Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: U9vRMfhXsox1Zy+bqKZUT28plPeZbKFIS7CneTZW7+Y=
Subject key identifier: 83:7C:19:22:11:59:72:AA:48:8E:62:AE:B7:AF:09:6F:E6:4B:27:BA
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019D2771F716D950627BE07D1F71C598E72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: gVetq36H/HQk4CzPGz0mFYlc7M40+k6P+LYe/KqW5a4=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f7:16:d9:50:62:7b:e0:7d:1f:71:c5:98:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=837c1922115972aa488e62aeb7af096fe64b27ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:14:cb:84:98:a1:7b:c2:38:ea:79:68:54:
f5:71:88:46:85:83:fd:5d:78:b3:80:22:1a:10:66:
67:35:ed:a1:57:f5:4a:f5:cd:24:eb:6d:e4:b1:a7:
14:6c:ee:13:84:69:3b:25:e7:84:6b:fa:bb:55:02:
c9:4c:22:9f:bc:0f:0d:a8:52:d7:66:3c:89:27:93:
10:98:ed:b8:c9:c2:35:26:b2:4e:b4:6e:be:58:af:
ea:17:b9:e4:d5:fc:19:02:89:43:0c:7b:e6:b6:8a:
1e:d8:af:69:67:1b:fa:41:6a:a8:81:3a:14:55:4f:
9d:5b:34:c0:14:cf:6a:8c:2b:a2:80:43:a0:75:3d:
90:46:5b:de:0a:94:bd:3f:6a:38:4e:ae:9a:fd:a1:
5d:72:28:fc:3f:b7:8d:8f:df:5c:2a:0c:63:97:dd:
76:44:f6:8d:c6:91:48:52:08:4e:cf:f7:8c:31:0f:
3a:96:b2:00:fd:18:ff:22:8e:17:47:48:fc:32:1f:
8e:53:13:2b:e4:6b:de:31:22:6a:7a:68:7e:94:f5:
20:0a:0e:d3:40:ad:2c:61:32:98:83:cb:50:8c:a8:
bb:74:a4:f4:8f:7e:11:e1:c0:84:d0:bc:75:94:ea:
08:1e:8c:58:54:ee:40:82:9a:a2:92:a9:16:f5:2b:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:19:22:11:59:72:AA:48:8E:62:AE:B7:AF:09:6F:E6:4B:27:BA
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:39:d2:1a:8f:a1:13:91:f8:7e:93:88:0f:5c:42:01:d2:
c5:7d:af:88:8b:f8:b4:01:4f:c7:ef:8a:5b:d3:5e:6e:f7:7b:
72:ca:d2:c6:19:25:09:e9:c0:10:bf:ee:6a:68:49:f7:d6:a2:
9b:21:7e:ee:fb:5c:bf:4d:6c:70:9a:c3:4b:40:11:4d:bb:ba:
01:ba:ca:ce:d7:31:f7:97:a1:0b:d4:0a:eb:5d:c0:ba:53:98:
2b:ea:83:3a:7c:bf:9d:41:53:11:fa:b0:0e:25:53:a1:1e:7e:
76:50:63:dd:56:54:aa:97:2b:7a:e4:c1:ef:02:36:03:c6:f7:
ea:65:f2:58:42:48:df:ff:7a:a7:89:6c:03:d9:d6:c9:b9:1d:
99:1b:98:7e:f8:89:d0:21:92:ab:98:f3:37:80:45:23:5b:4a:
59:5c:2b:a9:46:c8:79:ec:52:34:6c:9d:fc:0f:8d:7b:dc:f4:
76:ee:97:d7:0d:9d:45:6d:25:63:9f:3a:3d:26:8f:ad:e8:d9:
34:a8:c9:aa:00:a5:b9:96:81:9f:9b:43:59:32:fc:99:34:a4:
d8:5c:51:30:ef:27:73:e0:a8:b0:24:98:ff:27:f2:d6:71:f8:
b4:d3:04:76:e0:28:da:d6:c5:7f:ab:cf:4a:71:b9:80:8b:f3:
91:16:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:33 2026 by rpki-client