Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: LgJ0zRZV3QZ4nY281Gsuyp5eHPw3/3CzZBdoox7KGss=
Subject key identifier: 33:0C:C9:D1:FC:C1:6D:93:88:A0:EC:74:D6:66:E4:32:8C:51:44:06
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 019D292910D3DCEAFDED2BD5C60D11009CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:50 +0000
Manifest this update: Thu 26 Mar 2026 08:00:50 +0000
Manifest next update: Fri 27 Mar 2026 08:00:50 +0000
Files and hashes: 1: 0ra2tGA3CZ_wmT1ModZ42xAIr6g.roa (hash: KmQKsrbbyKwBzRxHfn+Lobkic7k6pvTLjr15K++dcm0=)
2: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: VH1K1GuwPojEet2I3Dn0iTMoyZJdJjRNEpE1Th8OXCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:10:d3:dc:ea:fd:ed:2b:d5:c6:0d:11:00:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Mar 26 08:00:50 2026 GMT
Not After : Mar 27 08:00:50 2026 GMT
Subject: CN=330cc9d1fcc16d9388a0ec74d666e4328c514406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:0a:27:fd:8c:3b:85:38:89:72:48:06:52:
fe:a1:d3:f9:0f:f4:42:76:4d:dc:17:5e:30:ae:be:
45:5e:87:23:5f:d8:f7:53:27:4c:c3:b5:84:c4:2f:
28:17:6d:c7:ec:8e:31:7f:1d:e9:69:06:8d:83:28:
55:a4:ba:63:1c:da:8a:2a:b9:d7:02:5e:ed:1e:de:
4f:12:a6:b3:53:95:4d:55:9a:b6:c9:6f:cf:b9:2a:
15:36:14:3d:70:4d:aa:3f:04:54:dd:f6:a3:7a:31:
f4:f0:a6:ed:bc:2b:4d:95:88:f3:b1:01:22:d7:4d:
7f:52:5d:48:9a:2f:fc:c0:99:dc:48:c6:2b:fd:65:
1d:44:c5:0e:98:a3:f2:02:6f:6e:ba:73:fd:26:30:
b9:e4:ab:16:4d:50:5a:d8:e3:54:61:7e:bd:de:20:
4a:a5:47:b3:97:da:21:7e:17:c9:10:e4:64:b7:62:
13:0d:2e:3f:65:be:00:47:4a:08:06:29:19:c9:9c:
d6:f8:75:c2:ed:67:ef:99:3c:66:47:21:09:ec:d5:
92:9c:2b:ad:e3:cd:11:57:93:fc:49:0a:4e:08:18:
aa:31:da:5e:a5:36:b0:de:b7:c0:33:fc:7e:47:44:
69:bf:a8:e8:cb:70:f3:a6:15:4b:78:1c:de:2e:59:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:C9:D1:FC:C1:6D:93:88:A0:EC:74:D6:66:E4:32:8C:51:44:06
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:d9:75:aa:61:88:1d:81:25:17:cd:54:b6:fe:8f:58:d3:
46:4a:68:42:65:2f:c9:63:bc:69:2a:99:af:76:84:99:5e:57:
fc:a0:6b:49:e2:59:36:d1:4d:f7:16:4c:c8:f5:e1:89:07:9d:
1e:8f:a8:2d:06:2a:b1:63:2c:1c:36:b0:97:ca:bc:1d:55:13:
db:7d:04:77:68:ba:d5:ca:dd:c2:fb:f1:c6:d6:c6:90:1c:6f:
b8:2d:a3:ca:ae:dc:31:d2:a2:2d:dd:54:ce:c0:cc:3f:5e:4b:
61:1d:24:53:92:6b:57:41:4e:4b:0f:18:ea:bf:e7:c3:4a:ef:
8c:4d:23:c7:b9:77:3a:35:af:35:c4:9b:24:81:4b:3d:26:61:
2e:e1:0c:29:ec:88:24:3a:38:ff:d8:83:a0:cc:d9:87:12:d6:
0a:2c:ce:5a:5b:22:03:24:b8:ce:16:aa:40:27:9c:50:04:9d:
9c:e1:84:9f:b5:7d:97:de:bc:93:12:3c:cf:10:5a:cf:90:7f:
02:19:b2:30:06:3a:3c:b6:13:5f:14:c6:ed:64:53:b8:d6:ca:
1b:1a:90:d3:fc:71:3e:71:fa:6c:00:00:6c:6f:3a:cf:b9:67:
86:e7:d6:de:b4:41:0f:51:5d:cf:b6:4f:38:2a:8f:31:67:60:
87:a2:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:23 2026 by rpki-client