Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: dUlkznkxCxcqGnjhNII4dfHaaszAef5IPn3jtkOT0gs=
Subject key identifier: 96:5E:4E:42:81:67:C1:AF:B4:92:46:1D:00:AA:C4:E7:1B:E2:E1:FC
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 019D284DDECDFC59D42A2B4E9C59C59BB760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 12FC
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: lh90qtUKq2dmnXSwC1acX6jQoyDwCMM2nq0eUaepjXo=)
2: DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa (hash: v/EHF8za/yF5QkLDnsNNBRhuf4fJfY8/YwjXrsygUS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:de:cd:fc:59:d4:2a:2b:4e:9c:59:c5:9b:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=965e4e428167c1afb492461d00aac4e71be2e1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:7c:8a:90:3f:d7:56:34:a1:e6:18:7c:f1:
cd:9a:d3:8c:89:de:39:82:ec:32:d0:ff:d1:6b:d7:
a2:47:0b:10:c3:ce:eb:a7:cb:93:e5:d2:2f:1c:6b:
e9:d0:42:b0:e5:ec:b1:e2:1e:46:10:96:20:26:c5:
71:bc:d9:01:f9:50:cf:ac:dd:f5:e6:2a:7c:f6:5c:
60:23:df:77:e8:4c:51:a8:fd:1a:02:39:bd:f2:96:
78:40:3a:d6:a1:6f:8e:29:38:78:83:62:7e:86:18:
5e:2d:da:3a:62:ad:65:4b:76:41:13:f5:07:53:6f:
51:07:78:58:2d:be:18:8f:a1:5e:c6:95:50:e6:de:
9e:d3:4f:79:3e:b8:92:c7:12:a6:5a:e4:2a:a5:d8:
09:e2:72:c6:88:ba:b0:10:9a:bb:1a:d9:06:c6:46:
f8:4b:0d:91:53:aa:1c:ff:05:aa:b3:f2:0e:80:47:
e3:d0:4e:22:08:06:1c:f5:07:d8:47:66:e6:9a:52:
cb:0e:cb:dc:41:91:4c:2d:7d:a2:32:28:bf:0e:cd:
6b:76:ca:ea:46:ef:5e:e4:c9:bf:09:b0:10:7c:9b:
03:0f:01:32:97:c2:2e:a6:b7:75:fc:55:e1:6d:8e:
f6:07:71:30:5c:f2:17:93:c0:d3:5b:56:54:af:56:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:4E:42:81:67:C1:AF:B4:92:46:1D:00:AA:C4:E7:1B:E2:E1:FC
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:94:9d:32:d6:24:c1:b6:19:58:32:84:0e:4e:bb:12:f1:
eb:40:17:12:5a:f6:42:24:6a:2f:9f:02:93:dd:ad:8f:5d:80:
62:95:b7:d9:8f:27:aa:88:78:ba:3b:45:a8:58:ef:ce:d9:6f:
8b:25:6a:fa:68:ce:78:2a:92:e2:31:f1:d1:cc:59:c9:66:b0:
79:90:f2:86:5d:c9:75:70:48:f4:68:10:e6:c6:1f:11:2e:f8:
6d:73:91:11:17:55:1e:2d:60:a1:df:20:7a:89:00:74:6f:4d:
ae:94:d9:38:7e:af:84:1f:ec:ac:31:b3:4b:83:35:5f:fb:5a:
f3:e0:0a:fd:e9:14:f2:5e:60:f3:12:51:c3:7e:6a:30:55:cc:
dd:f3:dd:1d:14:f7:c2:92:dc:b0:fc:42:9a:5a:79:5d:11:e6:
1b:76:1e:4e:b5:87:36:ee:39:24:c1:2b:3d:7f:3e:a5:2f:10:
01:14:65:a4:da:dc:21:55:53:91:6b:1f:67:29:2f:00:64:eb:
1a:3c:92:e7:2d:b8:f0:cb:f1:17:ba:37:8c:5f:c2:3f:31:06:
60:04:de:13:e4:2d:c3:aa:7e:04:7c:66:dc:b2:5b:34:e7:a5:
18:7a:a5:e8:06:74:23:76:ba:ce:1e:b1:b6:17:b9:43:16:41:
7c:25:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:20 2026 by rpki-client