Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier: mCpjiVtWhV9lCHw/cV0/9NbgShLoUrs2ZNniay4ahiE=
Subject key identifier: 6B:AE:12:F4:5E:8F:52:83:BA:ED:7B:27:A0:9D:76:CA:AC:FE:71:18
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 019D0E5774C39B1A8A3E96513E29E01FE145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number: 14A3
Signing time: Sat 21 Mar 2026 03:01:45 +0000
Manifest this update: Sat 21 Mar 2026 03:01:45 +0000
Manifest next update: Sun 22 Mar 2026 03:01:45 +0000
Files and hashes: 1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=)
2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: jeVSx5/ZylmlhHdk4v0VkdhjMoF/s/mvm5hjdsYQR5s=)
3: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=)
4: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:57:74:c3:9b:1a:8a:3e:96:51:3e:29:e0:1f:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Mar 21 03:01:45 2026 GMT
Not After : Mar 22 03:01:45 2026 GMT
Subject: CN=6bae12f45e8f5283baed7b27a09d76caacfe7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:2f:b5:50:2e:33:10:94:5e:6c:8c:eb:0b:
76:70:ab:7b:9b:f9:10:8f:6f:2c:ea:7f:15:81:90:
e0:cf:de:63:dd:5e:2c:49:18:29:c4:6e:8b:fe:7c:
2e:81:31:4a:b5:68:1a:e0:06:81:67:33:51:0c:2f:
fd:7e:8b:a1:46:fe:df:bc:c9:c4:2e:09:27:99:5c:
38:a8:f4:5c:9e:ba:fa:88:bb:c5:0f:fd:c1:d1:34:
9f:12:f3:26:61:47:ba:9f:6a:59:f1:db:3e:1a:15:
0e:46:28:f5:2f:35:f9:b2:be:ed:38:f4:2d:a7:e5:
2a:f8:54:d5:2e:76:2e:79:f7:62:8a:eb:1a:0e:99:
25:c4:5e:55:c2:23:92:af:90:cb:50:97:76:9e:60:
46:91:a8:ac:e5:38:27:e3:1e:c1:79:0f:00:3d:1b:
7a:b9:64:08:32:e1:d0:9b:d1:5c:40:44:f9:8f:48:
39:89:74:b4:83:d7:a0:f5:c2:85:06:35:26:a0:45:
d5:d5:66:bc:79:3a:93:55:94:82:1a:bd:df:9a:e1:
1c:91:86:91:33:de:31:81:6b:ac:68:b5:46:c5:bc:
97:1c:89:79:72:52:d8:ad:3b:bb:ab:5f:f1:d3:18:
50:4c:ad:62:c3:44:50:ed:f7:34:ea:a3:03:f4:5a:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:12:F4:5E:8F:52:83:BA:ED:7B:27:A0:9D:76:CA:AC:FE:71:18
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:60:4c:e3:c3:0b:46:f0:48:b5:7d:dc:7b:32:43:fb:e0:6f:
28:27:52:25:a1:62:5f:5e:75:b9:49:d8:01:e8:91:54:a2:02:
f0:02:e8:91:ab:c4:52:ce:24:da:77:2d:af:fe:1e:c8:05:35:
60:d9:58:67:77:b4:ea:3c:0d:5f:69:f3:7d:40:92:1c:cb:f7:
f8:67:0f:8a:47:3d:3f:64:15:79:68:6c:3f:32:24:79:ba:ce:
6c:ab:86:50:4a:e5:cf:24:65:14:04:30:76:73:50:e2:0c:c3:
28:fd:39:c9:42:15:01:cf:71:57:14:98:af:70:ec:c0:52:a0:
53:bd:21:ad:96:0b:27:7b:9e:84:19:51:00:58:75:48:b3:33:
08:ce:7c:06:da:da:9b:20:92:aa:52:44:62:a0:ce:9c:82:4a:
83:49:49:3f:ce:57:08:fc:8e:8f:c4:41:d1:6e:f5:8d:8d:d7:
7c:8d:03:95:a3:a8:cc:16:27:6d:6c:21:f5:ad:a5:ea:e7:4d:
77:38:91:84:f6:98:12:02:6a:3b:b3:7c:bb:6b:57:5d:15:88:
9c:0a:43:92:33:01:15:9d:bf:77:6a:78:d5:30:26:dd:7c:ae:
93:fc:63:91:0b:65:fb:95:ae:f6:4a:2b:45:4c:c4:09:39:46:
ba:cd:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:07:26 2026 by rpki-client