Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier: kbg+kAZ2MiodlK0tqkNYaE8csHYRY/okax+RjEWxc0s=
Subject key identifier: 54:23:EE:B5:4F:A9:86:E3:E9:DA:BE:B5:5D:AF:E1:30:18:A7:2C:2B
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial: 019D2583C71D47AFA88C5387852ED0CBDD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number: 0628
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: +aZDpyX1NiCrwwPvgXqphZfsMkQZN4+K6RZNfeM+iP4=)
2: A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa (hash: kH/WTsSPnQpLKCHSGHr5NlR3/PpERnHd4RJbM4sqilM=)
3: Fv3FN4kr698bVDao3o9XOjr8Tz4.roa (hash: 6rB82aXUm+Tn4n4wm/0OKr0aMTrP2YtkhF371pF2g1s=)
4: eG9ktSTPi_rXKJ8zS7Jb6PQXGnc.roa (hash: QNLHJqr8ttA6xtAj36HlfXnNbTxSaTW1D7qSizduEGo=)
5: senb-C18gcGExQFrNYa_dSp5lQU.roa (hash: dHLGbFqeRIn/SGnKt0AOge5jG5f2ooeFK9x3p3nUrvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c7:1d:47:af:a8:8c:53:87:85:2e:d0:cb:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=5423eeb54fa986e3e9dabeb55dafe13018a72c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:c7:51:cc:95:b6:3c:61:f4:17:be:e4:7a:
81:2e:d2:36:0c:a2:b1:85:a9:4b:e8:85:75:2e:94:
fd:22:39:0e:7a:c5:58:bf:1f:fc:b5:9d:c2:79:18:
ab:6e:eb:bd:f3:e7:fb:4a:82:1c:d2:e3:a9:12:13:
d2:d9:3d:87:18:76:cf:27:c4:1f:63:7a:7b:a4:9f:
b4:67:30:05:6f:6e:0b:31:95:04:da:f2:db:bb:06:
c9:ea:f7:58:b3:7a:e9:73:84:a5:80:ae:8f:dd:57:
89:1b:31:6d:fa:41:a9:94:eb:20:40:50:cd:20:93:
1b:d0:dc:c7:ad:a2:d0:5a:1a:ea:28:49:e1:92:3a:
02:5d:9c:d4:3d:1f:4d:d0:b5:ef:af:f2:a6:05:17:
f5:92:bd:4d:96:c7:97:06:61:c1:06:da:66:eb:47:
f1:33:f8:ef:fb:61:d1:ca:43:6d:04:b6:07:33:85:
a4:32:b3:ee:78:38:7d:39:6e:de:79:e1:93:1a:92:
92:ee:95:b1:a6:c2:4a:00:10:13:61:ac:64:96:0b:
af:91:46:dd:6a:2f:0e:31:01:6d:c2:a6:5d:c3:d6:
01:6c:ef:4f:49:3b:0d:ca:c8:fd:40:a6:4e:16:f5:
e8:84:e0:c9:bd:f5:5e:ab:c4:02:70:e4:fc:62:2b:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:EE:B5:4F:A9:86:E3:E9:DA:BE:B5:5D:AF:E1:30:18:A7:2C:2B
X509v3 Authority Key Identifier:
keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:d9:7e:f8:59:38:70:88:7f:b4:86:4b:8d:4a:df:04:d0:
3d:1d:72:50:b6:10:fd:90:89:51:48:68:e2:13:7b:41:a3:0f:
b4:31:d7:da:82:bc:a2:2e:48:cc:b5:f4:e5:bf:d2:7c:8d:57:
08:b5:54:f3:b6:2f:1d:42:5c:95:1a:94:23:07:7d:16:b0:0b:
c2:44:38:32:22:af:a9:e3:fb:2a:c9:2d:ec:f3:85:23:88:b6:
4f:66:78:42:6c:4d:1d:47:3d:05:e0:3d:7b:b8:44:f6:f2:e6:
59:3a:73:78:2f:42:b0:b6:6f:2d:34:9f:d2:e5:03:d2:3f:81:
4d:a2:e0:c4:7a:b3:33:7d:b0:74:ed:78:a7:7e:61:d6:9a:2d:
b4:d0:9e:96:05:a5:b9:66:17:9e:1c:b6:c4:0b:25:93:2b:ee:
ed:2c:92:a0:19:b0:ee:94:6c:b7:99:53:8a:1b:e7:8f:3f:ad:
a8:59:63:fa:97:fc:a4:a1:b1:5b:df:fc:1a:e0:ac:bc:49:8a:
6b:45:3e:0e:dc:52:9d:d5:e3:6f:2b:67:06:e3:01:46:4b:54:
ce:70:be:74:fa:35:f3:81:2c:cc:e9:c9:84:2a:bf:e4:53:4a:
0e:7c:85:39:2b:ad:f3:06:77:aa:ce:48:6c:67:ea:2c:c8:e6:
4e:83:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:20:32 2026 by rpki-client