:eb:c2:ae:ab:97:25:
f5:c7:2b:3e:41:c7:2f:f9:7a:61:56:66:6a:13:ba:
65:87:e0:0c:34:40:91:f9:2c:ea:1b:bc:60:a8:4d:
58:d9:ac:bd:f3:3a:88:b6:4f:91:65:e7:f4:69:4c:
1b:40:31:ed:6f:5b:aa:e0:fe:2c:6e:9b:81:4c:43:
01:7b:6d:27:f9:3e:48:8d:20:ba:1d:76:12:2a:0c:
82:d4:e9:8b:85:99:68:07:9d:b9:76:63:b6:b4:ac:
c3:b4:9e:d2:d4:4f:2c:00:bc:91:0f:ae:44:4e:ea:
60:0d:f0:b3:9b:71:e3:99:13:ec:fd:59:b2:5c:5d:
92:9a:0e:19:02:96:12:11:97:e9:7e:93:19:4c:96:
c9:56:bd:b2:a9:d8:c5:47:36:79:83:3c:aa:61:13:
a9:08:cd:32:67:b4:7e:3c:5a:36:3b:52:a4:65:a1:
da:93:4c:e0:64:66:35:17:6a:73:93:c7:10:80:f1:
5c:16:a4:ef:1a:1f:d4:2e:76:b6:27:e2:21:dc:d3:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:6D:96:41:9D:9A:6D:9A:80:44:E5:46:CD:3D:4E:6B:D6:05:90
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:04:b1:aa:7f:b8:08:49:a7:08:c3:c6:d8:50:3d:c8:85:a2:
2d:0b:2b:4c:d8:73:0f:45:59:62:08:d5:4f:ac:7c:b2:23:30:
ef:58:99:8c:9a:52:95:0d:f0:ee:8c:a4:c8:83:79:19:43:0f:
74:1f:44:e5:93:b6:51:76:93:00:98:03:51:c9:9f:a7:98:f1:
8d:11:6e:96:10:43:d5:db:63:56:71:4d:19:84:7a:18:0c:2d:
18:40:e9:a9:f3:87:9d:83:c1:09:4c:1a:cc:8d:32:98:74:bc:
ca:f6:4d:db:2a:4d:5a:bf:14:6a:65:f0:66:5b:7e:49:9a:e7:
d1:92:73:d1:cd:0e:7b:3c:9f:45:50:ae:f5:18:50:49:7e:30:
36:67:f4:e8:ed:96:81:07:be:da:32:71:fc:42:67:28:ef:d7:
a6:5d:4e:8e:6e:b0:3c:19:ba:c2:54:ec:e5:b9:1c:9c:b4:4a:
ab:cd:25:4d:d2:d8:d8:bb:58:c0:f5:6a:af:a1:2c:1a:d2:ad:
62:d2:88:ee:30:ca:35:56:3a:30:51:8c:fa:96:99:5e:60:84:
25:eb:5f:3e:54:b7:61:f1:1e:b2:f0:5f:0e:91:76:c5:db:c0:
49:14:a4:ec:f2:3a:06:a6:12:89:59:ed:1a:f1:aa:75:86:8c:
f4:bc:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:05 2026 by rpki-client