Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: p+3LFm7pCy9RWgGSnKYs4j+Na0JiSdhKP56g386A8B0=
Subject key identifier: E3:7C:80:4A:CA:F5:65:AE:A5:54:19:99:B9:AA:69:B3:9B:75:43:94
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019D26CD4E031AE3F66FE55251B70512CC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 15AD
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: Ijx8YTpWVgiXuRwbAHiWJSCFKrtXvyGoIx71PBpODLg=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4e:03:1a:e3:f6:6f:e5:52:51:b7:05:12:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=e37c804acaf565aea5541999b9aa69b39b754394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:36:7b:0f:57:c0:c2:ac:d8:83:8b:ae:5c:
d7:89:c7:44:81:e3:80:ec:92:3e:bb:27:5c:da:21:
1f:4c:df:18:94:58:fd:96:58:a9:31:79:69:6e:e5:
02:0f:f9:63:73:12:91:4d:48:bb:00:ed:9e:d0:5c:
73:de:ff:5c:b6:1e:db:43:10:f7:03:e1:b7:f2:ea:
e7:aa:18:c3:64:83:74:14:4e:a8:b4:74:7d:3a:53:
05:1f:0a:f4:1f:24:7a:7f:c6:13:ac:60:bc:da:0b:
d9:07:3e:dd:1f:a4:4d:42:88:a7:b6:17:9d:66:9d:
96:18:1f:de:91:93:57:8d:07:a9:54:28:df:d9:8d:
f8:52:6e:92:3f:a3:a1:90:e6:a0:0d:69:1b:89:c4:
d5:0e:71:01:42:82:50:2a:57:d3:a9:9c:67:aa:d6:
b5:79:d9:1a:bf:64:93:7e:ca:dc:e3:af:52:25:ee:
c9:b5:f8:6f:07:c1:eb:dd:30:b1:61:a4:4d:7c:ba:
29:53:4b:ef:de:f9:e7:f0:fd:49:bf:a8:72:89:c5:
11:c4:3d:6f:a2:fa:38:5f:10:dc:5c:12:46:d7:1b:
9f:a6:1a:3e:12:a6:f7:5b:f7:48:cc:75:2e:4f:62:
62:f4:91:2e:d6:cc:b6:4a:69:40:55:ed:8a:ab:6f:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7C:80:4A:CA:F5:65:AE:A5:54:19:99:B9:AA:69:B3:9B:75:43:94
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:f9:ab:de:d4:19:b0:37:0f:1c:d4:8a:6b:d0:e4:b9:27:
54:2e:17:23:78:5a:9d:d9:b4:d6:00:da:05:c0:1f:14:9f:00:
fa:e5:d9:2a:95:d1:a0:da:aa:92:1c:16:05:5f:15:e7:ea:06:
8f:fc:98:46:4b:a0:1f:cc:82:f8:95:ed:db:5a:7a:0d:b2:c1:
c8:87:8f:d8:96:6d:23:f5:2b:7c:1a:db:a1:d4:fa:45:da:d3:
36:a5:3a:7e:27:97:11:ab:ec:3c:cf:20:18:0b:ab:fa:30:b6:
a1:f0:24:e2:e3:fe:94:a3:e3:95:b0:fc:2b:d5:73:37:6c:18:
1b:ec:76:f1:7e:a2:41:c3:d5:ac:b5:71:28:b0:b5:e5:b3:9c:
97:c2:3c:9c:37:19:8c:22:2c:97:ca:b6:81:b6:e3:b9:0e:2c:
c3:cf:d5:09:e5:f7:1a:da:ca:0e:cc:80:62:35:de:5a:7f:71:
66:50:0e:32:ba:9f:c9:82:ba:29:87:ef:91:a1:f1:ab:6d:7a:
5a:ea:82:3f:f7:91:3d:65:1a:0f:b0:73:2f:ec:ac:80:63:85:
ce:56:c4:8d:12:93:a0:2b:8a:da:63:a0:da:d1:3f:e5:44:95:
3f:85:75:35:db:ad:36:52:67:20:a8:94:64:f1:43:86:3b:61:
ce:79:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:30 2026 by rpki-client