Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: tC6mhZ/wd0WmVZi8V+hfcJ+qAlHZ8tIN48fddYDvbJs=
Subject key identifier: 4C:2A:CA:17:D6:39:10:D0:B3:C5:BB:43:16:9B:5A:FB:AE:0E:13:80
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019D25F0F08665EAAE55518090FB2D2E9FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 15C3
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: sd0acANzJhPBhdDtJUCjfyQRyA6+pcn4ZobTEsVNMdk=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f0:86:65:ea:ae:55:51:80:90:fb:2d:2e:9f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=4c2aca17d63910d0b3c5bb43169b5afbae0e1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:6b:ce:34:58:66:39:b0:ec:a2:b7:a8:af:
23:3d:7c:d3:a9:58:87:8c:ee:0f:7e:32:7f:00:ff:
42:70:89:7a:18:f8:02:3d:0d:54:e6:91:d8:67:95:
d3:1f:6a:94:4b:b2:2e:98:e2:a7:b9:f9:42:24:52:
3d:11:44:20:5b:a9:88:af:b8:25:cb:ac:a8:c8:a6:
7a:0c:7e:4b:53:98:9f:be:70:ac:54:3f:b4:a1:e0:
a8:8a:3c:c7:27:3e:bf:20:3c:a8:63:65:b7:ec:b6:
39:97:c9:4f:aa:7b:ce:7b:7e:d6:c2:f8:bc:1e:b1:
f0:be:17:2f:70:29:63:39:e2:c8:06:f3:e7:cf:fd:
c0:a6:d9:16:81:9d:08:57:85:7a:37:b8:4e:68:2c:
b1:30:aa:c9:c1:79:e6:23:20:e2:f8:03:dd:90:5e:
2d:9b:df:ab:b4:d3:26:a8:e8:20:c4:b0:20:be:de:
07:60:06:d0:82:74:0b:a3:e0:85:6f:b8:bb:33:05:
9f:20:23:2e:41:f7:3d:87:84:3b:80:0f:58:e3:14:
7c:55:02:b6:89:03:2b:74:df:35:4e:b3:8b:6e:e0:
69:6b:4b:3c:dd:24:54:c8:df:25:25:94:ab:96:16:
41:9d:58:b0:05:8b:23:3a:ff:6e:7e:72:ff:4a:13:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:CA:17:D6:39:10:D0:B3:C5:BB:43:16:9B:5A:FB:AE:0E:13:80
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3c:27:99:e5:a3:37:26:91:8d:98:0c:0e:11:cc:15:d8:07:
66:01:5d:ad:95:b8:fa:0f:25:b0:c3:53:32:96:17:ad:a4:8a:
b5:43:34:a7:e8:62:32:08:6e:ec:6d:b4:12:cf:ec:02:18:d3:
cc:05:1e:30:d2:e5:07:a2:76:7f:e2:d3:dd:c8:d2:7a:d4:67:
94:04:91:9e:8d:99:01:98:ab:7e:9f:37:2e:50:da:cb:08:8a:
a4:58:94:8e:e8:df:4a:08:2e:e6:92:bc:a7:86:d1:e7:6a:d4:
8e:54:32:ff:f9:cf:24:a6:52:d8:ea:76:e7:95:57:32:d7:a3:
c2:ec:1e:fe:62:d8:d3:38:39:ac:00:11:52:3a:7e:5f:06:24:
17:94:08:93:91:a1:cc:71:86:cb:33:3c:12:65:e3:15:1d:27:
22:08:23:7a:15:0f:4c:54:b6:94:cd:de:e4:27:b9:22:cc:34:
8e:26:08:90:fd:16:38:8e:91:1a:08:f0:d8:f2:c2:41:02:5e:
02:b2:49:91:30:c3:48:d2:79:56:d2:93:d9:f7:4f:f5:8c:92:
c0:01:fa:d3:4b:d6:8d:57:48:62:83:38:f1:a6:96:53:6a:23:
34:90:b6:9c:c1:89:09:4f:dd:92:a4:63:04:cb:54:cc:42:e7:
99:25:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:16 2026 by rpki-client