Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
File: 1TWbs5OO2MpV324QAT-f9hAcG_c.mft (raw, json)
Hash identifier: oTtuqDvL7Zjhdu4ojxRXAVUr+eFTcwK0FGbud8uLipY=
Subject key identifier: E5:21:D2:77:9E:29:82:68:C2:0A:8B:D4:00:0C:ED:03:78:A2:8F:F7
Authority key identifier: D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
Certificate issuer: /CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
Certificate serial: 019D33085A910ED4F5D319F77ACE4782AC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
Manifest number: 53
Signing time: Sat 28 Mar 2026 06:01:18 +0000
Manifest this update: Sat 28 Mar 2026 06:01:18 +0000
Manifest next update: Sun 29 Mar 2026 06:01:18 +0000
Files and hashes: 1: 1TWbs5OO2MpV324QAT-f9hAcG_c.crl (hash: d9pdKVc0u6S53MUSs6lgBehMVWacadr0VyxmO8xSGbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:5a:91:0e:d4:f5:d3:19:f7:7a:ce:47:82:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
Validity
Not Before: Mar 28 06:01:18 2026 GMT
Not After : Mar 29 06:01:18 2026 GMT
Subject: CN=e521d2779e298268c20a8bd4000ced0378a28ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:fb:aa:75:e8:9d:1e:a0:51:e0:62:5f:72:
b7:7b:20:df:c9:b3:07:fc:e8:bd:1a:4e:0a:ae:be:
a8:e0:b3:6e:2e:fc:e9:01:f1:1a:4b:60:13:e3:d8:
3a:5f:cc:9f:49:5e:60:a7:03:df:cf:6d:70:81:78:
d4:2d:75:48:15:1c:fe:41:46:29:97:ef:ae:e3:ab:
12:07:e4:5b:66:87:3e:73:eb:75:2b:33:19:1f:05:
ca:0f:d0:ee:ec:07:5e:3f:b9:5d:29:93:5e:6e:be:
4d:d5:1f:1f:fe:cb:72:a5:61:7c:e9:61:d6:c6:76:
ea:4e:7a:55:bc:25:ac:85:b3:88:a9:2a:53:1f:59:
3b:27:0a:9c:77:32:9b:ea:1a:03:c0:ee:3b:5a:60:
f5:38:50:ea:6a:d5:1b:db:37:9f:01:2b:11:bc:84:
14:af:61:71:fc:15:3b:12:c3:73:4c:c1:12:71:69:
90:aa:b6:a0:17:2c:81:f1:74:01:88:e8:54:83:cd:
2b:3d:ec:7b:eb:c2:7c:b4:13:ed:77:e8:a9:63:37:
b2:fb:bf:5b:23:8a:2c:83:c5:05:00:6c:9a:61:a6:
b0:f8:ee:4d:18:07:0e:6f:3a:b3:00:7e:c7:17:18:
55:d8:4e:b1:70:42:1e:7d:7a:5e:30:20:cb:e2:a9:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:D2:77:9E:29:82:68:C2:0A:8B:D4:00:0C:ED:03:78:A2:8F:F7
X509v3 Authority Key Identifier:
keyid:D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:09:92:63:ac:73:b5:68:ab:d4:25:60:cc:41:d5:bf:04:
a4:c4:99:75:4f:11:dc:47:ba:42:e4:46:70:2c:fb:0f:af:90:
68:b4:10:ff:76:35:6a:88:d2:3d:31:d7:ad:05:ba:45:c3:c3:
9e:f3:b7:31:5b:fb:b7:18:99:9d:79:48:14:77:77:2a:e5:ef:
67:10:87:5b:fb:d0:3e:b0:b6:57:e0:13:c6:f0:ad:2e:cc:e1:
af:b4:fb:5e:2d:94:a0:4e:17:30:74:df:c3:c4:e9:46:3f:51:
58:55:ed:fd:0a:4e:46:fb:b4:67:a1:99:88:a5:13:86:ae:60:
ed:ed:62:09:9d:5a:58:01:d8:71:7b:fa:78:fa:08:9e:44:49:
09:6a:9c:70:bd:c6:85:39:52:4e:d1:b2:9c:f9:3a:53:2f:f8:
8a:ff:a0:e4:ea:2a:f8:6d:5e:70:1a:e9:73:2d:1a:c9:6c:42:
e3:0e:8f:69:46:41:29:af:18:e8:cb:42:d1:11:b1:5b:ee:41:
76:72:0a:46:7d:90:ba:a6:da:56:b8:56:6a:b4:0a:ca:71:15:
7b:f0:4d:f8:36:dc:d8:c6:91:de:3d:0a:50:86:5c:b1:3e:43:
78:5c:f8:79:e3:1a:31:eb:9f:ff:e2:d5:84:3c:1f:c0:50:13:
0a:ec:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:04 2026 by rpki-client