Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: Ws9Xn/e5xo3/UpL/sFgwWVKt5YsKn6XvFCYvFal5URw=
Subject key identifier: 9D:4A:DC:2B:E4:68:7E:26:4A:39:BC:07:B5:5C:79:2B:FE:55:97:88
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019D25F15D1B09CBADD7418DE23CD1450C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 0519
Signing time: Wed 25 Mar 2026 17:01:08 +0000
Manifest this update: Wed 25 Mar 2026 17:01:08 +0000
Manifest next update: Thu 26 Mar 2026 17:01:08 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: WQH9ho3SBw3Lngogz2c9YgZgv4rC9fKntv+sKUsVMF8=)
2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5d:1b:09:cb:ad:d7:41:8d:e2:3c:d1:45:0c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Mar 25 17:01:08 2026 GMT
Not After : Mar 26 17:01:08 2026 GMT
Subject: CN=9d4adc2be4687e264a39bc07b55c792bfe559788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:fb:2c:c7:ae:57:16:60:42:13:e1:7d:32:
ac:14:aa:2e:0f:cc:57:3f:55:6b:64:14:f5:a9:08:
98:43:d8:f3:bd:90:75:e5:c7:ec:6c:72:75:cd:1f:
41:d3:3c:1a:74:d3:4f:92:76:b8:f6:c9:75:8b:c9:
4f:cc:f8:00:d4:d7:62:0b:0c:a7:d9:a2:ad:8f:a1:
ff:91:bd:d2:be:24:93:98:9d:55:de:b0:a9:03:ef:
c3:4b:6f:d9:3f:55:d7:c9:73:2b:a6:b7:eb:19:d3:
fe:df:d1:87:59:d5:e0:97:66:98:af:8e:f9:f6:8b:
5b:02:4b:47:65:d6:09:6c:29:9a:95:83:3b:cb:cf:
29:bf:9d:58:44:6c:1e:b2:6e:7d:b3:5a:75:28:ad:
de:12:da:67:01:16:57:24:21:ac:ee:b2:53:fe:6d:
1a:56:d2:fb:76:5d:2d:0b:58:b4:a6:e1:ab:2c:a1:
6c:43:c5:f1:8f:f3:5b:df:d4:25:75:4f:1f:cc:7f:
9f:79:d5:72:79:ee:b4:8c:f0:f4:15:df:bd:6e:ee:
ce:e2:80:1c:43:c4:a1:b5:4d:04:79:83:31:89:08:
f1:02:af:d7:e3:40:e6:6a:16:cf:61:1c:a7:cb:af:
54:db:d9:01:24:74:a1:6d:50:84:76:a4:bc:48:03:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:DC:2B:E4:68:7E:26:4A:39:BC:07:B5:5C:79:2B:FE:55:97:88
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1e:e8:09:f1:91:41:c2:d4:b4:52:25:14:e7:90:5a:ab:5d:
58:3c:0b:fe:b0:5b:01:55:cf:55:ce:8d:db:ed:07:56:b7:50:
73:b7:61:43:88:7e:21:46:a0:c3:5e:ba:6b:f3:b8:a8:3a:bd:
dd:19:03:99:06:38:91:45:31:af:5b:26:83:49:21:3d:b3:16:
79:51:43:da:67:52:88:64:fe:1e:bb:8f:f1:29:7f:54:97:8e:
36:90:68:d7:ea:d2:5a:8d:67:4e:2f:66:7d:55:48:88:2e:15:
6f:31:b5:aa:98:9c:a1:21:df:66:f3:52:74:e8:13:58:3c:1e:
05:87:c1:17:7a:c5:ee:75:f9:5e:2d:5a:85:e6:9b:81:9f:2b:
fc:c7:12:d4:41:e0:ce:6b:1e:69:25:2a:e4:74:e5:52:22:50:
4d:24:59:ed:7b:29:85:4c:c2:3d:70:d8:2d:64:0d:2e:ac:08:
09:fb:33:67:46:3a:70:70:ad:b8:7f:75:d8:27:70:0b:7f:da:
2a:8e:8f:e8:20:f6:f4:0e:4c:44:00:9a:fd:18:dc:c2:3f:57:
82:90:ea:7d:9f:ee:73:36:b6:82:a6:8d:6a:36:08:c8:75:b8:
34:69:9a:46:2e:f1:7b:f6:94:6a:fb:ca:75:b7:1b:16:1e:7d:
14:17:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:51 2026 by rpki-client