Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: p7wuXSm5pg/TqZi9GpXxqzXc3yly1ebE55nO1YDOwFo=
Subject key identifier: E5:7C:7A:E8:A1:7F:8D:FD:71:0A:CB:4E:4E:DB:74:EC:56:66:7E:91
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 019D281692A69CDA30E85B27DB21EAB36EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 18A4
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: uv9KOLXK84Aa/o+f6hMkRA8sehi6CcVN4WMx2V0TN90=)
2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:92:a6:9c:da:30:e8:5b:27:db:21:ea:b3:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=e57c7ae8a17f8dfd710acb4e4edb74ec56667e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:05:cc:b3:48:da:5a:82:50:67:de:1e:e8:
d3:a5:f5:92:ab:6f:22:c5:29:61:70:23:10:b4:83:
86:25:ee:4a:28:fe:33:bc:f1:14:dd:07:d9:6a:6a:
20:4d:56:3c:db:d3:c6:bf:a7:68:80:ea:22:61:20:
cf:00:ae:5a:16:24:a7:6e:9f:ab:53:fe:97:a1:45:
cc:cd:29:69:f8:43:54:7e:f7:1a:db:08:1e:ea:d7:
79:b3:35:2f:94:e7:a1:38:b7:df:5d:fc:73:cb:55:
c4:e1:4e:b9:03:16:a0:c5:8d:e5:d4:30:9e:22:dc:
ab:13:81:7a:22:7a:fa:5d:05:92:ef:45:68:a4:61:
ce:67:ff:97:67:01:e7:7f:41:34:42:22:10:e0:6b:
65:a2:61:91:45:9c:04:f3:17:7d:33:c8:14:92:0a:
c2:f4:9f:94:d8:0a:e4:20:47:71:2e:cf:ca:80:9b:
43:d6:e8:23:87:f3:a1:f0:3f:b7:e8:9c:cc:f4:f1:
bd:86:78:13:51:03:25:ba:42:f7:14:88:aa:99:e8:
bb:24:4f:7d:72:eb:eb:07:d5:52:27:0b:70:06:d4:
40:9b:ab:cc:a4:5d:28:97:07:49:b2:4d:ac:3c:7f:
2d:18:de:8b:f0:a4:d6:56:c8:ca:df:11:e2:85:d5:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:7A:E8:A1:7F:8D:FD:71:0A:CB:4E:4E:DB:74:EC:56:66:7E:91
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:3a:46:40:df:8a:ac:0b:e2:0f:a3:6e:d4:93:e3:fa:21:
81:35:6c:88:ad:40:90:71:22:86:21:0d:4d:b1:4d:ad:f6:92:
ed:46:c8:86:ba:55:1e:c3:4b:d9:cb:b0:b5:74:ba:25:8b:eb:
aa:fe:21:6f:a6:53:2d:43:fd:c4:d6:d3:c0:23:ef:db:93:f7:
27:9b:36:73:4d:3e:d3:7e:d8:70:dc:e8:cd:5c:cd:bf:7f:65:
9a:8c:67:a9:59:36:ee:ed:c8:f3:88:c7:7a:51:2b:87:0c:f1:
0f:f2:5f:5a:c1:5b:1d:2f:f1:ea:6d:31:11:61:1e:62:23:64:
92:f0:9d:b3:3f:05:ec:0b:d7:d9:fd:86:32:c3:8f:d9:26:20:
8b:85:62:6d:b6:a5:56:8f:73:16:1b:0b:ed:3e:b7:6b:56:54:
f7:ff:18:61:b7:13:e0:69:a3:e3:0c:c1:10:db:1b:25:27:e5:
27:56:07:e0:ba:ec:5d:f1:f9:2d:4d:77:b4:e3:86:5a:10:8b:
63:4e:01:0c:a2:fb:b7:d6:d9:71:1b:ce:94:e3:12:9d:d8:04:
ae:19:d8:da:cb:02:fc:ad:7d:f2:f2:16:b5:41:6f:67:73:2a:
90:b0:1c:08:88:7a:f5:09:fe:c9:1b:b5:54:e0:f6:51:b4:47:
e5:2c:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:06 2026 by rpki-client