
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: Qt3L62q24w5AAfepFuDqsOg5+Lk2J/SCr62VFILQ5TM=
Subject key identifier: 68:E7:2D:0D:88:15:7E:C6:6F:9E:E7:F9:19:82:EC:D4:F5:78:07:FB
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 019D28849A5B59E1824857F44D0E1474BF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:11 +0000
Manifest this update: Thu 26 Mar 2026 05:01:11 +0000
Manifest next update: Fri 27 Mar 2026 05:01:11 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: +gtPEVo+HDAX+2AP5//22fFLFIiun2UqL+uhIO48M1k=)
2: PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa (hash: GD/HWU3t0dVz2XNxiVj2DMFTslgyISmS+UP1+CaEce4=)
3: hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa (hash: qSG+GFEeR/GOxXMLx7StdEf6sz41a8hoOmnDw6GdlPY=)
4: jXdXWkgPJAckS1tbfXfBM3oOl2g.roa (hash: R2Qr1JCatkYhkl5XRuMbtN2cCVq0Xmr5HkM/fW29yJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9a:5b:59:e1:82:48:57:f4:4d:0e:14:74:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Mar 26 05:01:11 2026 GMT
Not After : Mar 27 05:01:11 2026 GMT
Subject: CN=68e72d0d88157ec66f9ee7f91982ecd4f57807fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:bf:c6:b8:0c:26:4f:f4:7f:e7:d2:6c:26:
50:9e:92:1f:d4:70:d6:17:1b:40:9c:15:fd:e5:94:
bc:5c:a3:4f:da:3b:92:78:9b:ed:e5:72:df:1a:52:
b3:e4:04:52:53:04:1d:a1:c8:6f:78:a4:72:2c:73:
87:07:b6:ed:74:6f:1c:55:c8:f2:9c:2e:dc:70:e9:
8d:99:58:e2:e5:15:6e:b0:50:dc:f4:fc:0a:84:75:
db:35:49:2d:52:1e:45:cb:d1:79:36:2d:c4:4c:ab:
a9:2f:0b:2b:4a:f7:1d:2d:86:65:37:88:35:34:3d:
4d:66:2c:62:89:5c:3f:fc:2e:06:3f:8b:af:0d:2d:
c5:5b:ef:35:ec:d5:e5:5d:57:30:f4:14:0a:3e:05:
4d:35:49:62:9f:99:35:6d:bf:ac:42:11:0d:ad:2a:
04:f8:60:e7:22:ce:85:1b:0c:26:df:84:6b:e5:67:
ca:ed:b3:bb:cc:71:9b:10:5a:f6:4a:9e:c4:77:f4:
26:90:ca:15:47:a8:ff:da:5a:63:4b:2e:d7:72:60:
be:40:01:b2:e4:4f:ae:e2:41:0a:2d:69:1b:53:33:
8b:33:66:77:eb:71:3a:a0:f4:d6:18:f3:36:dd:67:
db:b0:86:89:c7:54:52:69:7c:76:1d:2c:0e:1d:1c:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E7:2D:0D:88:15:7E:C6:6F:9E:E7:F9:19:82:EC:D4:F5:78:07:FB
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:54:5b:db:17:33:15:30:16:d6:d3:f9:5c:d7:3a:37:93:
ce:8f:ff:e3:80:97:d9:f5:07:cd:fb:41:07:a0:4f:d8:a6:05:
d7:1c:44:ab:da:3d:63:ac:52:ed:8b:37:91:f4:c7:6b:86:58:
9a:0d:50:9e:9f:4a:ce:1e:dc:23:72:30:71:ce:57:8e:a5:7d:
a9:38:30:a4:c1:c1:6a:b6:c1:02:07:57:67:42:c8:cb:72:42:
24:7b:ea:e0:f2:ae:52:bc:93:81:f0:6b:68:b1:1f:7a:99:42:
c2:07:e1:16:b5:ad:59:01:1d:5f:aa:28:43:d7:64:e0:01:27:
6a:a3:b5:88:d0:55:4a:5a:ef:26:e2:89:30:94:0a:71:cd:71:
80:25:ce:c6:ea:f6:30:fb:c6:20:01:3c:b6:5d:d4:d6:48:91:
c6:3b:6d:a8:ed:97:8a:49:3f:67:2a:5c:1f:49:21:c3:51:e0:
7c:94:9c:42:a6:68:4b:f3:b6:1a:6b:6b:44:73:51:b8:a0:f6:
03:31:7f:0c:52:94:23:a6:25:03:11:d8:50:24:da:b6:b0:6c:
64:8c:33:b7:a8:91:00:35:b2:7d:49:b4:33:4f:91:1b:65:5d:
b1:21:86:17:54:f5:8e:be:8a:28:69:50:d2:cf:21:b5:5c:90:
dd:62:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:53 2026 by rpki-client