Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: fttE5O/A3EC4mTPnrACV9cZuHf0lRqSHZgpSiVeCD20=
Subject key identifier: 2C:CA:0A:7E:C2:47:32:AF:E8:40:10:90:F3:A0:9B:32:AD:86:0B:33
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019CC7BDC6FADA15B226C19D624B6EA3D3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 14E8
Signing time: Sat 07 Mar 2026 10:00:29 +0000
Manifest this update: Sat 07 Mar 2026 10:00:29 +0000
Manifest next update: Sun 08 Mar 2026 10:00:29 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: zRP3i0LKydflm4pcRq2d6f1+nmgzeMluqlDFekLa4No=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:c6:fa:da:15:b2:26:c1:9d:62:4b:6e:a3:d3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Mar 7 10:00:29 2026 GMT
Not After : Mar 8 10:00:29 2026 GMT
Subject: CN=2cca0a7ec24732afe8401090f3a09b32ad860b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:e8:58:f5:6c:77:5c:bf:d5:26:0d:59:2b:
da:18:49:89:75:78:cb:91:46:e1:44:d1:d0:e2:ee:
6f:c4:c7:40:da:81:4a:e5:02:e3:ab:21:cb:03:d0:
09:d5:40:f8:41:f7:7a:63:fe:33:19:0e:0c:80:c8:
f7:71:8b:95:dd:cf:fb:7f:90:c2:26:66:8b:b3:fd:
b9:97:c4:29:e3:e7:43:51:0b:69:af:38:1d:2d:7f:
68:ac:c4:95:98:1e:87:4b:75:a6:37:b7:7c:58:bc:
c3:4a:2a:b2:e1:ea:fa:44:b4:de:dd:f2:89:a7:13:
9f:23:24:7a:10:40:f0:58:f7:b7:ed:08:e8:35:a9:
38:44:48:04:a7:fd:f2:3c:1a:22:15:29:7e:1a:0f:
02:61:e0:5a:fa:32:af:ad:89:fb:f9:2e:ae:93:9d:
ee:98:c9:56:56:d9:7b:3c:a9:ff:ad:a7:4b:13:8c:
77:bd:0c:75:5d:ca:65:65:b6:1c:1a:f9:64:ab:a5:
4c:05:f9:58:93:38:37:61:06:d7:12:c8:fd:60:d3:
5e:07:df:96:c3:22:99:df:b8:87:b8:7c:38:5f:bf:
bb:76:a8:87:3b:6c:3b:87:7a:55:36:1a:0a:d8:74:
27:64:9f:17:49:3d:8d:18:0e:9b:a6:1c:89:31:59:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:0A:7E:C2:47:32:AF:E8:40:10:90:F3:A0:9B:32:AD:86:0B:33
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b0:29:83:8b:52:39:12:40:67:03:7c:09:48:3b:26:df:7f:
53:0b:a2:48:d3:40:52:11:4d:ad:12:5e:b9:48:a1:06:59:04:
11:54:76:e3:30:83:06:25:46:53:91:98:f1:c6:46:ea:b5:2f:
7c:d9:3a:33:5a:e2:9e:2d:c4:4f:a7:74:49:c6:1e:bc:7a:9e:
32:3e:75:6c:03:fd:9f:b4:9e:40:2b:42:2e:15:8c:04:c7:02:
d3:34:67:b9:26:4c:99:37:89:d0:7d:0c:26:0c:92:9c:d7:da:
3c:cc:31:3d:46:e9:99:be:b2:61:d6:d6:a3:99:40:3b:8b:b6:
94:44:7f:2c:18:70:b2:94:e6:0c:16:80:f0:51:e1:cb:c2:fe:
87:95:d4:3f:e7:be:4d:59:66:ff:68:71:af:d2:62:8a:98:7a:
29:f5:84:d0:bf:e0:51:da:57:de:a6:04:70:bc:7d:ab:99:99:
b3:61:e0:63:ad:98:de:31:e6:50:39:85:bc:ec:55:99:81:38:
e2:2d:05:59:27:25:a6:c4:08:57:02:6b:98:41:27:a4:fc:bb:
a5:11:7c:06:2d:b6:b9:9e:1f:28:3f:63:03:50:ee:3a:4d:23:
ff:ea:31:44:43:50:24:e7:66:55:f0:0e:84:14:63:c2:82:e4:
da:d6:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:19:53 2026 by rpki-client