Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: Nt6RDyWfjv/gaiCzoCCD0/kMlQ5OIxJob6UG+oNec2U=
Subject key identifier: A6:89:2F:ED:55:5B:8A:CF:38:D8:CE:E6:1D:15:92:B9:8B:38:CD:75
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019D39E602E7D3D76415AEFB43704F2AE707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 037D
Signing time: Sun 29 Mar 2026 14:01:08 +0000
Manifest this update: Sun 29 Mar 2026 14:01:08 +0000
Manifest next update: Mon 30 Mar 2026 14:01:08 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: T3UBaXsOm01gCP6ufo54hSQHdpsXXfziSIP0iTNqx2E=)
2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e6:02:e7:d3:d7:64:15:ae:fb:43:70:4f:2a:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Mar 29 14:01:08 2026 GMT
Not After : Mar 30 14:01:08 2026 GMT
Subject: CN=a6892fed555b8acf38d8cee61d1592b98b38cd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:c5:6a:7a:ef:48:95:44:d9:35:b9:d1:c2:
8d:bf:8b:87:73:18:7e:dc:1d:7b:4b:95:00:bd:01:
53:67:a4:04:c8:90:04:7d:b5:83:61:2d:44:1f:bf:
54:67:23:0c:30:9b:69:a2:ae:0b:ff:32:18:e5:3b:
d1:9c:a1:0f:0f:6f:33:6c:7f:dc:3f:82:f5:8d:12:
fc:9e:09:c2:da:0d:85:3a:87:f1:bb:66:e1:d0:97:
a6:21:83:4b:5f:4e:7b:b8:78:2a:3c:04:b0:93:87:
c2:c3:c7:35:cb:75:48:de:5f:1c:b2:7c:1b:4a:f2:
7f:30:72:7b:aa:42:d5:56:63:a1:b5:03:8e:cc:8c:
b0:8a:7a:d7:c1:1f:ba:74:9c:dd:e5:3a:e9:27:b1:
97:6d:8b:c5:63:e5:68:48:a0:f8:3d:df:04:08:ea:
b8:d1:46:1d:a0:5e:32:26:5e:e9:ef:d7:75:0d:a3:
7d:67:17:2f:be:bc:4e:17:0e:a1:ed:c3:27:00:fc:
5c:63:4a:3d:e8:21:9c:ba:0a:66:48:d1:22:e3:0c:
84:d8:c6:08:ae:e9:d4:d2:9c:3e:23:7a:c9:55:83:
13:04:49:26:c7:32:1c:25:63:cb:9f:d1:ea:e5:4d:
33:91:1b:91:14:08:d4:d4:99:15:1c:62:dc:e1:65:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:2F:ED:55:5B:8A:CF:38:D8:CE:E6:1D:15:92:B9:8B:38:CD:75
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:ad:f4:65:b4:1f:c6:cc:9c:da:32:5f:64:6f:f3:27:80:
aa:e5:86:07:50:02:fe:b7:68:5a:3d:60:6f:ad:41:e1:38:68:
87:f6:f6:82:cd:ba:f1:88:27:14:74:5c:b6:85:dc:00:14:c3:
17:12:58:a6:d6:10:ff:1a:61:8b:90:8f:8d:4f:ff:f0:f9:c4:
59:ab:74:4b:db:0b:de:13:21:13:e4:bb:ec:fd:a4:d8:40:56:
c0:aa:13:ba:0f:ba:18:06:79:e8:60:06:16:cf:3d:c7:fc:3b:
5b:21:55:12:e9:65:f6:fe:e9:81:04:e2:81:61:9d:54:e0:25:
9e:07:9a:62:be:a5:c4:74:61:a8:12:52:a3:5c:c6:d9:c3:2a:
27:dd:f1:2a:59:e1:ee:44:3f:dc:e5:c1:3e:6f:d9:5a:37:92:
72:d0:69:f6:cb:aa:d3:c4:c5:35:3c:6c:aa:83:41:bf:d1:1c:
35:0c:8f:91:c1:bc:aa:7b:d2:79:51:68:35:ce:d4:d4:1e:5e:
7f:b7:2f:47:9f:c4:56:6a:27:7d:2b:a8:59:39:9a:78:4c:70:
f3:2d:18:f0:78:5a:fd:a7:11:80:72:59:8c:f0:73:ac:83:02:
2a:d2:40:e8:ef:ae:58:6f:8b:33:f0:47:68:31:b7:11:54:54:
78:8d:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:33 2026 by rpki-client