Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: 00QdHtXDp4M7vf7XMKUC8fEJtDgzi5M33zzrD4B+LA8=
Subject key identifier: 48:18:3B:AB:CD:8E:E0:FE:FD:ED:66:9A:FD:30:E0:F6:FC:6A:17:1D
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 019D28F2BC3042FAA84643F81579CD344251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 0D6B
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: WK58CC1RgEq+wa/udufzC+5jcVR8FOiLrVlKMG84G98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bc:30:42:fa:a8:46:43:f8:15:79:cd:34:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=48183babcd8ee0fefded669afd30e0f6fc6a171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:9f:81:e7:d5:53:a4:de:44:a1:a1:d4:2a:
50:32:ec:1d:36:f3:0a:61:cb:5a:aa:ce:e3:76:f9:
d4:de:89:c8:9c:b1:7b:2b:01:3a:25:d4:7e:60:3e:
46:bc:ee:f7:0e:e0:ff:44:7b:27:37:2a:1e:b7:b1:
05:aa:3d:44:c2:24:9b:fc:15:73:38:92:af:1f:fe:
48:8a:6c:b1:67:32:50:9b:18:ab:4f:eb:cf:80:93:
53:63:42:07:e0:fe:7a:26:e5:4f:28:bb:30:99:34:
f7:f0:1a:a1:3d:9e:05:2f:a6:84:ce:d5:5b:03:91:
3e:cf:1f:4e:8b:b4:91:63:a3:4e:4a:19:34:8a:74:
5e:2f:ca:1a:ab:5c:ee:3e:a6:e8:74:3d:da:c3:66:
71:8a:98:2c:17:b8:2b:7d:38:7f:38:4b:27:48:31:
45:b1:8b:d7:27:f0:4f:41:60:29:b4:8b:ad:11:79:
0f:02:d5:ab:0c:c3:9a:81:9a:aa:3e:18:8c:d2:33:
6c:53:18:60:01:0c:6f:1e:13:cc:cb:ae:6c:6f:60:
91:dc:c2:53:d9:72:0a:71:de:c4:33:df:0d:40:67:
17:96:d9:09:84:06:34:6a:e5:ae:0d:6f:9f:bb:98:
04:ed:dd:56:7a:28:ee:0a:bf:d1:56:bc:cf:3c:e7:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:3B:AB:CD:8E:E0:FE:FD:ED:66:9A:FD:30:E0:F6:FC:6A:17:1D
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:5d:67:78:f2:1a:43:4f:dd:70:50:89:c5:ba:b6:df:e9:
2a:cc:f5:3b:cd:2d:d8:d1:5a:41:74:8d:fd:23:ce:6a:4a:b2:
0c:34:06:ee:45:be:04:08:76:23:56:67:5f:50:31:cc:5b:6c:
55:5f:f0:8d:21:2a:20:c3:a7:96:11:ee:0c:bb:7e:5d:2f:58:
1f:0a:b9:e8:c2:aa:78:8e:fc:ec:a1:60:50:a7:d2:b5:45:0c:
3e:83:7f:56:e1:bf:bf:fc:53:f6:48:96:58:08:10:0f:78:ca:
c9:3a:a8:09:ad:99:e4:7b:92:ff:ca:39:f0:7d:a2:e2:7e:9e:
61:51:a0:b7:4d:0f:90:ab:cd:f8:28:9e:fa:f3:7f:90:b5:eb:
8d:80:2f:e2:26:02:d6:06:b6:e9:0d:dc:30:17:9d:f1:11:8f:
a0:ae:92:b1:07:26:bf:5e:13:e4:5b:45:79:bb:37:20:fa:bb:
24:6e:3b:02:04:85:79:57:5a:41:b5:b9:2f:84:aa:f9:f1:a9:
6d:ee:3e:0f:0a:f3:32:7a:fd:5d:85:9d:da:3c:cb:29:cc:7e:
9f:1b:bf:9c:ee:2c:05:7d:90:82:94:9c:07:b5:72:27:f4:e0:
bd:a9:d4:bc:5c:da:26:e9:36:9b:ab:15:2b:0e:96:36:e9:00:
b6:b0:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:20 2026 by rpki-client