Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: niit6M9iPnD41h01Jgweu4jBfy4TWxlBCJ9x+Lcupp8=
Subject key identifier: A7:20:38:CF:D6:CD:13:46:EB:46:EC:45:F1:F9:5F:4B:B5:58:FD:87
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019D26CD5198C49B715E6D65F10AD8A1D4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 1081
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: VbBv4uzjonef2QZXI2WyvOZ6dA4gUkpf42wiu39UP/Y=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:51:98:c4:9b:71:5e:6d:65:f1:0a:d8:a1:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=a72038cfd6cd1346eb46ec45f1f95f4bb558fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:7b:81:af:1b:c2:fa:76:8d:81:8c:3f:0e:
92:3e:c4:63:a4:89:6e:5a:c6:d8:20:ed:c5:b2:d1:
8d:36:f3:bf:7c:d0:44:b6:ff:85:f1:b1:56:27:87:
11:f8:3d:28:60:12:58:5b:6d:09:ad:4f:ef:bf:96:
ee:6c:57:aa:10:6b:58:44:d4:95:a7:b2:37:f6:1d:
9f:c9:ad:91:18:3e:cb:80:0d:9d:e3:b2:90:1e:35:
85:48:23:04:43:3a:f4:8e:b5:1c:1a:87:c3:eb:bc:
79:13:8c:2f:54:09:f8:07:70:54:9d:1c:98:b1:96:
5a:7b:99:42:26:12:e5:4e:67:6e:61:cd:85:c8:52:
f6:8a:03:3a:4a:a7:b0:c7:57:ce:a1:22:80:6b:45:
dc:ed:94:dd:dd:cb:1b:f8:9d:5b:35:d7:43:3f:69:
8a:b3:49:f8:fa:bd:6f:5a:13:11:22:84:19:3b:27:
73:ab:ea:8a:7e:80:d4:11:05:58:9e:e5:05:3b:67:
ef:a8:6f:9e:bc:8c:45:ca:b5:c8:45:54:4b:55:72:
f8:bd:98:52:89:75:41:f9:a5:07:ec:60:7e:56:8e:
e5:33:60:ba:d3:4e:23:33:f0:03:a6:d6:19:ed:aa:
2d:cf:71:47:db:34:24:00:09:cf:de:e5:51:40:da:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:38:CF:D6:CD:13:46:EB:46:EC:45:F1:F9:5F:4B:B5:58:FD:87
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:94:01:40:fa:81:69:8f:02:6a:43:43:db:0d:c7:2c:27:50:
71:41:ff:35:41:1b:97:ef:e0:a2:9e:ef:af:67:b7:04:f4:5d:
b8:05:ac:18:e4:ab:02:08:0e:27:78:4b:25:29:5e:6d:a3:65:
e6:8b:21:d6:9f:c0:00:3c:7e:ad:17:f6:4d:e1:e8:5f:28:e4:
f3:42:b8:d1:5d:dc:ff:bf:6a:32:af:db:b9:42:b7:c4:d1:5b:
8c:50:aa:03:3e:ea:5d:86:02:be:4e:8a:a7:88:aa:93:b7:8a:
f2:69:c6:c6:d6:7e:c8:ff:02:00:3d:4c:19:c5:5d:2f:a2:07:
a4:e2:e8:38:c6:14:57:8f:a3:1f:ed:51:f1:72:1f:37:4a:a0:
96:86:ad:17:89:ae:62:09:59:b9:d8:30:e8:5b:26:b1:f1:bf:
57:b5:dd:94:84:2b:10:49:b5:36:5b:ca:7e:01:d5:d2:e3:05:
5f:e6:6c:0e:5d:f1:9c:f5:49:2e:9b:53:b8:01:e5:d4:81:4e:
49:8e:93:a0:18:6d:51:70:15:fc:1a:dd:42:b3:ab:61:c3:29:
fd:ab:d0:6b:d1:16:31:4d:82:da:70:86:9a:09:f9:ae:66:75:
0b:a5:4a:91:cf:c7:de:be:06:29:da:b3:06:3f:13:6d:23:fc:
3a:0f:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:04 2026 by rpki-client