Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: r9bZUH3hsDAvcnpoouZx2KQpO/6qL26jPD76VfdO3io=
Subject key identifier: 7B:E1:48:75:5E:27:B8:29:F6:28:E6:B8:2F:89:6D:DD:C9:E1:AE:37
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 019D37C0F9BD897DBB21F5590F7FA586715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: pILaRouuNC8/ZA+Qt/j5hcVd7Ei0EFdOdy6nW4UyO0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f9:bd:89:7d:bb:21:f5:59:0f:7f:a5:86:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=7be148755e27b829f628e6b82f896dddc9e1ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:4f:3f:4a:34:51:2c:4f:41:72:73:23:46:
98:00:6e:ed:65:94:b9:b2:4c:7d:69:e1:15:d1:39:
27:ab:c4:be:35:93:10:ef:f6:01:9d:dd:af:bd:cd:
a6:58:5a:5a:8a:0b:0b:37:9d:d1:0a:bc:04:05:50:
18:8d:3a:4e:55:29:47:58:3f:74:e9:e0:3b:bc:9b:
89:b5:ba:25:4e:c5:1f:b3:fd:15:fc:d6:66:c2:aa:
1d:89:0c:f1:77:99:df:7c:cb:04:1a:1a:ac:e3:0c:
0c:1c:78:37:7d:ac:cc:6f:ff:5b:12:70:1d:06:1e:
a3:c7:ec:4c:dd:20:14:bb:0d:6d:4c:6a:f6:27:00:
db:3b:a2:ef:b5:86:c0:5f:f0:0c:c4:de:df:ea:7c:
cc:a5:20:46:41:ba:b3:9b:8e:c1:cc:a0:3b:a1:6d:
d5:7f:dd:a2:3c:ae:ff:9b:70:c6:b6:a0:9a:c6:d3:
89:75:49:83:31:1c:57:d1:5f:e6:cb:64:10:2c:23:
2e:44:2f:18:3c:51:37:49:82:e3:c0:2b:e6:19:ce:
c3:ab:e3:9f:b9:bb:32:3d:a8:64:0a:7d:22:17:90:
57:90:46:9d:73:83:b2:20:64:1e:cc:86:a2:ae:dc:
9e:5a:30:d3:6b:07:e3:b8:bb:0b:39:d1:54:ec:46:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:48:75:5E:27:B8:29:F6:28:E6:B8:2F:89:6D:DD:C9:E1:AE:37
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:a8:ec:e5:76:e1:60:15:9f:48:c0:05:c4:4f:e5:2c:4f:
8c:26:ff:7a:60:51:3a:7c:f3:a2:e6:e7:93:82:2f:47:6b:af:
1b:96:bc:ea:eb:ba:4e:68:44:7b:82:71:a1:a9:a8:5f:56:85:
15:f9:bf:33:ae:68:c3:0a:b7:5a:3b:78:b3:33:ed:0f:65:49:
c3:51:e6:8a:ff:50:14:ac:c1:85:ce:b5:e4:bb:f2:63:9e:1a:
26:0c:73:30:41:8c:b3:c0:18:9d:15:86:de:77:91:68:87:45:
e5:3f:01:00:e4:85:74:65:45:8f:fc:a7:28:b1:c8:ac:28:2d:
40:13:0f:5b:cd:5c:68:a5:b6:20:fd:8c:12:24:f2:4f:93:92:
4a:de:47:aa:38:9d:2f:92:ea:6e:f2:8d:15:18:ee:e1:d5:2a:
bf:71:37:1f:24:e8:95:72:4e:8d:77:9c:62:29:50:1a:63:04:
f4:86:c1:aa:9f:bf:d4:6a:e2:c9:34:df:94:ae:09:f0:2e:8c:
8d:db:81:a9:87:73:62:5c:f0:97:e8:23:25:4a:7e:6f:cd:74:
db:63:2c:82:5c:8a:d5:2d:41:53:71:52:c3:3b:41:8b:06:e3:
3e:ed:d0:e0:d5:ec:12:17:d8:5e:1c:38:2e:92:41:d2:83:99:
f5:d5:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client