Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: +WB3tgRcBCMdZAPu4jyxGoouv5xnBoRxmL1+O09Nyf4=
Subject key identifier: A0:01:E9:3F:C4:0D:47:97:29:29:B3:04:12:B2:1B:5C:9C:EA:A8:3F
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019D2816B34AF4584BF05EE2F74B1841D94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: Hk7bsWUm+Ffzn0jTKUYUTNuddWaBu+3cpv/t76HZP1w=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b3:4a:f4:58:4b:f0:5e:e2:f7:4b:18:41:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=a001e93fc40d47972929b30412b21b5c9ceaa83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:e4:49:b5:e4:b2:ea:86:d3:10:34:ff:c0:
c6:f4:40:7b:dd:7e:75:c4:f7:c1:c0:55:25:2d:af:
7a:19:9a:c5:04:27:cf:33:7c:a9:67:5a:14:16:8e:
41:c2:0b:b5:a3:8a:49:05:2e:4a:52:6c:79:28:90:
11:5a:a1:c8:1e:ea:27:a6:a8:a4:0c:b2:09:6c:8d:
6c:ce:b0:75:c5:78:7c:5c:e9:b5:0c:37:c7:da:a4:
da:fc:55:d6:f7:d2:70:89:74:72:b6:2c:4f:59:80:
44:20:83:99:bb:1a:52:60:cf:4d:ad:4d:e2:45:04:
a3:68:4d:d9:fd:9d:0c:2a:be:9a:24:09:f3:60:4e:
d1:fd:b1:80:d7:4b:84:1e:cf:06:33:5d:82:2c:f6:
6f:5d:45:64:65:ce:ee:52:41:5e:15:52:87:f4:6c:
3d:4a:65:4c:06:83:1a:03:7d:c7:29:3c:87:36:3d:
44:d3:21:62:42:76:1e:72:67:8e:59:cb:ee:29:75:
df:3b:f4:01:b4:eb:80:74:24:40:4b:5d:fb:d2:d1:
cc:50:78:6a:bf:f1:b9:7b:f1:47:da:61:9a:68:3c:
80:36:0d:19:06:43:52:bd:ed:87:ff:9d:b3:25:e5:
14:ee:e8:88:d0:48:60:bb:e3:5b:16:2e:1e:6a:d0:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:E9:3F:C4:0D:47:97:29:29:B3:04:12:B2:1B:5C:9C:EA:A8:3F
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:97:22:34:63:95:19:60:c9:1f:4d:95:08:fc:cf:4a:b4:
d8:6b:32:04:9e:12:52:37:4d:4a:cb:49:8d:45:0b:f4:aa:aa:
60:dc:5e:50:b2:d5:70:06:0c:bb:d9:00:5e:a1:bd:f8:37:53:
50:7b:43:f2:d9:59:65:5b:72:01:c0:6d:c3:49:2a:3b:7a:46:
86:71:17:df:f3:24:f8:5b:a1:75:4b:88:69:e3:d2:b4:5a:ec:
1e:81:b8:57:d3:b2:6e:6e:b4:5b:a6:12:cc:ef:08:4c:32:6b:
3b:5a:27:52:81:5c:7b:49:0a:74:45:cb:14:42:69:7f:ee:50:
5b:29:95:6b:da:c4:ef:41:24:e7:b2:8e:4d:e7:c5:54:90:4d:
52:e6:3c:c2:82:50:c4:4b:44:15:23:a4:01:eb:2b:48:44:a3:
a2:cb:b7:15:bf:bb:26:39:08:6c:4b:43:1c:50:58:4a:f6:ff:
b7:85:04:52:60:f6:94:47:ac:5e:25:92:29:68:65:9f:47:bc:
79:af:a8:bc:eb:69:b7:02:39:14:08:fb:9e:f3:84:7b:05:d4:
92:ea:e0:45:6d:71:0d:c7:8f:1a:13:3e:a3:81:73:93:5b:79:
38:63:bd:a9:7d:49:b8:8e:bf:c2:9f:9a:77:3e:09:cf:5c:b7:
51:bf:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:58 2026 by rpki-client