Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: RsGRz9Cz2iMAOL9rEoL41U+cgdTqh68RzHS+7tdOwGw=
Subject key identifier: CF:7D:2F:0B:36:21:F1:D8:44:56:3B:DC:11:A4:E7:66:30:6D:CA:87
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019D3789A74673A846211018726620AE4AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:01 +0000
Manifest this update: Sun 29 Mar 2026 03:01:01 +0000
Manifest next update: Mon 30 Mar 2026 03:01:01 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: tnwq56/UzYQWaOFW1Ij1p4XYorTVt+Zv/95II3s4H7k=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a7:46:73:a8:46:21:10:18:72:66:20:ae:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Mar 29 03:01:01 2026 GMT
Not After : Mar 30 03:01:01 2026 GMT
Subject: CN=cf7d2f0b3621f1d844563bdc11a4e766306dca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:42:9f:fb:5b:ce:ac:4b:e1:38:11:30:5b:
b9:05:f9:14:59:cf:8b:75:18:bb:5b:d6:d0:ba:ba:
f0:92:0c:6d:97:60:2c:d2:15:94:7f:9a:be:16:92:
73:a7:d3:38:69:df:93:19:1d:84:8c:13:4c:d9:0c:
7b:71:34:b7:0e:dc:4f:1d:d0:8f:8a:2c:78:14:4d:
e1:61:c1:e3:00:b0:f4:7e:51:78:64:15:f1:c7:45:
20:19:b9:a7:d8:05:39:5b:aa:7c:60:34:0f:82:c4:
a9:fc:c3:d5:c1:15:47:b3:71:81:27:78:4b:ed:d6:
50:32:d3:15:fc:ba:ac:0d:b7:0f:d2:04:2c:60:b4:
7c:41:0e:28:c6:27:04:de:84:59:f3:11:20:0b:33:
a2:c7:c2:e9:11:b8:92:e3:40:ed:2f:f5:a8:af:54:
52:cb:ab:20:6e:49:57:21:a0:08:45:ed:ab:95:cc:
9c:b8:40:62:c6:72:b7:72:4b:7b:9f:fd:4d:29:f9:
b4:91:03:4d:9a:9f:d7:62:62:e6:df:bc:16:ff:3c:
a8:64:15:8a:61:85:0c:d1:1f:17:ee:fd:e9:95:b5:
c0:0a:af:89:bd:fd:d1:5d:c3:88:a7:d5:fa:7f:ee:
32:2a:6f:d5:3d:b7:7c:86:36:6a:f1:80:c1:af:25:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:2F:0B:36:21:F1:D8:44:56:3B:DC:11:A4:E7:66:30:6D:CA:87
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5c:24:44:7f:28:c6:a2:a1:93:25:f0:60:e2:b3:df:63:97:
85:81:1b:19:41:ad:26:f6:0f:47:3a:90:ae:b4:ce:45:50:63:
c3:15:cb:87:d8:8e:10:33:b0:73:c8:8e:41:15:c1:8a:48:4f:
2c:62:d0:90:0c:dc:fa:66:a0:3b:63:96:85:c4:13:ae:a7:68:
1f:c9:57:fb:16:a1:c3:2e:19:b9:e6:5e:8a:9d:5d:4a:aa:47:
31:0f:f9:83:85:5d:3a:65:57:0f:f8:60:54:60:e3:de:a9:20:
c4:09:ae:0c:d5:cc:f9:df:42:8b:30:0b:65:28:52:2e:99:a6:
44:81:2e:60:16:55:ce:49:14:dc:63:52:98:54:b0:c7:14:2a:
b3:32:fe:77:3c:21:ff:58:c5:40:f1:1e:e1:ab:2c:ba:43:27:
2c:1e:c6:2f:3c:de:f0:0a:f7:7b:1f:6f:6e:63:2b:bb:16:23:
a2:2e:e4:b4:f8:93:c1:0a:9d:e2:18:27:85:73:87:5c:93:c1:
69:71:cb:f0:bf:74:c0:e1:34:71:43:e1:36:96:99:73:51:4a:
cf:f2:f6:71:3f:78:ba:4d:bc:1d:0c:78:08:69:c3:fb:52:b0:
b1:1e:da:a4:b5:5f:fe:c4:db:97:ab:5e:f3:bc:8d:1b:57:22:
0e:6b:08:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:01 2026 by rpki-client