Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier: O3w6/ul7awGruvPUBX7eZ4flUivEUux8J8Rq206njXA=
Subject key identifier: BA:11:F8:DD:53:B3:DF:FA:92:DF:A8:E5:D4:11:2F:D0:FE:7E:15:C2
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 019D2A72CBC1435E1CA80B414EA621F46547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:59 +0000
Manifest this update: Thu 26 Mar 2026 14:00:59 +0000
Manifest next update: Fri 27 Mar 2026 14:00:59 +0000
Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: KDto/nkgJ0+4QbPWRYQ+ASI+yvHuQxyHZa6k1Jvaq9o=)
2: XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa (hash: XT8YNrFmajQC+0dTcA0EhEoUbR7GPWJZO+G57x2fMrQ=)
3: npLxbCkBfsvzh12Sr2_JC_OdCbc.roa (hash: F8mcnlSRs2fM48WMAEjA+peBFWEIlebDFAmNFUnpLxw=)
4: wFYmGE5l1chJ5-wTECpTY_pMIXM.roa (hash: hK07/sPk/5vCM2raR2H19xhYBW6r/31Luy7kDtFVbII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:cb:c1:43:5e:1c:a8:0b:41:4e:a6:21:f4:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Mar 26 14:00:59 2026 GMT
Not After : Mar 27 14:00:59 2026 GMT
Subject: CN=ba11f8dd53b3dffa92dfa8e5d4112fd0fe7e15c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:89:37:22:69:7a:15:2c:74:cb:52:9d:35:
4e:81:13:da:db:37:f0:17:02:3b:84:f2:8e:2a:15:
cf:63:a6:0e:86:5d:7d:cc:91:8e:73:db:c7:a8:c5:
30:9b:ea:ef:aa:38:29:4d:ca:56:c8:0a:ff:1d:04:
e2:f8:8b:89:d4:ea:e6:73:d9:99:f1:9b:01:f5:9b:
db:96:fb:1d:ea:f2:ed:86:ff:99:0b:fa:0f:82:8f:
48:b9:72:12:04:47:48:cf:71:b5:6d:0b:fb:94:d4:
64:97:21:e5:80:30:fa:dd:b1:b3:97:2e:ea:66:02:
4b:32:56:44:81:c8:79:44:6e:85:8c:e3:22:27:b8:
3b:64:6c:6f:25:a1:df:11:5c:c1:a3:8e:ec:d0:46:
2e:be:23:ce:f6:47:db:6e:bd:a1:e2:c7:4f:ec:18:
cf:0c:34:b5:83:de:ad:f3:10:de:a8:9f:a6:56:0d:
d4:0a:92:27:88:4d:bb:3f:a8:37:62:9a:d2:f3:b3:
2e:94:86:a2:b4:ce:a9:b3:97:54:bd:a6:8a:59:f2:
58:1b:79:49:33:df:dd:8a:1b:e9:aa:d0:a2:c4:9e:
e3:a7:17:9c:fc:bd:1d:eb:12:77:f0:86:66:62:c7:
c1:44:cf:9f:41:21:77:5c:92:23:3e:2c:41:5e:93:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:F8:DD:53:B3:DF:FA:92:DF:A8:E5:D4:11:2F:D0:FE:7E:15:C2
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:73:d1:54:55:ad:c0:ef:c6:4d:5b:de:d5:0b:2e:1c:9d:
3e:81:56:c3:0a:8b:ba:06:fd:37:09:02:16:f5:e7:27:f8:07:
3a:2a:10:d9:d3:5b:59:67:8c:20:40:8e:10:5d:54:aa:6e:33:
96:dd:0e:ae:05:e8:57:0a:47:9e:2c:9e:c6:56:7a:56:e5:9d:
62:02:eb:01:12:ef:37:f4:c5:cd:37:a7:eb:a7:eb:fb:64:dd:
68:bf:70:8c:1a:0b:ad:ec:07:31:29:05:5f:4b:03:58:60:ce:
87:49:dc:3c:ca:5a:32:88:3e:6f:64:3c:be:3d:cb:a2:41:38:
63:0e:30:0f:3b:f5:db:27:09:86:ab:f9:e4:20:c9:02:67:b2:
5e:85:21:1a:0e:b0:3e:11:86:0a:c3:4c:fc:72:6c:1c:fe:88:
6c:ba:75:61:df:98:0c:b3:1d:33:73:4a:e8:cc:dc:68:b1:e3:
a2:a2:35:b7:f5:fe:f1:af:64:b8:ff:f9:eb:dc:b4:80:3b:2b:
e0:06:81:b6:95:98:e2:01:98:8f:e7:26:24:a3:c8:66:f2:eb:
82:34:a2:42:a4:16:c3:85:bf:d0:e5:bf:75:60:9c:95:3f:d7:
f9:57:ff:70:4b:ed:04:53:03:f5:b9:6c:05:12:6e:68:54:8d:
71:78:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:35 2026 by rpki-client