Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: 55o21CMjBqygET6zr3O2UvtidmCdeOeT7lD+laiFqZE=
Subject key identifier: 22:8A:1F:17:D3:FE:54:A8:9B:8D:4A:FB:16:B8:41:E7:98:DC:ED:B0
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019D254C254A21F83FF27E33B3DFF03A223D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 14:00:40 +0000
Manifest this update: Wed 25 Mar 2026 14:00:40 +0000
Manifest next update: Thu 26 Mar 2026 14:00:40 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: FailVN0wQydU+5IzdKx2FJRCE8DiHtOZyz+I3+8iIcY=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:25:4a:21:f8:3f:f2:7e:33:b3:df:f0:3a:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Mar 25 14:00:40 2026 GMT
Not After : Mar 26 14:00:40 2026 GMT
Subject: CN=228a1f17d3fe54a89b8d4afb16b841e798dcedb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:05:24:7a:7e:7a:4e:f5:05:65:ec:96:1d:
ae:1e:92:be:53:35:ae:1c:f0:fa:ba:aa:cc:1a:71:
9b:5f:d8:09:b9:5f:90:1e:e1:9d:88:8d:c0:d1:af:
b5:ec:de:a7:d6:52:29:07:c2:d0:0a:36:23:e8:b4:
a4:c5:b0:60:36:97:3a:76:c5:5c:7f:0d:22:58:1b:
74:b9:57:35:6a:4c:b0:34:a7:e3:4a:05:86:ed:15:
bc:08:5b:8a:89:88:94:fe:ba:78:ad:06:0a:af:1b:
41:f4:30:44:5a:e5:54:33:3e:19:6b:f7:6e:d1:04:
f2:fa:e5:4d:c1:3b:92:56:52:f9:f9:e6:22:91:9a:
ab:3c:70:9f:b5:94:eb:12:33:6a:68:be:e2:1c:a8:
7f:a6:4f:67:e0:18:d2:d1:31:7f:fe:47:86:9e:bf:
eb:df:1e:81:79:e2:45:d0:da:17:b8:3b:ba:27:3c:
98:23:05:86:61:cd:ae:45:6c:90:86:be:7c:88:d5:
95:cc:38:0f:7b:3f:0b:91:cf:65:e2:99:ac:0b:77:
41:80:3d:38:f4:bf:ac:f0:5c:aa:dd:32:66:04:2b:
7b:26:87:46:26:42:97:5b:1b:26:54:a6:ba:54:36:
dc:28:07:50:75:ea:fa:77:d8:54:e7:85:66:84:e1:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:1F:17:D3:FE:54:A8:9B:8D:4A:FB:16:B8:41:E7:98:DC:ED:B0
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:c9:1f:bd:97:0d:ab:1b:a3:39:94:2b:a7:d9:b6:49:bb:
b0:cb:f0:a1:88:28:6d:38:5c:ee:59:70:6a:71:7d:49:6b:5b:
f6:60:08:ec:43:f3:5d:0a:78:02:bb:37:98:e2:fe:af:cd:c9:
9b:e6:c2:7c:c7:52:5e:4e:c6:b6:bb:45:ba:f3:f0:fa:a4:50:
53:53:4d:5a:9d:43:81:98:7b:05:25:b7:24:9d:51:75:db:00:
6e:4f:da:7c:8a:c4:ef:64:7f:9c:27:aa:4a:d6:fe:5f:62:a2:
1e:f4:79:71:2d:93:c5:11:3c:2e:13:00:fe:2f:38:97:1c:ef:
19:ef:64:f6:27:fa:67:82:47:9e:78:ba:d9:bd:13:83:23:20:
46:53:3b:56:7f:d9:e2:30:fb:91:11:08:75:ae:98:11:e8:53:
39:a7:ed:83:99:73:57:62:15:91:e1:e6:86:f5:8f:e1:e0:4e:
be:95:05:0b:85:e9:2f:30:e2:55:2a:7b:3c:53:04:73:43:9b:
1d:29:ea:dc:57:bf:f1:71:59:e1:ce:0a:e1:fc:c7:27:8a:86:
f5:00:43:e4:0f:0a:e0:44:a5:08:60:43:c0:bc:d7:d8:af:46:
2f:8e:e4:06:2a:08:d7:33:6e:80:4c:b9:49:44:29:e9:92:7b:
40:c5:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:15 2026 by rpki-client