Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: ibQJO203qrRKhkKBt/+vlv5ssW8Qh1C8MQae4gz6YqQ=
Subject key identifier: E7:AD:9A:02:9A:68:F8:90:FE:7F:FF:94:65:7A:F0:59:3F:D1:CC:3C
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 019D28F2147B3A739A4D253D66445AE41E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1353
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: 4qXAuOPh3YoQAgDyrLwa4bBJffcomEAhSxriS9grwnc=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:14:7b:3a:73:9a:4d:25:3d:66:44:5a:e4:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=e7ad9a029a68f890fe7fff94657af0593fd1cc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:73:09:4c:a7:a5:d8:56:f3:ec:5f:43:08:
15:2b:5c:5b:1e:29:c3:e4:f1:0a:2f:41:21:6c:78:
9f:7e:23:13:1d:72:07:e2:b5:eb:8c:84:0d:fe:6e:
e6:84:ea:3d:42:81:ab:04:52:58:1a:d7:d7:7f:95:
bb:75:45:ae:8d:f1:de:c4:96:b2:8b:c1:0d:be:6a:
c1:cc:0c:9a:d3:bf:eb:3b:2a:93:e3:a5:5e:24:19:
ab:d0:40:95:4d:27:d5:de:72:38:6e:a4:36:62:8d:
a5:6d:64:e3:90:d0:71:30:66:90:14:7e:39:1b:fd:
9d:7b:ae:61:ac:57:9a:bd:b6:34:92:53:aa:40:2c:
ef:60:3d:0d:c0:c3:88:60:37:bc:86:a3:4f:50:24:
8b:e1:75:16:59:47:d7:c2:0b:be:d6:fb:60:1c:dd:
ce:29:28:be:6d:f4:d3:c8:bc:0b:74:89:50:f8:68:
db:36:86:aa:33:0d:d5:cf:d2:85:2e:07:9c:04:88:
cb:b9:08:fb:5f:5b:42:79:e5:52:e8:3c:d5:8e:e8:
2b:68:5c:93:65:a7:2f:3c:b3:d8:b5:61:54:5a:03:
11:c3:85:a7:9d:48:16:d3:e2:85:8c:e7:1b:33:9d:
2a:ff:7e:79:7c:49:1c:c8:65:3e:0a:8d:23:36:bd:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:9A:02:9A:68:F8:90:FE:7F:FF:94:65:7A:F0:59:3F:D1:CC:3C
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5c:2c:77:62:36:2f:d0:40:6e:93:98:13:5c:6e:9c:85:48:
cd:44:10:a5:06:44:84:75:00:c0:5c:49:d7:07:2b:d1:ce:42:
24:3e:30:9a:47:39:98:d1:0e:fd:02:31:c3:4f:d2:32:81:bc:
3f:23:d2:f2:ba:f7:34:2c:71:2f:c1:29:63:4e:3b:fe:c3:71:
8b:96:09:9b:ed:e0:3c:c2:50:80:3e:43:39:d3:39:6c:46:a5:
04:76:f7:74:59:23:59:75:cc:d7:12:be:e4:48:b1:72:15:98:
2a:fe:b3:b5:d6:6b:94:fb:c5:74:f4:1f:0b:32:eb:50:97:e6:
7c:f5:bb:d6:f6:92:dd:6b:98:04:92:3e:78:29:ba:28:2c:cf:
b1:21:e7:82:e7:52:60:6a:1f:36:a8:88:7c:56:d2:b9:67:25:
a1:f1:80:09:66:a5:ca:b6:52:b2:28:e0:d8:f4:31:e8:b1:36:
b6:c0:45:06:f0:c6:a7:00:ef:ea:66:4a:59:74:b2:e0:54:d5:
32:b2:ea:6b:67:aa:35:70:3d:3f:d0:9e:0d:2d:82:87:92:a9:
dd:4a:17:9f:15:bd:98:52:36:fa:bf:75:69:4b:69:fb:3d:8a:
3a:e2:cc:17:17:e6:6c:fa:d1:00:ea:50:ba:07:64:96:45:3f:
98:ac:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:35 2026 by rpki-client