Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: Zjm25zCSJ3GVjFETTOTEa1RqiKoBFUuo2yUvuJyQ6z8=
Subject key identifier: 15:B1:4C:20:BF:EA:5A:11:DA:5A:B4:BA:18:8C:D7:04:73:2B:4E:83
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019D371B9FD1E9617498E9837FD31EC6070F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1496
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: m9iewxPuLLLhGCI/v4P/MhQIEVWDwQojOQ8LZ42PIfg=)
2: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (hash: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9f:d1:e9:61:74:98:e9:83:7f:d3:1e:c6:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=15b14c20bfea5a11da5ab4ba188cd704732b4e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:4f:25:dd:0c:87:ee:83:a6:28:2f:14:e4:
21:b1:28:d0:91:19:8a:5b:1c:01:48:54:59:6b:a2:
83:28:89:f8:12:a0:07:6d:2b:f5:fe:2a:e9:be:9a:
fd:7b:4b:ce:cf:70:d4:f2:99:c9:01:47:36:29:5b:
8b:0e:a4:2e:b5:94:50:aa:25:58:98:5c:6d:94:05:
c1:14:ac:29:ba:8f:33:a2:51:83:95:54:28:ae:9b:
84:ae:22:7f:af:a3:ae:34:db:36:70:4d:22:a0:fd:
09:a2:a3:35:87:f6:76:e4:fb:da:15:f3:d8:33:6a:
ae:06:de:aa:64:66:9c:fa:b4:14:a1:29:6a:59:1e:
da:97:88:e5:be:be:de:df:b1:07:db:bf:15:9d:37:
5b:02:7f:44:30:83:67:a2:ab:52:6f:27:fa:a1:b6:
23:e1:88:5b:34:66:27:70:67:65:16:00:f6:1a:aa:
c3:4e:a0:a7:d3:c5:28:45:e8:81:9f:a4:ac:05:98:
82:6d:ed:f5:2a:ed:13:0f:b2:73:b9:c7:08:1b:7c:
51:75:d9:60:fc:17:54:6f:ca:ff:44:a7:67:65:d4:
60:6e:75:8d:50:74:e6:db:fa:a7:19:94:d8:a5:55:
dd:e4:2c:31:36:ea:5d:0f:fa:25:7a:d3:90:45:d6:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:4C:20:BF:EA:5A:11:DA:5A:B4:BA:18:8C:D7:04:73:2B:4E:83
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:db:85:b0:8a:17:2a:f9:f2:58:d8:fe:af:05:ee:10:0d:da:
1d:ce:ae:1f:98:51:a5:a1:80:57:b8:bc:ea:b8:0e:81:5c:56:
d5:7c:0c:ee:91:e7:7d:51:92:0b:bf:9e:ee:b6:8c:91:d6:a9:
ee:25:7c:23:7e:4c:34:33:81:b7:17:c8:fa:34:a4:fd:3f:ba:
fe:ae:30:7e:ca:58:1b:80:53:21:96:e7:75:cc:bd:fe:d5:7a:
d5:54:58:cf:2b:3c:c2:25:8b:8e:05:b9:8b:ff:a0:bc:35:fb:
60:08:5b:5a:57:e0:a8:24:2b:fb:68:95:85:2b:ff:50:ac:55:
23:6f:b5:eb:7a:e7:96:42:00:44:f2:cf:27:15:d9:f2:30:a1:
9e:2d:b7:00:2c:98:7b:df:a6:cc:b1:e9:b3:e3:3f:10:12:2a:
ee:22:3e:f0:0d:12:06:b5:c0:92:69:d3:41:66:b5:08:a3:fc:
ec:4d:53:db:34:5a:aa:33:4c:d5:63:42:c2:6a:91:ad:34:ff:
0e:9d:fe:0f:37:68:c5:5c:00:35:34:f4:38:b9:1b:f4:db:19:
ed:d9:f0:f1:c5:5b:e9:fb:02:13:c9:2b:1a:34:d0:32:57:6c:
d7:fb:30:1c:39:5b:a8:25:5b:6c:d6:eb:36:8a:2c:ec:22:7e:
4d:94:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client