Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: l8faCXrqTg8eRR/8SUorvlO37CHLef0KqWdhQzGZ7m4=
Subject key identifier: 48:3F:D0:A4:D0:18:A8:4B:69:7D:40:7A:82:A1:95:EA:32:9A:49:36
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 019D27DFF0F8679C674CCCEE79A90DC9B550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 175E
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: je65ACZ6sKeQOhiZKMKwJWWxx2JLe/iygSCdM6YSxfI=)
2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f0:f8:67:9c:67:4c:cc:ee:79:a9:0d:c9:b5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=483fd0a4d018a84b697d407a82a195ea329a4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:63:3e:68:62:e1:e3:f9:f0:5f:af:74:12:
03:fc:ca:e1:8c:b1:74:de:f3:91:c4:cf:3d:52:6a:
6d:c4:84:33:92:81:c8:ad:0e:6d:a4:f7:d1:2a:8e:
f2:6b:ff:6d:47:c4:a1:71:ec:7f:71:91:9e:c6:99:
39:20:c5:39:d6:0d:98:cf:a3:75:92:a3:36:29:ba:
d3:2f:87:90:67:9b:b4:c8:47:38:e2:c7:d1:31:46:
f1:ab:9d:af:1c:87:4b:a9:b3:b7:1c:b1:1e:33:12:
1e:e6:88:4d:9b:90:f3:f9:a8:61:25:53:1f:49:31:
d9:a4:54:0d:6e:72:04:dd:9c:89:d7:65:4c:90:81:
78:e8:5e:ce:0e:05:f6:69:e1:71:9c:38:7a:e0:e5:
84:73:88:46:4f:d5:7f:3e:5a:4c:76:2e:6f:b0:52:
3d:bc:ea:75:7f:66:6f:c1:28:75:3b:03:18:6a:71:
42:24:9c:07:38:3b:43:e0:52:6d:a9:84:34:04:fc:
5b:85:dc:33:68:75:74:c7:a1:4c:d9:86:0e:6d:13:
3c:da:6a:5f:63:67:53:54:c1:31:4e:e1:50:81:39:
26:0b:f6:33:05:87:10:b5:c3:0d:ce:fc:92:e9:18:
87:b2:8c:ab:e8:28:e6:dd:99:65:5d:df:fe:54:f3:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:D0:A4:D0:18:A8:4B:69:7D:40:7A:82:A1:95:EA:32:9A:49:36
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3f:a4:71:7b:07:b8:2b:4e:e5:f8:13:f4:93:ff:af:12:43:
21:f1:0f:5b:ae:b9:cf:ab:c8:06:2e:49:d9:f0:38:41:d0:24:
99:46:9d:48:21:97:19:88:ba:14:74:f7:59:18:66:c1:0b:90:
ca:02:4c:b3:c0:0c:ec:72:55:2d:40:ef:eb:83:cd:7b:4d:a0:
4c:e2:c6:35:82:c0:f4:51:2d:6a:6c:6a:0e:b8:02:4d:60:06:
86:c2:4b:6e:51:b7:0b:82:b2:fe:b2:f4:cd:26:47:09:1b:15:
9f:4d:eb:3d:d7:cc:d1:be:a6:18:ad:2b:f2:46:be:c8:a9:b9:
39:67:25:57:6a:6d:66:9b:01:52:7b:eb:b8:e8:fd:31:6f:88:
5b:ff:0a:81:e0:c3:7f:ef:45:24:40:68:59:6b:82:7e:a7:f7:
8c:7a:8e:09:ae:08:52:82:50:85:11:6e:f5:06:8e:8e:19:a4:
74:c6:a2:28:97:47:6a:8d:b4:8d:87:2b:ef:34:c6:7f:ec:40:
4e:20:a0:24:8d:59:49:89:71:ac:c3:bf:13:ce:8c:e5:bf:31:
57:fd:eb:7b:de:44:1b:b8:c3:7f:39:1b:a3:66:02:56:e6:2c:
0f:9c:7a:9f:b4:2b:43:ef:61:f9:ff:20:07:b4:c7:33:5e:7d:
af:d3:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:37 2026 by rpki-client