Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: kHHpk8rc76OL/3l+jehSPKVbO2hczAAKGFgBTfbUE/8=
Subject key identifier: 1A:C3:F8:EC:0A:B6:36:A2:53:8D:BA:3F:74:F7:1E:5F:E7:2E:0A:4D
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 019D277273B3D9136A3B3290729E5A4B7E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 0489
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: ioH0Xvy95JmsclgigWKwcxiBDsKp0A8aKoRx8Of93Ms=)
2: Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa (hash: VypdL+t+Km3avCeeLRSu2LBHbDwKwpUGNeK6Kc08dJE=)
3: hI3e7uK5dcpU9lEziXhTJOX8ujo.roa (hash: jWqaOCgUgQhWBYlF8RKOY20G2OtGLon5g45aLhAiSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:73:b3:d9:13:6a:3b:32:90:72:9e:5a:4b:7e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=1ac3f8ec0ab636a2538dba3f74f71e5fe72e0a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:50:75:34:e0:dd:0f:3e:24:6e:f2:4c:55:
76:c6:7b:57:f8:4d:5c:6f:0c:e8:e7:52:1e:28:97:
ee:56:73:3b:8c:a4:57:98:2c:a5:be:5e:f1:0e:21:
88:77:0d:d9:0d:c9:cc:36:d6:e1:b2:e1:fb:03:82:
d5:05:c7:02:fa:cb:91:02:18:cc:39:9c:7f:7b:c6:
b9:50:62:4b:90:30:cf:6f:55:f3:83:69:ed:a3:6b:
b9:e2:11:fc:dd:80:b2:cd:09:61:b5:74:42:ae:63:
81:b0:16:0d:81:37:1f:ad:a2:83:19:c6:40:ca:82:
39:48:cb:fb:ad:5e:a2:9e:ac:3b:56:3c:2c:2e:bb:
cf:d7:66:71:73:c1:99:3a:8f:54:43:18:90:09:1e:
81:de:24:74:a2:0f:5e:44:8b:5d:35:34:68:89:13:
4e:26:a0:ca:14:61:42:ee:07:a1:9e:ee:d6:25:e6:
f5:cb:2f:12:7a:d3:09:33:db:18:1a:c1:cc:3b:15:
5a:f2:2c:11:75:b0:15:17:be:90:13:97:8c:51:39:
72:eb:ae:b9:b9:a7:9c:f0:97:86:67:f8:bf:83:48:
93:51:4d:15:d6:b7:d3:fc:f8:dd:cd:e6:77:fa:ba:
d7:41:a3:a5:11:f4:27:7c:e9:52:d8:ea:55:47:a9:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C3:F8:EC:0A:B6:36:A2:53:8D:BA:3F:74:F7:1E:5F:E7:2E:0A:4D
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8c:5f:47:a6:f9:ce:80:58:86:33:0c:02:8a:19:6e:31:51:
d7:94:03:6c:b7:24:e5:e0:21:67:05:c3:b9:91:bd:ef:ed:67:
8d:91:6d:5d:47:eb:dd:a8:b4:a8:d0:ef:32:e1:37:72:10:c1:
a7:4a:61:ad:d8:9c:e2:a1:e5:9f:3a:fd:ef:3a:be:a9:6b:60:
42:50:e1:aa:ef:8f:96:39:a1:f6:92:ea:1c:ae:0c:50:ad:9b:
b8:61:3c:94:f8:ad:65:86:af:9e:b9:15:f3:19:73:59:ad:5b:
22:e7:5a:31:39:f0:a5:ec:4f:81:3e:36:a0:a4:58:40:9f:c2:
d5:69:e5:c6:4a:bd:25:0d:dd:ab:4e:d4:47:20:7d:52:bf:51:
5a:7f:f6:3f:f3:da:28:8f:58:b6:15:b9:aa:95:05:97:08:c8:
52:b8:fa:12:a1:a1:04:fd:28:de:19:d8:ae:24:13:53:9f:91:
c8:75:7d:7e:80:63:19:48:bc:04:95:5d:79:17:46:42:cb:e2:
75:4c:b8:ae:f0:fb:c7:40:37:6f:ff:be:39:00:1f:a1:70:c5:
bf:12:73:be:a4:f8:5d:19:00:25:cf:cd:05:62:1b:d6:36:22:
e6:bd:66:05:50:7b:96:45:68:59:6f:75:33:d7:9b:79:34:74:
63:27:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:52 2026 by rpki-client