
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: xBTDvPGPRx7u8IkrlJKDjyOCHtArA5xs8yXs+o0wi04=
Subject key identifier: 99:E2:77:A5:35:D5:D4:5E:00:61:49:D1:3C:93:59:F8:A3:25:50:7A
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 01A1DF4C53E29DF9E5B1A6E228CE37B0B8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 04B1
Signing time: Sun 15 Nov 2026 13:01:23 +0000
Manifest this update: Sun 15 Nov 2026 13:01:23 +0000
Manifest next update: Mon 16 Nov 2026 13:01:23 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: MRk3NXd6+wuLs27C8HFvjYZJuenEKypAtdRm2mRga2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:53:e2:9d:f9:e5:b1:a6:e2:28:ce:37:b0:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Nov 15 13:01:23 2026 GMT
Not After : Nov 16 13:01:23 2026 GMT
Subject: CN=99e277a535d5d45e006149d13c9359f8a325507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:83:11:d4:01:d0:41:38:4b:1d:09:45:26:
67:5a:b9:0b:fc:cc:4b:3a:33:4e:72:14:42:2c:2a:
d4:05:21:9b:f5:a9:47:5a:2f:bc:e7:e9:fa:00:63:
37:5b:8a:7a:f5:a0:01:18:0f:17:cf:03:b9:29:34:
85:e0:f5:ad:d3:ae:ac:a8:ef:18:5b:5a:ed:dc:c6:
08:89:15:1d:13:fc:55:d2:63:4d:7c:aa:2e:ad:50:
ef:f7:74:98:30:95:fe:58:1f:ad:02:e2:e1:6b:61:
2d:c9:9e:a1:42:6e:74:99:e1:be:2c:21:05:0f:c8:
87:84:f0:27:96:d5:a3:ba:0d:11:c4:2c:a3:8e:c4:
9a:9f:42:63:44:45:2a:03:1c:9b:df:21:ac:f0:4d:
db:db:0e:08:9e:e9:a2:8e:a9:8d:1e:8e:7a:a2:d3:
80:7a:b7:b3:3f:6f:ad:93:f5:76:ce:c6:47:a3:1e:
fe:a2:8c:c8:5e:ed:b4:8b:cf:a6:d3:81:c4:78:fb:
27:e4:a3:67:47:34:8d:dc:00:0e:b6:12:aa:21:4b:
0d:86:36:fa:6e:86:f0:54:6b:28:dd:1c:25:6c:12:
4c:4b:a0:63:fe:7c:ef:ee:3e:c6:ca:2d:bb:be:4a:
cc:47:1b:cd:0f:c2:a2:85:9d:4f:6f:7f:85:fc:65:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E2:77:A5:35:D5:D4:5E:00:61:49:D1:3C:93:59:F8:A3:25:50:7A
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5b:38:39:dd:d8:7d:3d:11:5b:e7:8d:6d:50:87:46:76:e7:
53:4a:f2:2a:79:30:82:31:7b:c5:91:6c:18:4f:f2:56:79:d0:
db:32:61:09:f7:97:df:70:fc:df:3f:b2:46:7c:73:be:8e:2f:
08:a3:1e:32:68:c9:95:7b:c9:46:65:de:43:a2:ab:f3:db:6d:
62:51:3c:dc:a6:f3:df:27:3b:f3:a4:22:72:64:f6:3f:d1:50:
44:0d:76:13:3d:5b:9e:82:e4:e1:cd:01:d7:08:34:3c:03:a6:
ac:f3:a8:6e:c8:7d:a8:3a:95:da:98:49:91:cc:32:f5:f8:32:
34:06:d0:12:b7:f5:1b:6c:73:9e:e0:fa:99:4f:89:a0:c9:8f:
ad:d5:2b:9f:eb:70:f9:e0:b0:1f:40:7c:42:98:68:2f:dd:cc:
29:3c:0a:ac:62:55:16:34:13:2a:6e:ba:d7:fd:09:15:15:da:
2d:b1:27:9e:be:d6:87:02:25:bd:9f:3c:86:fb:84:05:9a:64:
b4:89:08:d7:23:15:64:8f:4d:06:6d:1e:36:b2:c2:52:bc:9b:
1a:0a:a9:93:89:82:de:24:36:28:34:4f:89:92:b0:87:a0:dc:
25:b4:53:28:44:9f:3a:e1:4c:22:f2:d7:17:61:b6:7d:b3:67:
eb:47:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:39 2026 by rpki-client