Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: dnB/VmU0rHnqUDbpReqI37aD1Gnk3m1YqczGjhb2qSk=
Subject key identifier: EC:9F:8A:61:C7:CA:26:BF:60:45:90:D5:1B:7A:C7:83:21:8A:97:66
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019D270494F31441905FF43EC45D2E841577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: tEZtjgrYoP6gy34eyCC121SiQdoxWb1xVCvHXlWx+Ko=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:94:f3:14:41:90:5f:f4:3e:c4:5d:2e:84:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=ec9f8a61c7ca26bf604590d51b7ac783218a9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:5c:11:af:ad:b1:42:7b:b1:17:1e:56:25:
29:bd:68:64:1c:3f:89:41:eb:e4:17:bd:67:16:52:
89:21:24:42:fa:17:a1:26:2d:3f:35:9c:6b:36:02:
00:8d:66:42:37:4e:24:2d:89:d4:0a:63:59:4c:5e:
43:e3:0b:cc:10:e6:e3:00:94:3c:81:4d:21:b7:b3:
5d:cd:d5:bf:df:ae:a9:8c:44:ec:77:71:d2:e0:69:
79:fc:54:c2:f2:ae:99:95:6c:e0:fa:61:7e:7c:5d:
cd:d2:bc:3b:50:c1:4c:76:fc:9c:96:77:cd:11:c7:
87:18:a4:02:cf:d5:24:7f:c1:cc:2a:ea:e9:fd:a1:
4b:27:43:c9:4d:f2:ed:68:6c:7e:a7:25:97:0a:af:
41:d4:29:b1:5a:12:37:a9:43:91:24:9d:9d:7f:2d:
eb:e5:9d:e5:1f:f6:29:cb:cd:99:53:1b:5b:9e:32:
c1:1d:5f:14:58:8b:7d:47:39:4a:7d:55:4b:2d:48:
d0:fa:68:ad:87:32:b1:bf:9a:fc:72:a5:48:73:70:
23:1f:51:41:e3:b4:1b:91:75:3d:d1:7b:88:76:a4:
fd:fd:e7:7f:2f:38:0b:b5:b4:66:9a:8c:eb:38:3f:
ae:0f:6d:26:f7:8f:3c:ed:09:22:12:59:c0:d6:6e:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:8A:61:C7:CA:26:BF:60:45:90:D5:1B:7A:C7:83:21:8A:97:66
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:de:04:b4:96:06:4a:b2:c7:f6:01:43:12:97:21:89:f6:
6e:e6:9a:6d:90:09:79:1a:75:3a:bb:ae:f2:03:b2:61:2f:05:
e5:d4:4b:51:41:97:ac:de:4c:6b:45:f4:c6:42:08:35:73:e6:
75:c1:27:97:d5:2c:f3:b0:2c:0b:67:c9:58:6a:fe:be:80:c7:
3e:4c:50:ca:0f:07:fa:95:4e:bc:9f:6b:c8:20:a4:fd:1b:f1:
82:8c:5f:86:1e:43:8c:c0:16:9f:9b:d5:6a:08:43:ee:22:68:
e4:68:81:f1:e9:87:a3:68:97:a0:db:10:6e:0a:ab:6d:66:a9:
63:10:89:c3:d1:fe:bf:a2:c8:3b:a9:c7:3e:f1:82:6e:6c:aa:
64:a9:8c:58:9a:5c:f1:9c:23:ed:af:2d:e5:1a:12:6c:31:19:
63:53:63:d4:52:aa:e4:91:70:db:b3:06:4e:bc:0b:c0:d1:2e:
6f:43:d1:6f:93:2e:e7:4b:7f:41:8e:28:c0:0f:39:60:11:67:
84:6c:75:f7:a6:9b:4a:5b:6a:41:78:a2:9e:14:fc:cc:69:53:
6c:f1:9b:04:ea:be:d0:df:af:0d:1e:50:42:54:f6:77:62:34:
3b:be:21:08:58:26:c1:5a:e5:ca:35:bc:9c:b4:24:c0:54:79:
f1:07:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:18 2026 by rpki-client