Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: o0Y7lyzrV+ft7o2selBBgJLyfSKy9viMO+yrvWsL4aA=
Subject key identifier: 83:48:6B:B2:75:52:5A:3C:48:41:F1:52:62:4B:AC:55:AC:09:AD:8D
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019D2704A0875106471EDAA78D668F63F215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 047C
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: 7SFTvCIpQVsLFsfOJPqSiz0CDy6PSbM020HWRepeE1Y=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a0:87:51:06:47:1e:da:a7:8d:66:8f:63:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=83486bb275525a3c4841f152624bac55ac09ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:c6:2a:01:72:e0:39:1f:11:7d:e6:10:a8:
dd:1d:45:ed:5d:8d:83:d9:c7:39:62:47:c8:a6:cc:
c1:3e:02:94:93:15:72:90:4b:16:ef:af:48:03:75:
92:5b:5d:81:31:8c:df:66:69:1f:05:d3:c0:7d:92:
08:b6:3b:9b:ad:26:e5:12:76:02:cd:00:8b:59:e4:
8a:e3:df:4e:82:03:57:2b:bb:43:69:f6:dd:eb:27:
e3:5f:ee:55:f1:69:0b:a8:43:c4:b7:29:63:7d:6e:
ee:81:bb:f3:11:86:97:ff:26:31:78:f8:5d:ee:e8:
d5:25:22:2e:5f:31:b9:88:a2:a3:6b:c5:dc:6d:d5:
03:a1:eb:58:57:b8:4d:eb:1a:22:dd:90:a4:f9:f4:
b8:a2:9d:7d:37:38:f4:51:bd:2e:79:35:dc:92:6f:
41:64:b1:1a:75:9c:b6:f8:1d:6d:02:34:eb:8b:78:
53:98:4e:3d:5a:02:aa:cf:8f:d9:8b:03:5f:9d:d2:
3c:6f:18:e0:ad:a7:b8:6f:98:19:63:7f:30:bc:ac:
55:f6:1a:e6:ed:a4:29:f5:87:dc:81:50:bf:35:7a:
ce:44:a5:ff:c0:d1:40:91:65:99:f0:df:ea:e7:33:
5b:76:72:1e:e6:d5:8f:3c:65:b4:c5:c1:45:e9:d6:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:6B:B2:75:52:5A:3C:48:41:F1:52:62:4B:AC:55:AC:09:AD:8D
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:54:de:9d:cd:94:6c:94:16:ac:94:6c:8f:ad:6e:19:dc:48:
eb:de:a3:04:9a:c4:28:62:b5:b3:98:ab:b3:72:44:4d:bb:ba:
bd:92:75:cb:7a:b1:16:da:08:a8:4a:97:6d:93:e3:3e:61:38:
6a:2c:3e:5b:4e:49:91:cb:a8:d0:74:35:c8:24:e9:b0:3b:b8:
17:23:76:bd:ee:34:8e:06:6c:c7:02:0c:47:39:c1:db:09:5b:
82:bc:2f:30:ba:b6:59:36:41:72:9d:64:f4:cc:51:c0:bb:33:
3b:28:12:26:95:78:7e:fb:e6:d2:52:0e:16:c1:bd:ac:79:cd:
b0:f9:8d:89:74:7d:65:e3:04:1a:53:5a:b6:dc:d4:2a:60:51:
a5:2c:8e:b6:1c:b6:d9:1b:53:cf:4c:5c:ea:6c:7c:b5:2b:89:
5e:c9:d0:f1:bd:27:ee:8f:0b:48:fb:63:3c:1d:ed:04:99:11:
ac:ec:0d:79:a8:96:0a:bb:43:5b:47:05:0a:0b:e4:75:f2:34:
f9:5c:e0:ac:9c:f3:7a:a5:6b:6b:14:7a:67:fa:22:45:0f:82:
5d:74:bc:e4:68:e0:01:5c:2f:b3:78:92:98:37:d0:f9:26:88:
7d:5e:d7:a4:40:c4:39:d1:0c:eb:46:f0:51:5e:42:86:f5:e4:
ea:e3:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:11 2026 by rpki-client