Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: tdkOrVOTP+SXTNdc/wcU4jA/v2glz3vDuTiPzv3rrPc=
Subject key identifier: D8:EE:E1:F7:E7:19:22:05:5A:63:35:67:C0:FC:5D:BA:7A:A6:9C:FA
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 019D25B9FE132CACB5482334D5EFBB7224E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 1280
Signing time: Wed 25 Mar 2026 16:00:39 +0000
Manifest this update: Wed 25 Mar 2026 16:00:39 +0000
Manifest next update: Thu 26 Mar 2026 16:00:39 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: bK+fA/uCzv85G5kX90iYxEVGBkS9EzPKLvZmlpHNNC0=)
2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=)
3: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=)
4: prY-rLIal9gwsZUoWucK1yyF1hs.asa (hash: NDjhtGqZMT7ro6hNfoHbI/n8/Z/kEUq2p2BLNvKXvjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b9:fe:13:2c:ac:b5:48:23:34:d5:ef:bb:72:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Mar 25 16:00:39 2026 GMT
Not After : Mar 26 16:00:39 2026 GMT
Subject: CN=d8eee1f7e71922055a633567c0fc5dba7aa69cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:df:23:a0:62:8b:f6:9c:42:bc:6b:f7:fc:
fd:5b:85:48:e1:e1:c7:aa:c6:14:79:ad:f2:35:b8:
43:23:20:50:70:6a:50:af:9d:88:71:5c:88:1d:9f:
74:21:f7:cd:63:b0:b0:d3:b8:80:e4:7d:08:21:b0:
24:14:b0:ae:cc:b1:c8:44:a7:bf:6d:2b:8c:cb:01:
d7:57:36:dc:8e:e7:2f:06:80:c0:f1:a7:b5:23:41:
d2:8b:cf:84:81:cf:ca:15:6f:e5:26:c5:b6:43:a5:
8f:d9:02:e0:f4:6e:10:81:87:7b:4d:89:11:32:65:
1b:62:bc:65:f7:a3:95:9b:53:5e:e9:46:00:7a:b7:
b6:4a:ee:fd:bc:6b:59:e1:21:21:9d:9a:f6:c0:56:
04:6f:3d:29:24:63:ec:c9:c2:2f:ad:96:c7:ec:72:
ab:04:1e:fe:b2:30:56:c1:28:36:a0:29:35:59:f4:
7b:01:f4:26:d3:ef:2a:59:f0:0e:fd:83:b3:c5:09:
02:45:0e:68:4e:b5:2f:91:1b:22:70:ac:74:87:ea:
2c:38:ff:87:29:e7:72:39:4c:8a:ed:67:1f:76:0a:
03:da:39:14:8f:61:20:44:e4:c6:ca:e3:81:2d:87:
db:95:d8:0c:ea:3c:f7:6a:84:f0:73:ef:77:db:3b:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:E1:F7:E7:19:22:05:5A:63:35:67:C0:FC:5D:BA:7A:A6:9C:FA
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fe:c8:2b:9a:a6:3e:09:6e:a1:d4:7d:d0:72:6f:84:93:c4:
1f:6a:56:28:66:ba:84:ce:c9:cb:f8:1b:7d:87:da:d5:bb:56:
91:c8:de:28:ce:7a:90:79:fe:6b:14:68:9b:f6:65:33:80:6a:
98:96:f0:6b:27:ef:5d:b6:ff:f2:7d:a5:85:2f:f6:dc:19:ea:
7a:87:c1:4f:cf:44:ad:66:36:66:c7:1d:39:1e:40:48:82:a6:
45:20:f0:a4:b4:83:55:c7:62:77:47:79:94:f7:e9:10:0f:0b:
ce:af:c9:87:49:84:fb:c8:65:58:11:56:39:30:51:4b:f6:d8:
5b:08:4a:5e:07:8c:15:f2:72:09:1b:ed:c7:39:a6:7f:b4:4d:
ea:ec:4f:8c:01:62:4b:18:e6:db:2b:ce:48:44:9c:af:a7:22:
ec:44:fa:28:66:87:d0:41:fc:2d:92:0a:d4:c0:45:14:8b:7c:
57:ec:26:5b:67:d1:3c:77:ea:16:c3:8e:a5:cf:d4:9f:93:6b:
d9:13:75:02:21:ee:ee:1a:6d:1b:ac:4b:a8:61:b7:62:85:69:
01:a6:f7:ed:c2:72:19:9d:9c:bd:14:82:b2:03:18:32:28:82:
12:17:f2:ec:35:12:13:87:c7:50:6e:aa:46:50:bb:c0:53:74:
27:f9:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:32 2026 by rpki-client