Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
File: 1MjvOur8QtSTmZ8v5DYZO-hREU4.mft (raw, json)
Hash identifier: pVld4rNi5EqyJSHnLnT7jq4xUp162nGcr3HbXVwD+1U=
Subject key identifier: 21:2D:3D:02:C6:D6:18:BC:D3:46:5B:A4:34:44:71:87:E6:77:4A:D2
Authority key identifier: D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E
Certificate issuer: /CN=d4c8ef3aeafc42d493999f2fe436193be851114e
Certificate serial: 019D2B4E638DD32392621818B227B43D9D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 18:00:50 +0000
Manifest this update: Thu 26 Mar 2026 18:00:50 +0000
Manifest next update: Fri 27 Mar 2026 18:00:50 +0000
Files and hashes: 1: 1MjvOur8QtSTmZ8v5DYZO-hREU4.crl (hash: bLTKIpA/CVBIsEKyY5kYxWZGBeyGYSNze0X48IfehXU=)
2: kMjU5SPCHhf-fECFvz7nifCpMy4.roa (hash: nCt6rvQjRfODBx5zhXzuU3Hf/5pXaEL7+ZUSieoDSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:63:8d:d3:23:92:62:18:18:b2:27:b4:3d:9d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c8ef3aeafc42d493999f2fe436193be851114e
Validity
Not Before: Mar 26 18:00:50 2026 GMT
Not After : Mar 27 18:00:50 2026 GMT
Subject: CN=212d3d02c6d618bcd3465ba434447187e6774ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:91:14:d1:63:5c:8d:bf:01:4a:62:ef:02:
80:80:39:e1:be:5d:80:63:9b:aa:c2:b8:45:e3:b3:
ef:1e:27:48:31:93:74:f9:98:d0:ea:40:cb:a1:22:
e4:81:67:c9:2d:f9:0d:6b:62:59:b0:bc:b3:5c:06:
ff:d8:41:0d:39:0f:83:91:f4:e2:36:7a:fe:70:de:
e2:21:2d:6a:4c:44:7c:ad:75:f2:e3:ae:4b:3a:7c:
fa:fc:d0:b1:18:b5:be:4c:0e:6a:01:6c:8c:34:60:
d2:80:16:a8:cb:f5:e3:a3:72:2f:63:73:81:dd:cf:
c5:2d:ad:d8:f0:7d:fc:99:0d:63:c4:cb:43:cc:d4:
5c:37:58:ef:a1:46:92:a2:fa:d2:ea:8c:83:fa:13:
16:3b:69:7e:23:3d:01:85:a4:78:56:43:db:b6:f9:
57:bf:e2:f8:e5:3b:10:8b:ff:ba:46:6d:54:59:87:
41:68:17:f1:94:6a:1a:e9:1e:84:c5:7e:d5:d1:26:
be:0c:ce:9d:e8:e5:88:f0:c7:64:7e:21:78:9a:05:
19:df:d4:57:01:8d:35:93:18:5a:ef:a4:95:06:76:
bb:79:5a:61:c8:73:9b:61:5b:03:15:fc:82:57:16:
59:f7:a7:67:99:1e:a0:9b:3a:34:ec:23:2f:0a:1f:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:3D:02:C6:D6:18:BC:D3:46:5B:A4:34:44:71:87:E6:77:4A:D2
X509v3 Authority Key Identifier:
keyid:D4:C8:EF:3A:EA:FC:42:D4:93:99:9F:2F:E4:36:19:3B:E8:51:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MjvOur8QtSTmZ8v5DYZO-hREU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/1MjvOur8QtSTmZ8v5DYZO-hREU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b3:dd:0e:37:f7:5c:06:72:69:8a:48:d7:77:b7:19:8e:53:
7d:35:61:8b:da:49:6d:df:5d:86:81:a7:d7:c1:1c:be:30:82:
00:3e:6d:51:9a:25:ad:12:7b:e6:45:41:96:d6:9c:74:2a:46:
d7:9f:01:93:85:36:d4:8e:ac:9d:79:20:04:31:9e:8b:33:39:
4c:d3:a9:6d:3a:2e:bb:c0:2a:58:d7:d9:82:4c:26:2f:f1:ff:
19:5c:94:23:89:b9:08:80:36:8a:e1:f6:2f:70:55:f4:cf:30:
a2:24:1d:91:6a:53:7d:3c:c7:f8:05:1d:d6:61:3d:31:b8:2a:
14:96:94:57:80:98:55:fa:ec:d5:29:58:fe:b7:dc:3a:ab:39:
2d:25:89:85:5b:a2:56:78:d4:71:53:b1:3b:20:20:e6:29:af:
a8:f4:42:a3:af:c4:f7:0c:e5:39:dc:68:ca:8f:cc:84:60:84:
11:ca:fe:5b:d2:53:0b:a2:04:7c:70:19:6d:60:ff:31:97:21:
a7:03:d4:56:e3:6d:31:e8:1f:c8:18:c1:ba:3f:2a:21:e4:09:
92:ac:92:0c:b3:e7:3f:a1:dd:b8:13:02:ac:fb:91:fe:e0:c2:
02:4a:e5:22:9f:f9:29:f3:e0:2d:5e:54:d9:ac:21:d7:5f:53:
91:f7:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:39 2026 by rpki-client