Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: /bOivLNyC0DE0Dz9Gx1/omuNziQsl4hyM1l2wiZM1pE=
Subject key identifier: F9:3D:96:19:BA:5C:D7:DE:EF:BD:9A:45:13:B5:C6:6C:9F:CC:C7:5A
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019D2884D8A0C830B71A1A1B29EF9D24FF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0CD8
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: 6rKc+xwDgry1hjl9pm2UXI0M1OpBOZtujeuvRtwgDmY=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d8:a0:c8:30:b7:1a:1a:1b:29:ef:9d:24:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=f93d9619ba5cd7deefbd9a4513b5c66c9fccc75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:08:a4:be:13:9b:bd:92:ba:a3:b0:8a:11:
76:49:c2:ee:33:ca:57:1f:61:51:fd:06:2c:b9:0d:
75:1c:2d:98:d6:6d:b4:a5:03:99:c2:71:17:74:13:
5b:4b:67:7e:5c:dd:3c:15:f8:5c:1d:21:3e:eb:e2:
3a:77:1f:23:95:55:9f:53:51:42:34:de:2a:37:e1:
3c:81:0a:2e:83:11:13:ea:8f:ba:1d:8e:76:0c:f6:
10:e6:bf:29:aa:8a:b3:d4:b4:79:ec:d2:a6:7a:79:
95:0b:7e:5c:da:1e:07:6b:b1:27:a7:8f:52:a7:92:
9f:d8:30:e6:ae:af:14:4e:d0:1e:63:3f:87:b3:6a:
be:64:41:4a:58:a8:07:45:62:fb:23:42:b0:9b:c7:
fe:c3:45:15:45:af:61:fd:4b:7c:7f:dd:ac:a7:11:
d9:9a:2d:04:b8:aa:62:1e:4f:e9:84:fc:2d:2f:5b:
9a:a1:13:d1:19:cb:8a:34:0a:0d:2d:1a:22:0a:e6:
55:d7:37:10:56:de:64:85:48:a8:64:e0:aa:7a:6d:
b9:f0:9d:61:7c:99:f4:21:fc:5f:12:e7:ca:c5:54:
4e:2e:78:8c:cf:2c:3e:7e:2e:0e:d4:26:5b:22:7b:
ce:db:65:1f:de:a0:de:e4:cc:2a:6c:1f:67:0b:5c:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:96:19:BA:5C:D7:DE:EF:BD:9A:45:13:B5:C6:6C:9F:CC:C7:5A
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:ff:23:89:bc:e7:25:5f:54:e6:57:d3:a9:12:34:43:31:
d3:cd:12:25:2f:ac:36:1e:eb:15:cf:d4:f2:b2:3b:14:2e:70:
bc:2c:1a:c1:33:ab:32:24:84:6b:32:27:a7:6d:cb:f5:c6:51:
1b:3f:c0:23:b4:50:13:47:c4:1e:01:9d:b5:9d:7a:d8:aa:d2:
f4:b1:57:eb:fc:a5:da:80:b7:af:61:1b:8c:85:41:12:0d:a8:
31:cd:99:78:7c:1b:c3:ad:96:a7:7d:8b:c6:ae:0c:c0:28:95:
8c:1e:9f:89:bc:1b:fc:57:ae:af:6d:c0:dd:16:af:49:98:22:
c2:a3:a4:75:18:53:d9:dd:9c:f8:41:34:94:0b:5e:38:12:04:
8b:a8:b4:d2:50:e5:4c:dc:b6:86:41:36:ef:56:5b:9a:33:26:
2b:52:44:fb:ce:4e:21:12:e2:9b:75:6d:13:c4:b2:c7:8b:5d:
43:c7:7e:89:89:8f:f5:b5:ae:d7:47:bd:4b:4b:74:e9:08:33:
c2:11:4d:6f:2f:92:8a:87:9d:3b:2b:bd:25:21:2b:6f:3b:e8:
b5:8f:41:ad:a0:ef:9a:3e:c2:40:9d:d3:27:a7:70:13:04:1e:
c5:b7:ac:90:f2:b8:69:9a:ad:06:18:50:6d:f5:15:b9:91:3e:
82:7e:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:31 2026 by rpki-client