Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: g3oM6fn/lo/AJSHv+CAcUxnQ4hbfLVmTN5H3TZv0Dsw=
Subject key identifier: 45:62:69:FD:DA:CE:61:40:19:71:14:BE:05:6D:32:DC:7D:F2:1A:9A
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 019D07E6C6CB256B96617C91B5F637FAED3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1809
Signing time: Thu 19 Mar 2026 21:00:57 +0000
Manifest this update: Thu 19 Mar 2026 21:00:57 +0000
Manifest next update: Fri 20 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: YPq+aInK6AK8leC/Jed+sUx7oltcrLzZNeoEC7jdlqU=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:e6:c6:cb:25:6b:96:61:7c:91:b5:f6:37:fa:ed:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Mar 19 21:00:57 2026 GMT
Not After : Mar 20 21:00:57 2026 GMT
Subject: CN=456269fddace6140197114be056d32dc7df21a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:45:0d:1c:ac:ab:9b:52:ae:07:c4:72:06:
ba:13:53:9e:c6:b2:e3:e2:bb:01:28:05:87:64:c7:
a6:48:c5:d3:3d:57:d0:6f:fb:78:71:e3:74:0b:3f:
e8:0d:c9:ee:5e:de:a6:81:9e:3f:f9:a0:dd:00:94:
60:c4:b4:a8:20:a9:03:e1:77:b7:a6:4b:4a:2e:14:
02:73:2b:86:20:31:57:59:18:6a:71:d8:c9:d4:fb:
b7:4e:85:ed:08:06:63:d4:89:29:b3:2c:7c:9f:20:
ef:c9:83:6b:b9:73:f7:6f:88:d8:71:5e:18:07:a5:
e1:02:c0:67:54:17:66:89:41:b4:b1:72:82:e0:b7:
86:7b:87:9f:6d:08:44:70:8a:d3:c1:dc:c8:fd:6b:
e8:ad:60:4b:fe:22:80:6b:6a:da:6c:de:22:69:16:
84:c7:b6:c3:1e:9b:17:79:55:2d:ed:0a:35:c4:e4:
68:8b:a1:b1:e3:48:8a:ad:a6:e7:49:89:eb:6d:67:
e3:d6:e9:56:ce:d9:54:ce:dd:d8:46:1e:89:a3:4d:
72:08:31:16:8a:55:98:43:ea:81:e7:c9:74:e4:77:
b3:b3:a1:c5:1f:cc:68:71:08:df:15:6b:00:44:2d:
0c:7c:fe:32:b8:09:5c:b8:1b:a7:e3:94:9e:62:74:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:69:FD:DA:CE:61:40:19:71:14:BE:05:6D:32:DC:7D:F2:1A:9A
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:57:0a:84:0d:0b:b3:e9:e6:ec:fd:f2:af:07:1f:5f:ef:2f:
2c:42:5d:bb:14:cd:a0:df:53:54:bb:e3:2b:78:81:e0:3b:8f:
83:cc:4b:1c:a4:12:6c:9f:d7:86:92:62:ca:0d:b0:c1:dc:e6:
42:ed:c2:d2:7f:16:f3:05:0a:2b:dd:e2:4c:20:48:00:c2:6d:
1b:8a:61:38:b6:29:46:fc:30:b0:de:c9:ab:a3:c5:b3:74:57:
d1:b8:60:13:ae:fb:3b:b0:97:45:0c:9d:63:5d:d8:2f:e5:f2:
eb:53:58:a1:e4:a1:a7:eb:63:ca:2a:55:ea:90:36:0c:42:28:
6c:dd:6a:b3:f9:8b:3b:cc:de:d9:60:27:c1:88:66:fa:94:cf:
18:57:19:cc:3a:cf:e0:cb:ed:4a:52:ca:8d:97:38:a8:20:52:
ab:ce:bf:f7:15:a8:b4:bb:b8:ae:6b:95:e8:da:72:a4:3f:97:
5e:1d:3f:2f:33:a9:c6:42:a8:55:37:cf:a1:2b:f1:db:aa:57:
25:1b:9f:ae:c0:ff:00:8c:0f:57:d0:11:84:d3:cf:06:05:83:
39:c9:44:e8:ce:90:a0:83:df:20:c3:5c:a9:be:e5:42:57:bf:
2c:42:26:88:d9:63:04:ac:01:82:4e:6c:0a:17:35:b2:19:8b:
be:26:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:40:11 2026 by rpki-client