Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: oPun9Gxc6ZxQ0LV9MlR1Apd96gdab2VRxQ+s5vUjk3k=
Subject key identifier: C1:8E:2C:9C:6B:8B:B3:DF:A7:77:C2:EA:E3:75:EE:40:5A:88:AD:D7
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019D390A4CF52DC3B4CCDC4F366E2BEBA269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 07D8
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: NqLgNm+pV8bsE3W9CHiEnin2SJ07lqfZz9F6zpNI4Sg=)
2: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4c:f5:2d:c3:b4:cc:dc:4f:36:6e:2b:eb:a2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=c18e2c9c6b8bb3dfa777c2eae375ee405a88add7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:ff:20:9b:96:14:93:98:54:da:6e:20:fb:
32:a6:6f:c7:03:5b:7d:d5:99:e7:d1:fb:21:84:5a:
3f:e8:e5:80:8c:ba:22:7d:fd:d3:91:bf:91:16:65:
10:28:33:63:91:8d:12:bf:2b:93:af:64:4d:6d:89:
21:f4:df:85:5a:29:1e:d7:bf:d3:ae:7b:db:75:6d:
10:f5:7e:79:70:30:02:27:48:c5:c5:7d:4c:5e:e7:
b5:c3:a3:95:a1:6a:62:ec:ed:a9:12:f0:c9:69:6d:
6d:45:a3:88:ab:c8:e4:5d:0b:1f:0f:ff:2c:22:6a:
5e:4c:18:6e:eb:d0:cc:be:5d:b8:12:fc:9b:a4:8a:
5a:d8:41:3a:ef:36:64:ee:1f:9d:f2:be:32:3f:d4:
ba:83:13:55:7d:c7:ad:8e:29:0b:ba:18:2d:cb:21:
22:05:5f:17:d3:00:2f:a8:4d:eb:6a:11:f2:d6:6a:
f9:96:8f:fa:1d:b6:ba:ee:0f:af:fc:26:cd:d7:f3:
64:10:c3:c8:66:61:f2:6b:b8:31:14:5a:95:0f:9d:
a0:3b:97:d6:35:38:c1:56:5d:91:29:0f:ab:05:e6:
1b:8c:2c:0b:b5:42:3b:7e:34:7f:b3:92:51:be:87:
5b:b3:41:99:4c:92:02:b0:79:b5:63:c9:b3:bb:94:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:2C:9C:6B:8B:B3:DF:A7:77:C2:EA:E3:75:EE:40:5A:88:AD:D7
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:71:b2:31:75:54:65:1c:a7:bc:e0:7a:a8:09:92:37:66:90:
89:8b:63:e3:23:c6:94:31:46:cc:5f:3f:5c:82:9d:68:28:71:
78:57:8c:57:5a:f5:b4:8c:5f:34:06:11:a6:a5:ea:91:5a:08:
0a:77:0b:36:eb:fc:ac:8f:c3:bd:74:03:f7:d4:7b:92:61:fb:
3e:06:5c:80:57:84:76:26:7d:a9:6e:30:7d:cb:28:27:6f:a5:
c1:73:e1:b9:25:9a:8f:89:ee:4a:97:20:2f:ec:49:e0:d7:62:
82:73:9d:89:0b:b6:87:58:23:d6:70:d9:45:a5:1b:16:c5:4e:
50:98:2b:d8:ff:cc:b7:66:bf:72:d9:9f:31:5f:06:53:93:f4:
2c:c4:88:65:0e:15:cd:9c:fc:ac:82:ca:f7:55:d3:de:70:86:
45:ff:85:f7:f8:97:ac:3a:4d:91:27:02:ca:be:4b:0b:fe:38:
ce:cf:f3:c4:ce:2e:a5:f5:ee:4b:ba:83:39:55:92:42:89:27:
bf:0c:b2:b7:0f:0f:96:4b:43:6a:a4:38:8b:df:59:2b:91:c8:
8d:29:36:64:14:3f:97:e5:8e:74:d5:eb:3a:dc:71:33:af:91:
92:fa:5d:08:a9:7d:e0:b9:5c:2f:01:6e:59:25:a0:22:c5:64:
95:97:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client