Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json)
Hash identifier: qGOdMat7VsDl53Ewb/W+HK9FRdqN4/rdMsp/hFs8rg0=
Subject key identifier: 71:D3:C9:B7:2D:90:7F:49:8D:8C:51:31:70:9F:E3:3A:FC:28:0C:97
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 019D288488A5F177082FA7642F3763BE3A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
Manifest number: 01B4
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: bv5Yu79DgCC9SUNaNkTA9ZTTWkcKvp+mkitagOw607o=)
2: J4-0xOuc7ybl1SkKKEI_GYBUqr4.roa (hash: 2q5jjo4zIqBtwYfXVL0EEJ2OzEi2CDWkpY8YOeiu7aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:88:a5:f1:77:08:2f:a7:64:2f:37:63:be:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=71d3c9b72d907f498d8c5131709fe33afc280c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:df:2b:27:80:11:de:e7:11:c7:bf:5d:ba:
34:fa:f3:22:cd:9d:dd:ab:2e:83:a8:e2:03:91:8b:
0e:14:72:51:a2:8a:ae:df:ae:32:05:42:1d:4d:7b:
cc:5a:8f:23:78:1d:d8:c7:cd:31:60:e4:a9:29:b7:
db:bd:1c:6c:ae:dc:1f:f3:2f:58:da:b2:71:ae:cc:
87:c5:a2:f7:b0:80:61:9b:52:ce:97:90:e1:61:c4:
30:f8:68:8b:9f:70:cd:d3:55:67:b5:fc:4c:a5:bf:
6f:37:a2:59:21:29:03:24:e7:36:26:9f:83:b7:a8:
64:42:40:67:71:b3:de:95:03:36:56:3a:db:92:8c:
f9:2d:d2:18:53:ed:0b:f2:fb:00:1f:e6:d3:93:dc:
4a:15:ec:32:f6:f7:7d:67:3f:75:d4:7e:1b:5d:ba:
8b:cf:3f:b1:3c:40:06:5b:65:1a:02:4f:a1:7f:0f:
e0:56:7c:91:2d:25:66:a2:eb:90:3b:13:e0:e7:82:
4f:2b:50:9e:ce:8e:d2:dd:d1:61:e1:22:ff:cb:5e:
3c:f5:89:67:f2:6e:ae:20:33:de:6a:cb:33:99:e1:
ea:e6:65:dc:53:34:45:39:5d:50:a9:13:b6:18:64:
7b:6b:87:57:86:ab:e0:af:bf:bc:cb:59:6d:18:6f:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:C9:B7:2D:90:7F:49:8D:8C:51:31:70:9F:E3:3A:FC:28:0C:97
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f8:71:62:59:48:c5:17:25:35:97:27:49:43:a0:ce:4f:ca:
b1:df:ce:1a:2e:2c:93:3b:21:7f:19:50:5d:4b:55:a1:1c:04:
6d:29:36:16:f6:45:32:b8:17:85:f4:84:3e:f1:87:d4:00:03:
79:29:b5:70:90:08:8e:46:eb:83:d3:87:85:1a:2e:54:e1:c6:
db:e9:a6:9a:1a:6c:2b:67:68:d4:01:31:77:94:d1:0b:38:78:
66:57:58:32:33:98:df:82:b6:e8:5e:a1:95:83:03:af:68:9e:
d8:77:68:7d:91:5b:f6:c1:b9:e4:22:e4:6a:30:d5:3a:38:34:
4e:36:ed:b9:3c:eb:45:57:52:c8:ac:6b:b1:40:64:37:d4:c8:
13:3d:21:74:59:b1:0f:90:92:2a:e8:6c:96:a1:3d:74:e0:6a:
8b:7e:af:88:cb:9a:78:fb:7d:bc:2c:ec:49:a5:57:57:c2:67:
77:2b:7a:3d:a6:f5:54:0b:d8:79:c8:c7:72:2d:60:7a:0d:b7:
2a:da:da:f4:82:5a:8c:1b:8c:6b:a5:98:01:40:c9:5d:51:ea:
09:55:78:c3:44:2b:f7:d0:7a:d3:ca:57:11:3b:ea:24:d7:f1:
24:79:9b:ed:e7:0f:14:58:da:c9:cf:a5:29:aa:07:c5:69:9a:
5f:2e:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:27 2026 by rpki-client