Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: 2TDqs49h6kLUUb+23GnL8Hcbma7fPciDF6nSt9kQ5gQ=
Subject key identifier: A7:B8:93:F6:77:7B:6E:53:C9:5A:91:12:ED:DF:17:D5:93:9E:44:AF
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019CE66D13461E042DC19433EE3F39BEF7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0270
Signing time: Fri 13 Mar 2026 09:00:33 +0000
Manifest this update: Fri 13 Mar 2026 09:00:33 +0000
Manifest next update: Sat 14 Mar 2026 09:00:33 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: bkh4TKsRKFv+FbTQNBAhN7usX+OkEDHdXZ2hUSp7elY=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:13:46:1e:04:2d:c1:94:33:ee:3f:39:be:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Mar 13 09:00:33 2026 GMT
Not After : Mar 14 09:00:33 2026 GMT
Subject: CN=a7b893f6777b6e53c95a9112eddf17d5939e44af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:f5:2b:62:94:4d:c1:59:02:f6:44:df:dc:
27:98:7f:f4:62:3e:a9:dc:38:b6:ce:68:fa:fd:4c:
eb:5b:f5:54:4a:03:83:ce:6c:b9:70:b0:72:bb:c3:
c7:60:e8:62:2d:1e:56:86:38:c1:f3:36:f6:07:dd:
20:ec:a6:37:70:71:68:a6:21:17:da:0e:c4:96:37:
9a:e8:4b:04:ba:c3:2c:9a:71:4c:a9:48:e7:bf:42:
2a:9a:8f:5e:ae:38:5e:72:0f:df:d3:56:3a:b1:10:
c1:ba:d5:fe:e2:a3:b4:90:c3:d4:2f:41:a9:14:e7:
73:6c:92:24:b0:68:51:d9:8a:35:e9:2d:9f:ab:4e:
70:8f:25:f1:20:25:2f:f6:f3:ca:ee:ae:1e:3c:2a:
b4:dd:fb:83:df:cb:5d:80:ae:65:40:05:14:2e:fa:
6b:5b:db:4d:08:e5:03:59:1c:72:70:f5:ac:12:31:
c4:65:bd:96:9a:bf:00:fc:c0:85:5b:d9:cd:ce:57:
b6:e3:d5:e4:94:7b:98:90:c2:05:d9:aa:d3:5e:95:
bf:0b:05:61:4c:18:89:9c:3f:60:21:d2:ff:ba:98:
d4:45:55:58:85:67:a3:b1:5f:91:78:ed:24:81:44:
28:d7:0e:01:81:df:85:d4:01:7a:d7:1d:62:94:02:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:93:F6:77:7B:6E:53:C9:5A:91:12:ED:DF:17:D5:93:9E:44:AF
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f6:c3:a2:16:9b:84:49:50:d9:12:61:1a:1a:29:15:49:9c:
70:30:81:a7:bb:b1:ec:c3:c7:4a:88:00:18:9d:f1:13:4e:89:
86:26:27:22:de:26:57:94:b7:6f:4d:a4:7c:ad:f0:f4:d4:9d:
1b:d5:65:42:a2:59:86:af:62:ce:fc:f9:d5:93:25:18:5f:d6:
3e:f4:c0:ef:62:6e:f0:b6:2d:b7:6f:54:bd:bc:12:9a:2a:c2:
fe:01:cb:c4:1c:05:dc:56:d5:b4:66:58:0c:dc:a3:97:e7:67:
f7:77:02:ea:d3:1e:98:7f:20:84:f9:f9:e7:27:e9:5d:b1:6b:
d2:53:ae:91:53:ab:de:2c:c4:63:0a:62:77:9d:42:4a:f9:71:
fd:69:9d:d6:eb:1d:fe:29:43:50:46:fd:e9:ca:21:64:b8:04:
53:58:7b:3c:6d:f1:6c:9b:fc:d4:82:28:94:da:c1:c2:2f:48:
7f:23:21:5f:d6:b4:95:35:26:d0:f8:d9:ee:3d:97:eb:ca:4f:
59:56:57:c1:e9:2c:a0:d8:2d:1f:3f:b8:e2:83:dd:25:9a:0c:
95:96:e6:1f:e0:de:ab:88:82:a6:dd:0b:b9:22:e7:fb:d3:50:
d7:e7:ee:f0:82:20:5f:a8:8f:0b:92:76:15:a6:e7:31:fa:07:
71:94:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:37 2026 by rpki-client