Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: vWH32B5iOOVg/mgL/EUw/YCOA4JGooXffbfkMMnzOzI=
Subject key identifier: DF:12:89:7C:88:6F:8B:99:59:75:92:CF:64:40:2D:53:53:E1:E5:88
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 019D24A7908F5294AFEFB71B887E71CCC0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 1021
Signing time: Wed 25 Mar 2026 11:00:54 +0000
Manifest this update: Wed 25 Mar 2026 11:00:54 +0000
Manifest next update: Thu 26 Mar 2026 11:00:54 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: 5PYRs2twxyfmilY+3Cw9yWYOaVmgoqumHnZamGs0gDQ=)
2: 2qEJf-3plphGQsWl8SQW6YyPVOo.asa (hash: 4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=)
3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:90:8f:52:94:af:ef:b7:1b:88:7e:71:cc:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Mar 25 11:00:54 2026 GMT
Not After : Mar 26 11:00:54 2026 GMT
Subject: CN=df12897c886f8b99597592cf64402d5353e1e588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:8b:43:00:1e:50:54:92:5d:c8:55:07:c9:
42:bd:00:ad:38:9e:90:ed:da:f1:6a:0b:19:b1:03:
87:86:9a:15:f0:4c:86:2f:c8:d4:f3:a0:5d:62:0d:
ae:e1:26:ae:06:d2:13:d7:66:44:59:72:76:1d:5e:
ed:a7:06:fc:dd:1b:1c:3f:4d:9f:cf:da:c9:8d:f1:
09:c1:f8:7c:9a:4f:62:ef:51:5b:70:16:cc:ea:0b:
e5:28:d2:1f:f2:59:c4:d9:a6:01:75:09:21:18:9c:
d3:83:7b:df:3e:02:af:1f:81:14:16:89:9e:5a:7d:
80:93:95:5a:0a:4a:2a:91:f7:a2:ef:f1:cc:5f:ee:
57:64:1c:46:30:42:32:f7:e1:94:f0:a9:9b:e2:5e:
07:1a:0b:18:33:1f:57:64:e7:23:77:8c:4b:2a:eb:
60:31:78:2e:4f:48:ea:b9:4d:76:e6:67:dc:72:f5:
38:16:ce:56:d5:dd:73:3b:5d:01:b4:68:00:b6:33:
2b:47:21:8c:96:f1:0b:70:04:48:52:b2:bd:cd:ff:
72:c1:ba:a8:15:e0:07:93:62:f8:aa:37:08:6d:04:
78:31:94:9b:e1:8b:5f:c3:64:70:e4:3b:d7:9a:0b:
de:26:c6:d5:67:6f:41:d5:7b:5c:d7:cc:fa:29:fc:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:89:7C:88:6F:8B:99:59:75:92:CF:64:40:2D:53:53:E1:E5:88
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:ea:3d:e8:ac:fc:a5:d2:14:b3:9f:96:d9:07:2f:55:73:
cb:14:c3:ee:2c:4f:aa:ed:ef:0b:8b:44:c9:26:2a:04:1d:3a:
99:66:69:1a:e8:f1:5c:e7:fb:cb:cc:09:8d:98:7e:e0:33:8d:
2b:ed:87:55:8b:64:f8:bd:9d:65:c3:3d:a3:5a:38:95:80:5b:
2b:a4:8e:92:76:94:b8:a1:a4:6d:f8:fe:12:0c:20:29:81:3f:
eb:34:1b:1c:9e:55:78:e2:16:79:a5:45:3b:ff:93:87:14:55:
5f:2e:17:ee:d9:22:79:cd:45:b3:39:36:c1:0a:a9:e2:f6:b0:
8b:88:e9:dd:29:90:32:70:85:61:f0:f0:bc:c3:18:7d:6b:cb:
da:53:11:bc:71:b6:fd:ac:06:9c:92:a6:91:cb:5c:d6:2e:f7:
ef:8e:f8:1f:73:62:7d:13:ec:cd:5a:39:25:f3:61:20:f1:4f:
77:cd:da:69:38:a4:f4:fb:f9:df:ae:c0:14:94:0a:1b:85:14:
46:61:07:88:83:cd:7f:7e:d4:42:dc:2f:93:a5:40:fd:d1:06:
19:48:f9:c9:54:a0:7f:86:f4:57:c0:66:7d:00:b3:02:7c:70:
20:da:14:af:71:07:3a:2b:7a:0e:c6:17:56:0d:c1:df:a0:e3:
0d:fc:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:31:58 2026 by rpki-client