Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: Ss9X3jc2Tkza7eh6iQj0NLUEURAmvLEWjSK9nPzqrNA=
Subject key identifier: 1E:E1:C3:EC:82:B1:7F:33:59:52:D5:2F:98:2A:45:E4:C1:1C:88:E7
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019D273B409D8E5D1E258E43ACDBC6695E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: Z/BopdbWK7Np3abL/3H2p3CycI0YV0bBYUeXake2qYA=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:40:9d:8e:5d:1e:25:8e:43:ac:db:c6:69:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=1ee1c3ec82b17f335952d52f982a45e4c11c88e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:a3:46:09:82:fe:dc:ae:2f:cd:52:36:7d:
01:b6:21:2e:ca:12:07:8b:4f:fe:7d:59:26:50:43:
2a:9d:e3:d1:0b:2c:21:a3:f2:45:0d:12:8f:d5:6d:
3c:28:32:33:1f:7b:71:11:0e:d9:94:12:52:c2:d9:
5b:6d:de:3a:bb:25:01:f5:4b:74:c7:c7:1a:16:0d:
47:c9:60:f1:0a:bb:95:77:d8:90:f1:ce:29:2a:81:
32:56:a5:7a:c7:56:a1:95:ee:a6:42:53:68:84:53:
63:38:fc:d2:c9:dc:30:d0:3e:29:b0:73:da:fc:80:
e2:c2:cb:75:d4:c4:bc:04:f7:1c:a9:39:cc:2e:aa:
15:f2:e0:51:b4:82:6f:cd:3d:5c:66:87:61:d1:93:
55:0d:7b:53:66:b8:fc:76:46:aa:32:97:6b:b8:1b:
49:35:90:bd:8b:98:22:07:dc:ef:cd:95:29:20:52:
10:d4:21:1a:ea:e9:72:16:9d:82:19:58:20:b6:66:
c4:0c:65:6b:8f:be:cf:c4:6f:f5:ee:ad:70:dd:9b:
5c:c3:7d:e2:cb:04:c5:36:fe:82:67:89:91:95:87:
1e:1f:93:dc:bb:6f:1a:a0:49:82:2e:1f:85:e1:46:
61:55:98:49:03:67:00:ed:f5:d0:f1:d4:37:4b:2a:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:C3:EC:82:B1:7F:33:59:52:D5:2F:98:2A:45:E4:C1:1C:88:E7
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:f9:43:d5:6d:1c:77:d0:fb:3f:2f:c7:ea:e8:10:bb:e7:
a6:68:2d:38:74:82:a7:ef:e2:03:e9:1c:4f:70:98:54:8c:bd:
87:fe:19:f6:6e:16:44:33:59:8e:18:de:0b:82:52:94:32:bc:
fc:d3:2c:6a:bf:eb:2e:3a:b4:c6:5e:fa:42:73:6a:0e:35:13:
fa:57:db:57:a7:f2:4f:c8:cc:04:2a:8e:43:ef:bc:e7:13:6d:
8a:2b:f3:74:80:0e:f5:4f:e8:f6:b8:30:b2:af:ef:26:83:18:
02:68:e7:a9:36:14:ba:e4:cf:4c:be:2e:45:a0:6d:e6:52:45:
b9:64:7e:0e:de:ec:37:ff:11:fe:64:ae:fb:f0:02:aa:d7:2f:
d2:0f:fc:b0:58:30:09:51:ab:15:f4:9b:6f:b5:66:f3:2d:d7:
de:45:d2:50:a6:4b:9d:a2:23:51:a4:45:b5:2b:f8:bf:a5:ea:
b5:35:9f:c9:0f:75:0f:84:df:d0:8f:fd:80:c7:a5:ec:58:27:
3f:f1:a5:a1:c3:77:81:4f:79:d8:5d:70:20:2b:58:58:dc:a1:
6f:21:8a:95:bd:e4:6d:af:17:d3:b3:11:af:39:9e:0d:81:e7:
4b:f4:ba:67:59:a0:7e:b8:3f:d9:e2:0e:94:17:ba:49:18:7e:
85:20:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:32 2026 by rpki-client