Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: T94o7bb6bymHEeetsn/t50SM4QC+w5MvWEMmp+/cUgE=
Subject key identifier: 66:2F:F5:7F:B0:C5:6B:8F:19:EF:DF:01:09:C1:52:3D:99:BC:8D:24
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019D29CDB91B61FA427AFD957E8626E3A835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 18A1
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: 6k0cYplnabEb4Dtl/lcaiqzlopqnATD/E2Jr77wOLnE=)
2: mjCkDc_goLItqwLjBQWXD9IpNSI.roa (hash: FC0jN/3qdUHziMgksh5FjASN2bhckVnKX7P7UBiZNIM=)
3: qZ-ClHp2EMCOHOmO-fPEGoVnyZA.roa (hash: VA+61872f59mueXn53DQrHXaIxh7WzFJPwtBhyXyU8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b9:1b:61:fa:42:7a:fd:95:7e:86:26:e3:a8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=662ff57fb0c56b8f19efdf0109c1523d99bc8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:18:88:e4:25:38:86:4a:25:a7:8e:ba:c6:
53:be:d0:c9:1d:b1:78:de:46:88:e4:93:cc:82:28:
c7:44:98:ca:50:c4:2d:40:d6:7f:0d:f8:bf:ba:e9:
8d:a1:b6:38:5c:ad:a3:9a:8e:b8:e6:cd:46:03:f8:
91:32:71:1c:9c:86:c3:98:85:8f:a5:03:7b:23:e2:
12:a9:f6:19:f9:3a:15:c1:6d:e5:18:21:c9:8f:9e:
8c:47:eb:e6:37:6e:47:ff:e0:07:be:f8:6f:7d:17:
e1:cf:96:4c:77:97:21:9b:06:0e:2e:06:c1:02:74:
a8:da:f5:21:58:3d:76:70:08:2e:be:6b:eb:b1:e6:
93:16:60:46:0f:f4:41:fb:26:92:f5:f8:4c:5e:34:
d5:0a:c2:8a:15:c2:b2:33:76:92:ee:ef:89:34:31:
80:a2:fa:2e:e4:de:24:dd:95:3c:9b:99:cb:96:e4:
24:b5:0d:9b:dc:25:44:e3:15:98:7a:30:ce:1d:7a:
43:55:1e:7a:b0:5e:b8:2d:d5:12:0c:96:34:2d:91:
a5:22:2a:78:e1:5d:01:a6:e1:0c:07:77:43:37:33:
52:4b:99:2e:c4:cc:35:27:a7:06:42:61:32:2c:30:
d9:f7:71:2d:1d:5b:db:25:d5:30:39:be:ac:9e:64:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2F:F5:7F:B0:C5:6B:8F:19:EF:DF:01:09:C1:52:3D:99:BC:8D:24
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:44:97:99:4e:78:cb:d8:81:51:07:0a:e7:f8:c4:e7:5b:
81:8b:b2:c2:53:de:67:bc:98:fd:96:f6:53:2f:ae:a1:f1:73:
11:e9:c1:6b:ec:19:1e:72:e9:9f:09:78:7d:bc:65:1c:e5:a7:
94:d0:0b:51:23:c7:7b:d1:7f:36:6b:3c:a5:31:92:7c:ec:52:
51:2a:99:98:83:4c:97:55:17:4c:06:8e:a8:9f:db:73:ca:cb:
9f:37:e5:91:9e:de:8d:29:78:b9:ef:d0:d4:1f:29:3f:b6:33:
17:43:3a:80:bd:19:f4:a3:9f:d5:a8:7a:01:55:5a:63:83:6c:
e2:ad:45:fb:dd:36:04:48:fc:79:c5:9b:8f:73:09:dc:dd:71:
4a:90:fe:71:94:8d:a9:7b:d0:49:39:77:be:26:2c:5b:4c:59:
a3:1d:33:60:47:23:91:b8:da:8f:e0:7e:b2:2c:4e:f2:cf:ad:
93:93:94:b9:8f:1d:65:d2:22:86:8f:1f:87:b8:bb:5c:30:dc:
c2:09:81:bd:2b:5f:92:bb:03:56:bd:f3:44:7a:a9:a0:bf:c0:
88:68:7e:ae:09:db:4a:c9:0c:63:f7:98:c9:5b:37:d7:e1:d6:
ea:7d:c9:57:6e:6a:8d:78:75:2d:19:d8:a7:1e:b0:ed:09:eb:
0f:20:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:46 2026 by rpki-client