Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: bF2hgJRoiu9zSRPkzNyZSkaRRbpt7ebTpPKQns8Ww3M=
Subject key identifier: 13:8F:9B:1D:F2:A0:AA:EC:BD:20:99:E9:5B:DE:65:41:B8:7D:C0:0D
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019D2583D1BBE88A95F527003A9B1AEB2366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1067
Signing time: Wed 25 Mar 2026 15:01:29 +0000
Manifest this update: Wed 25 Mar 2026 15:01:29 +0000
Manifest next update: Thu 26 Mar 2026 15:01:29 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: CdKJOvnZ9gk/T0/lxShZB4U6WVuv+HMRBYlCAy+6O/Y=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d1:bb:e8:8a:95:f5:27:00:3a:9b:1a:eb:23:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Mar 25 15:01:29 2026 GMT
Not After : Mar 26 15:01:29 2026 GMT
Subject: CN=138f9b1df2a0aaecbd2099e95bde6541b87dc00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:c6:51:79:d5:8b:73:da:5d:d8:6e:2f:d1:
87:7e:a6:50:f0:0b:be:ae:55:d5:39:a4:82:99:aa:
aa:4f:85:be:43:24:83:94:be:4f:a8:cd:94:43:19:
32:03:2f:82:e2:b5:04:a9:85:70:8b:f6:13:be:ef:
9f:46:62:d8:69:98:22:bf:ff:ae:d8:b7:e9:bd:56:
b9:42:c5:31:3d:fe:5a:31:11:c1:60:5b:f3:9d:e9:
fb:65:d0:b2:bb:3a:cb:91:78:37:9b:bd:4d:81:78:
31:80:7a:79:87:51:3b:3b:65:d2:e6:85:66:67:75:
58:28:88:96:77:40:77:7c:b4:f3:84:ec:9a:e2:26:
95:b9:4c:39:79:03:b9:54:e3:85:d6:ec:61:87:07:
25:65:e7:9a:12:58:41:12:af:60:70:51:47:a6:38:
fe:3a:0e:b4:e2:c7:24:57:1a:49:e6:b0:ad:36:3f:
da:db:fd:4f:3f:b9:0c:13:a2:ec:b5:25:7f:6f:a6:
90:3e:05:f9:26:ce:45:b7:41:0d:93:ed:7b:5c:81:
55:0b:6b:96:9e:da:2b:a4:37:68:c2:4c:c7:1a:20:
90:8e:f4:a3:63:a9:3f:52:80:db:af:f9:81:53:c1:
84:27:55:82:76:88:f4:b4:59:f6:4b:38:26:4b:2a:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:9B:1D:F2:A0:AA:EC:BD:20:99:E9:5B:DE:65:41:B8:7D:C0:0D
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a3:92:28:06:e7:05:a8:e4:72:b8:85:c5:bd:3d:3e:7f:58:
6e:08:48:5b:6a:bb:43:82:59:c0:93:e2:60:d8:d4:e0:aa:fc:
97:f7:b6:9f:ae:ac:f8:68:72:5c:25:b8:82:6f:04:69:a4:34:
8f:ec:6d:f2:b5:a1:61:c9:8c:0c:7e:43:f7:0e:a2:f0:f2:bb:
0e:c5:fd:6c:cb:e3:9c:3e:a0:f5:15:21:af:76:d0:82:29:23:
74:fc:b7:9f:aa:e5:e1:eb:c6:eb:c8:e4:40:5f:e7:07:43:59:
cd:26:7b:34:7e:5b:14:73:78:12:16:8d:a9:ab:6a:63:57:11:
cf:ae:46:b9:6c:15:36:0c:3d:f1:55:fa:96:f1:4c:f8:7b:c3:
f0:d9:90:fd:8f:85:3f:a0:de:de:7f:39:73:e2:94:fe:83:b1:
55:f1:66:b9:6f:2c:4e:d2:c4:cc:3e:b4:35:61:dd:aa:e5:0e:
60:c7:9d:c2:d2:9a:48:d3:73:c4:53:de:62:84:67:d1:27:b8:
80:c2:58:0b:2a:ab:f7:84:e4:3b:01:b1:8d:98:f5:23:bf:4a:
02:05:19:4d:70:7f:9e:12:5f:1a:d8:02:d6:f8:a4:e8:f9:fb:
4c:32:ef:cd:87:a7:6d:80:f4:74:24:26:5d:c6:10:8d:23:e8:
76:7c:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:53 2026 by rpki-client