Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: RY1d2K9zaOOPR2e2Dqh4JiyRNNw0rhGC2pLCLHntv84=
Subject key identifier: 72:30:21:51:D5:23:B1:ED:A3:97:72:DB:A8:D9:23:1D:7C:0A:26:97
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019D05C14C359A0706B719AC711E79C60E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 11C5
Signing time: Thu 19 Mar 2026 11:00:47 +0000
Manifest this update: Thu 19 Mar 2026 11:00:47 +0000
Manifest next update: Fri 20 Mar 2026 11:00:47 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: u7RJsIASINnGjZUt/Yk5/NSZDBO3tUs3v3J17B1O2fY=)
2: jM4bCus_MOUyOpnMWkBG4DEReus.roa (hash: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8=)
3: v4vgN5S5raK6CZzGiAArElrxR7M.roa (hash: xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:4c:35:9a:07:06:b7:19:ac:71:1e:79:c6:0e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Mar 19 11:00:47 2026 GMT
Not After : Mar 20 11:00:47 2026 GMT
Subject: CN=72302151d523b1eda39772dba8d9231d7c0a2697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:e1:03:28:4a:a6:46:ee:7f:da:3f:d5:04:
f6:d3:87:2f:84:5e:ed:82:a1:24:08:b8:b4:76:ce:
69:3a:0e:11:d9:93:2c:46:3a:a6:cf:7b:17:23:d7:
1d:7e:a8:bc:35:70:51:f0:2a:a7:a2:34:41:a0:f8:
5b:35:79:ec:a1:aa:f8:12:ba:c4:a7:c5:ea:f5:8f:
51:40:6a:2a:fa:70:40:3f:99:c3:29:84:e4:9c:9e:
ca:a9:01:49:5f:ae:c5:69:9d:2c:19:e0:d4:f7:87:
6b:e0:ab:33:72:6d:11:84:8d:38:fb:88:0e:13:0e:
2e:af:01:0e:75:ed:2e:12:cc:e1:31:67:76:df:55:
2c:47:0b:3f:13:4a:78:f9:fa:5f:a7:e0:d7:2f:d9:
62:83:b9:0f:f2:a6:1d:96:98:af:be:9c:b0:a3:1f:
a8:92:a9:cb:a8:8d:f6:3e:ab:58:d7:ff:04:59:c4:
15:6c:30:99:32:d7:38:a6:2d:19:1f:8e:f3:9c:f1:
08:7f:4c:f3:30:d9:c2:ec:6c:ba:d0:3d:eb:21:57:
0f:b8:96:c4:d5:18:50:97:33:78:72:85:34:d1:bc:
a4:7d:3b:fc:23:81:d4:fb:a5:96:6d:1d:c3:23:86:
ae:16:68:be:39:9a:c0:8b:c6:3c:38:92:fd:a4:9f:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:30:21:51:D5:23:B1:ED:A3:97:72:DB:A8:D9:23:1D:7C:0A:26:97
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:28:97:d9:83:dd:6d:1d:62:47:e7:a4:87:ed:66:52:6f:
f0:e7:80:9c:5d:f5:13:f2:47:59:c3:8d:db:61:8d:5d:66:7e:
3d:9b:51:b0:f8:b0:f0:6a:3c:28:9b:3e:10:c1:40:87:59:29:
67:d8:af:c2:78:28:2e:cb:5b:c4:44:22:91:9e:70:25:ef:db:
fa:57:d7:75:4a:3d:c3:a3:5b:41:de:1c:a7:26:c8:83:97:ee:
16:cc:53:16:53:b3:39:b3:0e:7f:97:56:a0:d3:44:d3:5a:68:
db:4c:6c:3c:be:1e:7a:1c:d0:e4:82:8e:a8:2d:34:aa:d2:88:
00:8d:24:6e:98:58:9c:f3:19:b3:7f:47:cc:33:1b:41:60:70:
fa:0c:4e:d3:f2:a4:24:2a:8d:5c:fd:7f:a5:4d:ce:68:4e:9e:
7f:f7:fa:d3:be:ce:28:f4:08:e0:a9:fe:d5:de:48:8b:db:99:
6c:e6:13:1e:8a:9b:c7:f6:31:f9:21:c7:99:ae:a8:2f:dc:f2:
ad:36:bb:c8:2c:8a:ff:c1:c3:09:eb:13:09:dc:44:e0:05:2f:
09:9c:9e:5b:a1:0c:3d:5b:07:e0:7e:d1:97:31:77:7a:1b:90:
95:99:5a:e1:79:38:09:34:60:f1:74:e2:23:71:ea:f6:c5:cc:
41:0f:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:00:43 2026 by rpki-client