Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: e+N5tjoQqiqW0PtUEigZQUFPxAWkvdokOvHNhEdkv00=
Subject key identifier: BA:77:91:15:4B:3E:D4:B4:47:57:98:C5:E4:CD:D9:4F:CA:79:4F:7C
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019D27E00021773FCDE9A92B83723CED3DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 17CB
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: 1IRUSsE0xIDJK+aHQOgyDB1SNsiKFPe3n7E2uDL0O5s=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:00:21:77:3f:cd:e9:a9:2b:83:72:3c:ed:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=ba7791154b3ed4b4475798c5e4cdd94fca794f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:62:06:0c:79:e4:a3:cb:f9:8f:bf:c2:8d:
6d:cb:a4:46:86:d9:80:4f:db:67:21:48:17:74:1e:
52:e5:d4:54:d3:5e:a1:22:7e:93:a2:04:1f:29:b5:
54:e0:e5:87:ae:1c:93:aa:15:0f:89:d8:c1:c3:84:
cc:eb:c7:7b:45:8a:44:22:5a:4c:45:8e:4f:20:7b:
e1:2f:5b:b5:91:ba:08:1e:54:34:51:95:29:00:94:
e6:f2:47:ed:38:ac:f6:7e:43:9a:b6:b9:47:f1:8d:
6a:f8:23:a8:fe:1a:86:6d:c5:93:9d:e8:c5:06:52:
e2:58:c4:19:81:f6:a1:1d:da:05:f3:39:68:6a:95:
4d:85:59:56:4c:56:29:d7:29:98:b5:73:68:19:e0:
46:ad:e4:a7:c7:a0:32:8a:ac:ee:2c:66:f0:86:6a:
2e:8a:0e:e4:64:30:c2:52:a2:83:3b:71:9a:f9:47:
bb:25:43:94:18:3b:99:b3:d1:a4:bd:31:ab:86:46:
b0:90:dc:4c:0c:73:88:9b:e8:83:16:49:d6:b9:96:
0a:d1:a4:f5:5e:ea:7d:30:d2:5a:5b:1d:9c:45:b1:
9d:67:2c:29:bf:50:af:71:3c:eb:cc:4c:ea:b7:ae:
4e:ab:51:42:02:65:59:7a:ba:c1:1c:aa:84:23:c8:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:77:91:15:4B:3E:D4:B4:47:57:98:C5:E4:CD:D9:4F:CA:79:4F:7C
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:fa:ac:70:5a:5f:5e:05:50:ff:28:04:14:60:26:91:7f:
f3:16:c9:d0:0b:65:b9:64:c1:19:19:ec:5b:ac:2e:68:d9:97:
9d:5b:89:21:f2:c6:58:55:4e:d6:67:c3:e8:c9:e1:52:e0:e6:
8c:db:bf:1f:3e:04:b5:be:05:69:de:8f:0c:41:76:2d:f2:01:
29:03:43:23:ff:fb:40:06:96:34:e4:c6:ab:bb:74:5c:ca:88:
13:15:ab:d4:37:e0:47:6e:9a:e1:99:30:8d:fb:b7:c3:d3:2d:
52:d7:1e:e0:db:c1:73:6a:4f:cc:b8:9c:14:d0:50:88:ff:ff:
e5:21:b7:ad:b5:fc:d1:aa:07:08:0f:eb:b3:46:b8:28:ea:78:
87:b5:69:db:27:29:45:9e:c1:4e:cb:63:e0:c3:2b:0c:22:d2:
45:f4:f9:ee:04:b3:3f:c0:1e:14:90:25:d4:55:1d:5b:61:fe:
63:fa:87:0c:1a:6f:c0:ed:b4:87:ad:8e:94:09:91:12:73:f4:
d7:76:0c:71:b8:4b:3f:fa:ea:13:60:0d:17:08:79:dc:9c:54:
61:b9:9f:c8:30:3e:be:3d:a9:17:56:e4:3a:3f:79:7b:33:68:
d8:7a:62:c9:70:e2:13:77:2a:17:e1:b9:4a:62:9c:87:97:7c:
d4:c0:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:56 2026 by rpki-client