Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
File: 1PDpygJ6-SWAVKdz1981haJ7Q60.mft (raw, json)
Hash identifier: R/jA5WNRk9bE5DStHIHXT9PwAHx9Y3T5pvPQ9efty7s=
Subject key identifier: 74:24:5E:8E:63:A3:CB:C9:4D:2F:73:2F:F5:E2:22:5E:BC:6A:A5:43
Authority key identifier: D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
Certificate issuer: /CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Certificate serial: 019D39E5773DF7721F3BE54630738A0C8B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
Manifest number: 6D
Signing time: Sun 29 Mar 2026 14:00:32 +0000
Manifest this update: Sun 29 Mar 2026 14:00:32 +0000
Manifest next update: Mon 30 Mar 2026 14:00:32 +0000
Files and hashes: 1: 1PDpygJ6-SWAVKdz1981haJ7Q60.crl (hash: jTqY1N/oGHOiXKV5LdkuL9kJ6BK3k8/cDFjLUK1fzN8=)
2: tPh9q4Es1lUOr4Bxk22S2XZXPck.roa (hash: Dt+BHwi/gVmE8Y3zSl5BpcPA/QBKnLsdcWn+hxuageo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:77:3d:f7:72:1f:3b:e5:46:30:73:8a:0c:8b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Validity
Not Before: Mar 29 14:00:32 2026 GMT
Not After : Mar 30 14:00:32 2026 GMT
Subject: CN=74245e8e63a3cbc94d2f732ff5e2225ebc6aa543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:c0:ea:13:61:15:80:c6:bd:b9:10:08:05:
81:83:61:d0:8e:87:3c:16:82:67:8d:19:1a:1b:8e:
f4:c7:bb:44:30:b5:54:80:b5:b0:5f:bb:82:85:d3:
c7:7f:67:b5:d6:2c:90:d9:9f:4f:61:cc:c4:20:2e:
e5:e9:e7:76:0b:12:59:34:ab:c9:99:44:5b:66:cf:
7a:00:ce:f6:91:e8:ff:d9:33:00:ed:32:31:b3:3f:
c8:64:77:34:36:c3:d8:92:fe:af:1c:8f:1d:2d:30:
06:bc:83:ef:1a:c1:62:37:9f:a9:72:4f:77:d8:b7:
ab:36:dd:9e:13:30:a6:b7:4a:9c:0b:09:75:d8:eb:
db:3f:5e:22:8b:58:e2:c0:84:c5:15:95:e6:8f:ee:
5a:a7:ad:59:cb:29:35:44:7e:49:94:d2:19:f9:28:
32:44:19:6f:af:16:7c:b1:fe:fe:9a:22:3a:ef:a9:
68:8b:d5:7f:c8:e0:3c:e2:5a:1c:5a:59:7c:87:8e:
97:b1:81:03:f1:9b:f1:9a:b1:99:b8:50:fb:ca:dd:
db:ca:4d:95:61:9c:5c:5e:94:e7:86:bf:a2:ad:e6:
3f:3f:94:54:ff:87:56:13:01:92:f4:14:e5:99:3f:
e2:5e:e5:bd:ae:61:87:63:25:dc:4d:5c:20:62:ba:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:5E:8E:63:A3:CB:C9:4D:2F:73:2F:F5:E2:22:5E:BC:6A:A5:43
X509v3 Authority Key Identifier:
keyid:D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6a:94:31:9c:ea:c8:f9:69:87:c4:90:5c:f4:c6:5a:42:fe:
46:3e:77:27:73:c9:81:34:42:5e:54:63:9e:e0:a9:d4:3c:61:
3f:fc:c2:9a:a5:4e:92:7b:fd:51:ff:04:18:96:21:08:3a:b7:
36:11:90:4d:88:6e:e7:d0:cb:29:7b:f4:f6:86:7a:70:d4:c4:
a1:5d:4f:10:ed:cc:d3:03:31:39:d5:67:fa:75:da:4b:68:96:
b7:35:d7:16:46:38:3d:42:07:08:ba:87:e9:62:96:22:a0:7c:
c4:bf:83:57:88:44:f9:a0:6e:5b:4a:d5:6c:02:05:0f:87:fa:
ed:04:a2:99:69:39:a2:32:a5:85:66:32:09:f5:c0:0c:8e:00:
f9:fd:b6:04:a1:de:b4:75:a7:63:1c:fb:7c:ee:e9:c9:01:6c:
8e:87:ef:86:0b:e3:3d:1d:00:d2:16:ea:dc:95:d7:91:90:e6:
41:f9:4d:af:0b:9f:d1:3e:59:50:e5:87:14:d1:8b:8b:51:48:
23:90:17:b5:1d:d2:98:71:80:82:3d:88:b2:bd:92:0e:99:1f:
a6:77:2d:1a:c2:c3:83:0b:03:02:ff:21:96:0b:ca:bb:77:d8:
df:dd:c2:54:89:7e:8a:aa:8b:54:5d:76:c4:1a:c3:df:28:74:
33:0c:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client