Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File: 1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier: 0vbisDkd8ehDpfn+a02R8ZPOwWudJfeHE8JG35IjS+c=
Subject key identifier: 14:01:9A:74:59:F8:F9:55:3D:0F:26:1A:DF:D5:E9:63:04:48:DB:F2
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 019D27A94F55F12EAAD95395B9D45F8FF641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number: 0DAF
Signing time: Thu 26 Mar 2026 01:01:40 +0000
Manifest this update: Thu 26 Mar 2026 01:01:40 +0000
Manifest next update: Fri 27 Mar 2026 01:01:40 +0000
Files and hashes: 1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: NYE6khh1L/fiqoBIK+TthvoxFld8D8TvP5x5gp1zIng=)
2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
3: oyTo08KWYqEf8lV71zt18bZl5ow.roa (hash: xhup0SobxwErF5ofC7EOIpLrzzOxwF+wSlAfxajK56Y=)
4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4f:55:f1:2e:aa:d9:53:95:b9:d4:5f:8f:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Mar 26 01:01:40 2026 GMT
Not After : Mar 27 01:01:40 2026 GMT
Subject: CN=14019a7459f8f9553d0f261adfd5e9630448dbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:e4:22:e2:61:82:8a:8c:ff:73:21:4a:2f:
3a:a8:62:ac:97:23:13:37:2b:3a:5f:5f:40:7f:58:
b2:fc:58:c6:fa:29:3b:ae:87:e5:b5:0f:a3:7b:8c:
91:d6:6c:ab:91:97:1d:6c:36:11:df:ea:bf:78:4b:
1b:9c:bc:b5:92:80:56:4c:09:17:22:c5:12:f8:86:
07:ec:29:b1:3c:9b:24:29:de:9f:03:c8:1a:0f:d1:
5d:71:72:d0:da:15:89:4b:60:e0:17:93:6a:44:d3:
44:d7:83:89:e5:f0:67:d0:b1:e4:79:c1:45:31:30:
9e:72:5d:e4:5f:aa:53:aa:50:24:8f:16:b6:09:b1:
37:59:b2:5b:f3:be:67:77:38:a3:46:b4:c5:22:38:
41:1f:dc:5d:76:33:f3:b4:7f:39:df:fc:06:e9:56:
03:35:e5:be:38:20:f8:77:bd:45:79:ac:d3:ec:d0:
b0:91:90:7a:61:48:98:69:00:08:a4:7b:86:51:47:
1a:d4:4f:ed:52:99:84:3f:47:ce:c5:71:83:5b:d1:
da:30:f3:e4:d3:34:7e:ac:54:5e:6d:50:84:da:9a:
84:37:14:23:2e:3b:65:ca:5f:59:84:1c:bc:1f:ea:
c4:65:48:1f:ef:57:27:be:fa:ab:e0:64:46:ac:f6:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:9A:74:59:F8:F9:55:3D:0F:26:1A:DF:D5:E9:63:04:48:DB:F2
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:83:3b:38:f4:33:dd:e3:17:aa:97:4e:7d:03:97:4f:4b:aa:
17:fd:26:40:dd:fe:0c:3d:74:7f:07:f0:eb:51:b7:80:10:0b:
f4:f7:e5:90:90:65:70:0a:3e:86:c0:3f:85:bd:ca:e4:a5:e9:
61:b8:ae:0d:74:39:2a:2d:a7:26:44:e8:c4:64:70:df:71:57:
39:3f:cc:2d:1d:e3:4a:1b:53:23:e3:f5:8b:c0:10:03:69:4e:
9a:87:62:56:d3:bb:f2:5a:01:5f:c8:95:82:52:30:38:84:5c:
78:b5:99:d0:cf:94:e6:cf:78:d8:5f:9c:95:02:a3:b9:a2:ff:
ba:b4:a3:f7:4c:ae:07:81:1d:52:96:6d:b6:1f:fa:e8:3b:c6:
e1:c2:3e:b7:6c:89:c4:6f:d6:1f:36:c4:66:43:cb:a4:59:94:
17:6e:7d:c3:0e:06:fb:c1:d6:e1:5b:cc:30:04:bc:a7:ec:84:
bc:69:5b:a2:78:07:57:85:7d:0c:ab:fd:0f:6d:2f:f0:41:98:
f8:4b:98:01:5c:e2:98:21:b6:58:6a:c4:b6:f8:62:fe:96:92:
40:fa:ef:7b:74:9e:5a:2e:a7:db:40:55:19:c1:9e:07:43:95:
71:ab:ba:70:66:84:8b:7d:f1:87:60:af:34:1c:10:b8:db:5e:
44:10:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:41 2026 by rpki-client