Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: pOg7c7aoUX5c8tJsqtEe/Souwlyp+rpu6u/GQRBoRTk=
Subject key identifier: 7B:04:54:33:CF:29:3D:A5:D7:8C:E3:CA:E2:F4:DE:E7:6A:20:A0:17
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019D25F162099BC05B03B0E2D14B648DFD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 0512
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: Mq9o3SsBwuI5CitC5xF+QfvMd4f1SLHg2PJioOfoH+I=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:62:09:9b:c0:5b:03:b0:e2:d1:4b:64:8d:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=7b045433cf293da5d78ce3cae2f4dee76a20a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:b2:25:b0:1e:72:d0:e6:93:7c:45:2d:d3:
86:7a:73:98:e7:c3:e3:61:8c:d2:4e:fb:67:e0:fb:
c0:09:c3:c0:7c:3d:ab:43:e7:b9:a2:90:93:4d:af:
38:f4:e3:97:f7:ea:20:a5:02:a1:a0:04:a4:fc:c7:
87:dc:6b:4a:b8:7c:58:3a:f3:7d:f5:25:bb:df:ac:
60:10:11:f3:01:0c:64:67:9c:24:b6:28:cf:f0:e4:
c8:2f:0a:7a:77:a1:5d:b2:21:f1:7f:e5:9c:46:3e:
91:e5:b5:4d:50:db:a8:f9:fb:db:85:69:8e:95:10:
a2:40:e4:10:4c:42:54:9e:2a:42:ee:08:b4:16:b3:
1f:fc:a9:51:fd:e8:39:38:9a:a2:c3:85:15:c1:93:
1b:c8:f5:3d:50:05:58:b7:70:6a:9b:2f:e6:18:fd:
d2:2f:21:36:be:95:53:fc:e2:d7:8f:35:da:bf:c3:
78:27:44:14:d9:7b:81:ac:d7:e9:94:d6:a2:89:98:
3a:06:6e:1f:a9:bd:fd:47:8a:62:d3:bb:4a:1d:25:
de:22:52:2d:79:2b:84:b4:da:5f:fb:11:99:d9:0c:
fd:ed:d3:e7:21:2b:99:83:db:d1:76:d4:8d:83:45:
a1:2f:fe:11:14:eb:42:ee:f1:11:1c:ab:8c:6b:2b:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:04:54:33:CF:29:3D:A5:D7:8C:E3:CA:E2:F4:DE:E7:6A:20:A0:17
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:7d:87:8d:5e:bb:00:d1:5a:4c:00:cc:6e:f7:f8:65:53:
bc:5d:4e:9d:cd:fe:7b:ca:11:ee:cb:5e:86:6e:20:3e:14:20:
79:79:28:55:03:42:5a:28:ba:cf:e0:e9:81:18:45:71:86:21:
28:fd:06:17:12:b7:16:78:37:d9:20:1d:84:c8:dc:4a:10:c6:
7a:35:60:70:9d:4b:1a:b6:64:29:35:49:f1:99:0d:bd:fa:f7:
5c:38:73:d6:04:21:af:a7:98:60:e1:8c:08:d2:68:5f:f0:79:
99:12:f4:c7:03:79:a3:ce:82:fd:df:b4:4c:e5:4d:7a:da:17:
4b:37:43:85:6d:40:91:e4:77:0d:67:8d:ea:c8:1a:4e:6e:68:
82:aa:74:b7:ae:fd:b6:93:cf:c1:d7:9d:72:10:e0:e4:e0:81:
a4:30:bd:1e:ae:28:7a:b3:74:46:f0:2a:87:9e:5f:34:b7:d0:
cd:70:3b:5b:4a:0c:ea:5f:ed:3c:55:ba:5e:e7:77:e5:af:fc:
70:62:63:ee:46:43:20:d7:a1:53:f1:73:73:d8:06:b0:f9:94:
60:95:cf:6c:db:72:70:a0:65:61:a5:b0:28:50:88:aa:7d:c1:
f2:80:99:d5:6e:11:37:e3:b5:b3:fd:70:ea:64:61:b5:aa:8e:
90:87:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:17 2026 by rpki-client