Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
File: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft (raw, json)
Hash identifier: uPJ/dydC0xO00CdwFssftHCxYf530Bt8iXNiW4oBbF0=
Subject key identifier: 96:0D:88:B9:3D:C3:29:E7:EB:F2:A0:4D:09:9E:48:36:10:51:50:B3
Authority key identifier: D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
Certificate issuer: /CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Certificate serial: 019D32D106002722CD0F46B9EE4849871E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
Manifest number: 57
Signing time: Sat 28 Mar 2026 05:00:52 +0000
Manifest this update: Sat 28 Mar 2026 05:00:52 +0000
Manifest next update: Sun 29 Mar 2026 05:00:52 +0000
Files and hashes: 1: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl (hash: +LDr7XxjmbmlgNMlaNlF902rb5v59lbSDy3zoRv1h8c=)
2: o0b3FLGT6_KTAMziRPFBDuoxIFs.roa (hash: HuGKkmAJlpIF3je5dBAlXM+W0Ozh9HwD67fbKdy/D8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:06:00:27:22:cd:0f:46:b9:ee:48:49:87:1e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Validity
Not Before: Mar 28 05:00:52 2026 GMT
Not After : Mar 29 05:00:52 2026 GMT
Subject: CN=960d88b93dc329e7ebf2a04d099e4836105150b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:65:43:48:4a:b2:44:01:fc:4e:4f:9d:90:
a1:7a:5c:30:8e:d2:7c:7b:72:54:bc:0b:5c:b0:eb:
00:53:9d:f4:df:11:85:91:b4:c0:77:63:2d:be:c0:
bc:00:8e:e3:21:ce:33:4d:e0:aa:e6:0c:22:b8:66:
0e:9c:3e:4a:be:5c:6c:d2:5a:7a:90:d7:06:f8:92:
03:c7:69:3d:b3:c9:ee:fc:29:e5:08:03:b9:89:9d:
32:3a:bd:ff:83:b2:4a:f9:19:70:d5:2d:63:5b:25:
e5:c1:26:f0:79:02:e0:24:4a:54:da:40:e0:92:80:
64:a9:fa:26:6e:5c:5c:e9:17:e6:1e:f4:fc:d0:53:
f1:ee:04:a1:fa:0f:01:5c:7f:f7:89:ed:e9:78:35:
a8:c3:b5:b7:46:0d:2e:4f:8b:ab:04:ac:33:77:2e:
c4:6a:6f:b3:5b:97:74:ad:da:48:8d:ee:1a:3c:98:
9b:0b:0d:90:96:42:a4:2d:5e:f2:fc:df:ed:20:09:
2f:88:73:85:ca:c8:b4:5e:24:5b:5c:85:23:7b:ef:
63:7e:16:dd:d3:41:7e:c3:0d:03:cc:4c:d2:17:a9:
3b:cc:a8:1c:57:e3:82:13:f9:39:17:52:52:36:61:
bc:3c:7b:92:0b:8a:8f:f6:7e:50:fa:28:d5:f6:05:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:88:B9:3D:C3:29:E7:EB:F2:A0:4D:09:9E:48:36:10:51:50:B3
X509v3 Authority Key Identifier:
keyid:D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4d:bd:f9:5c:42:25:49:a3:fb:a9:41:fa:09:8e:03:ed:16:
58:98:d0:6a:85:a1:83:db:ce:88:7b:f5:37:5a:14:f8:2f:46:
be:66:ed:e4:65:15:61:22:af:33:12:2b:5d:c5:88:93:7b:f5:
0b:97:06:12:29:9f:26:41:62:48:b3:dd:8a:77:14:ad:ae:a7:
0a:16:46:5d:8b:76:f6:89:aa:4e:c2:81:38:c3:c4:ad:4c:00:
4c:45:98:fe:08:20:fc:1a:00:78:d4:59:32:45:1d:82:79:f7:
6a:42:0e:96:8b:0b:ae:ca:39:fb:24:be:e0:bf:d1:70:6c:4b:
52:db:b9:5c:b4:86:e0:be:b8:4d:44:2d:1f:44:9e:5a:b0:47:
50:ff:61:b0:e5:e3:58:4b:a9:b8:65:8e:12:96:f0:91:90:84:
b7:6e:f5:9b:40:81:99:32:47:45:57:6e:16:76:bd:eb:29:41:
7b:a7:29:dc:a3:a3:7d:c0:f1:b6:1c:b0:01:87:3e:85:9b:42:
11:61:fe:72:b9:97:0f:84:b9:c5:37:f6:dd:2a:8d:4e:af:5d:
d8:f0:0d:e3:18:07:d0:e5:8c:cc:8d:34:5e:a3:a0:5f:54:ea:
55:49:fb:8d:d1:44:9d:d1:e2:7f:1a:1c:cb:f1:a3:a0:41:3d:
e5:15:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client