Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: sk8n0tdBxb6DoTB83WMZOemRsmWP5cbP/WqmTISSJuM=
Subject key identifier: 8C:DB:6A:7E:A1:B6:0B:63:CD:D3:67:87:C0:1D:32:40:5A:0C:D4:7F
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 019D2A3B79065EB351AF7D632F297E252A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 0241
Signing time: Thu 26 Mar 2026 13:00:33 +0000
Manifest this update: Thu 26 Mar 2026 13:00:33 +0000
Manifest next update: Fri 27 Mar 2026 13:00:33 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: B9JcphedecYWzlbYGG0ijOYK6UbUadzmnQSd8aWDzwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:79:06:5e:b3:51:af:7d:63:2f:29:7e:25:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Mar 26 13:00:33 2026 GMT
Not After : Mar 27 13:00:33 2026 GMT
Subject: CN=8cdb6a7ea1b60b63cdd36787c01d32405a0cd47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:ee:05:7f:48:83:01:05:e0:a9:c3:2b:56:
65:83:5b:c5:f6:9c:53:9e:fb:e1:55:06:09:ad:d3:
1f:c7:47:c9:2e:7c:bf:38:40:57:36:90:be:61:3c:
76:d5:23:05:ed:75:bd:ae:78:00:3e:bf:8d:d9:eb:
aa:12:cf:48:81:3c:51:20:78:4c:3f:7e:1c:16:04:
ac:7a:9d:b4:13:7b:4e:2a:22:2c:02:55:b6:7b:f8:
4b:0f:00:d6:ff:e0:3b:01:75:62:81:7f:32:47:fc:
34:12:44:6e:30:75:2d:a4:96:4e:65:d5:cb:f7:c6:
7d:a2:36:d2:ef:43:29:90:6a:bb:ab:df:ad:71:a6:
a2:a4:40:b5:fe:69:be:79:c0:56:5a:2d:f0:06:e2:
43:38:5f:c7:cb:e9:77:8c:33:a9:f2:33:e7:bb:d0:
fe:11:d6:15:ff:cd:14:49:c3:2b:20:7f:6c:ca:fd:
cb:5d:42:80:91:39:80:94:29:20:f5:3a:de:4f:23:
cc:18:0c:43:8e:04:d1:d1:0f:6c:dd:97:14:dd:d8:
aa:96:29:fc:4a:61:25:ba:b5:95:87:b4:1a:20:3b:
4f:68:5b:cd:5c:ef:a5:ca:4c:5b:a3:5f:31:e7:43:
af:15:ad:2c:04:3e:b9:52:7c:65:32:77:5b:4c:48:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:6A:7E:A1:B6:0B:63:CD:D3:67:87:C0:1D:32:40:5A:0C:D4:7F
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b4:c0:d7:70:6d:94:c6:dc:bd:ea:59:80:b9:25:b5:ad:63:
94:9e:40:ff:4f:18:45:c8:40:53:67:ef:d9:3e:3d:e6:e2:a3:
33:98:2c:81:7f:62:e4:19:f6:14:aa:d1:42:85:0c:5a:9c:78:
d3:1b:56:9d:82:da:3a:9b:5c:01:9e:7c:d9:c1:37:86:cc:aa:
97:5a:51:84:46:a1:d2:55:ba:8a:99:b6:f7:39:ac:32:47:41:
2c:e1:45:e7:b1:37:b7:8e:b1:41:2e:c3:4a:bd:0f:bd:d3:03:
0c:0c:87:9d:de:cc:45:9c:7f:5a:de:d9:a9:7b:fa:17:b5:f5:
81:3d:4e:da:27:96:65:89:4e:58:ed:54:88:be:4a:3e:6d:26:
85:f4:a8:66:47:50:82:10:48:02:56:84:ec:4b:ed:f4:e3:03:
56:e8:bb:73:1f:03:7f:63:e2:92:9c:ed:cf:ec:07:2a:5c:5f:
ba:88:ba:0a:a4:fd:c1:49:d0:ee:bd:9e:bd:45:b7:a2:a8:ad:
97:f9:e0:ee:23:5a:4b:a0:77:46:26:65:5d:43:e4:78:92:95:
46:98:69:42:82:1f:2e:50:b9:3c:9c:e7:4b:53:26:fd:fb:b5:
d3:7b:31:a3:ae:cd:3b:fd:e5:01:b1:32:af:1f:d3:9f:18:37:
74:f7:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:02 2026 by rpki-client