Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: DQbQCO0CNzfYG16gpwXeeT8O16mYRAllc4rzab0duPM=
Subject key identifier: E4:43:F4:DD:75:D4:58:B9:5C:F2:F6:1B:F5:B8:9D:65:C9:52:5B:D7
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019D273A8776E2FE14A30C1264EC13C30A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: mbRzvvpEGQOL0IRu3KAx+IwsW6zwW7fM25Ts6n3fGes=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:87:76:e2:fe:14:a3:0c:12:64:ec:13:c3:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=e443f4dd75d458b95cf2f61bf5b89d65c9525bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:98:71:61:f6:36:75:58:28:71:cf:16:08:
f4:23:88:67:58:0d:ea:ae:64:dd:ac:7a:ce:87:c8:
e8:1e:18:cc:e4:2f:54:f0:4d:a5:42:dc:6f:94:a3:
dd:35:bf:04:53:92:38:30:c0:aa:b8:61:41:af:1e:
f9:f4:ce:9b:b7:45:98:77:73:49:a0:15:93:de:ea:
3b:01:c4:b9:64:3a:fc:e6:cc:b5:32:cd:50:bc:01:
8c:92:a6:df:3f:e2:a8:25:fd:a7:a4:da:42:96:4c:
37:bb:f1:5f:9d:9c:79:08:86:6f:47:d7:06:2c:76:
b5:48:09:9d:f8:0d:9d:e5:e0:be:b9:a3:cd:bf:57:
5b:75:76:2c:17:e5:53:5a:28:7b:a3:5b:d1:4a:67:
d6:5b:83:ef:a8:be:57:80:19:c0:51:31:3e:a2:06:
a8:5e:4c:22:03:a7:f6:4f:b1:13:91:0a:7b:3c:b9:
fe:17:52:cd:ed:fe:56:a8:01:1a:35:df:6f:e7:23:
be:d9:f7:58:12:4b:f8:9c:eb:ad:02:bf:85:bd:6a:
1e:44:5b:c1:31:06:29:ad:d5:d1:b8:82:f5:16:dc:
c2:64:b1:16:e5:d2:69:6b:f5:a6:4b:e7:30:e7:32:
f9:6e:30:a3:1e:8a:f5:cf:3a:b2:d9:b4:a6:a2:bb:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:F4:DD:75:D4:58:B9:5C:F2:F6:1B:F5:B8:9D:65:C9:52:5B:D7
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:3d:98:6c:04:9f:d8:66:71:99:f1:50:06:8d:21:42:5f:
ab:f0:8e:a6:0e:b7:56:05:00:73:ea:d9:28:cf:43:26:58:95:
c3:19:9e:e5:3e:a0:c2:70:d1:e3:e6:db:14:06:39:8e:d2:ae:
d8:22:ea:c3:6b:c6:27:95:0e:61:01:40:84:86:ea:99:8c:b6:
46:eb:e5:20:24:2c:a2:c0:03:86:15:e5:4c:29:87:d7:de:24:
20:de:36:b1:02:0f:78:02:0f:56:85:2b:ad:74:bb:9e:6a:84:
f5:f0:3f:81:85:97:5e:9a:9b:55:6d:f2:c9:23:6a:6d:cf:38:
4a:79:f1:67:32:24:dc:21:13:5f:86:aa:99:f1:79:be:d4:7c:
21:7b:8d:25:9f:33:8d:a4:18:25:bf:e8:78:0a:63:09:80:2a:
b6:99:13:0c:e9:bf:e9:62:a5:b8:f5:e4:7b:6f:8d:bc:8a:ee:
ec:dc:1c:21:9e:cd:02:2b:51:2d:11:ff:43:0c:a1:92:62:91:
41:40:04:68:2f:42:9e:41:58:38:ad:2f:e1:f9:b5:36:87:78:
2e:d0:68:07:bf:2d:d7:87:af:15:bc:df:fc:5d:98:88:86:70:
a4:65:92:99:e8:6e:8d:2f:26:89:26:0b:a2:92:f3:82:5b:36:
4b:25:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:10 2026 by rpki-client