Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: UWqjRCaQcjumEP+H4nCGu/HkeNiujkk2y+1+a0gAjdA=
Subject key identifier: 26:DA:0C:40:AC:53:5F:FE:0C:50:C7:97:C6:0E:1D:2C:75:FD:8E:08
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 019D3A54A0D802F6C26ACD143709F57CAA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0DD6
Signing time: Sun 29 Mar 2026 16:01:57 +0000
Manifest this update: Sun 29 Mar 2026 16:01:57 +0000
Manifest next update: Mon 30 Mar 2026 16:01:57 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: s/VMk6xmEgoGufq7qqa4swgtixCipueL4wHmzpqmxlY=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a0:d8:02:f6:c2:6a:cd:14:37:09:f5:7c:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Mar 29 16:01:57 2026 GMT
Not After : Mar 30 16:01:57 2026 GMT
Subject: CN=26da0c40ac535ffe0c50c797c60e1d2c75fd8e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:1c:40:27:f2:73:89:87:58:6e:55:2c:89:
71:a0:1c:ac:24:c3:16:67:3b:0a:49:dc:f1:e2:f9:
bd:71:17:f7:cb:5a:d2:b8:cf:23:ff:72:fc:ee:db:
b3:6e:59:f2:73:3b:53:c0:e2:16:a9:b8:c5:f7:5b:
87:1a:c0:36:ae:c1:1c:ae:e0:f0:a3:71:c4:bf:d1:
dd:2e:9f:b3:87:95:56:3d:63:5f:12:ce:52:95:e5:
f0:92:6b:fe:f1:a5:f0:1e:e4:f8:14:50:01:9d:9a:
4d:f4:65:a5:93:da:50:94:b4:50:e8:41:82:7b:77:
c9:a2:bb:c1:77:22:be:a1:fa:76:7e:0f:bf:ee:71:
e1:72:77:96:64:35:22:9a:1e:69:30:82:b3:29:f9:
0a:01:b9:41:48:95:72:81:e7:02:e2:a3:9d:d1:ab:
40:e3:2e:4b:1b:40:96:db:2b:25:cf:57:af:8c:08:
83:93:3b:10:5c:4e:75:ef:20:93:63:0e:c0:59:6b:
3c:14:9b:03:66:38:e9:89:a4:c7:40:3b:b3:df:c2:
b6:52:2c:8a:59:55:71:3a:09:5b:57:d4:de:90:9c:
aa:43:a7:27:b9:2f:61:91:ba:77:c1:16:f4:8e:2e:
02:5c:5f:07:a9:4f:48:01:cc:c8:a1:19:ad:e8:92:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:0C:40:AC:53:5F:FE:0C:50:C7:97:C6:0E:1D:2C:75:FD:8E:08
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6b:33:60:af:49:0b:e0:b1:79:92:c1:d6:19:b9:18:c7:b6:
4f:4f:44:60:b8:8a:80:f3:3e:0c:1b:33:27:88:b8:54:24:91:
91:90:8d:fb:e5:d8:f1:58:5d:66:02:32:71:c2:73:02:8c:4a:
8e:ea:d2:93:3f:44:e9:c6:ab:9b:2b:3c:2f:5f:98:49:c5:44:
4a:19:07:c5:10:a2:74:b9:78:ee:68:1f:b9:ff:91:a8:43:ef:
23:e5:f2:e0:9a:a2:75:4f:b1:11:e8:63:c0:5e:29:91:33:25:
00:17:31:35:76:c2:f4:49:0b:b9:d9:9e:97:b6:7f:42:63:2b:
e9:18:5a:35:ee:5f:e3:43:f4:98:51:c7:c3:d8:d4:e0:bd:d1:
2c:d5:85:16:8c:c9:9a:fb:18:f3:b3:e6:79:74:84:e3:0f:23:
ac:e2:59:f9:80:66:69:50:22:eb:b7:2b:b2:01:ca:fd:67:43:
37:28:9b:11:1a:d3:d2:d3:b1:1b:c9:6d:2c:3e:2e:06:23:0b:
d5:27:48:64:6b:cc:5a:a7:2b:70:85:cd:f4:f3:d3:9f:8a:da:
86:38:df:af:23:10:97:de:2f:e2:cd:8e:c2:37:c2:54:69:ad:
6e:dc:6c:0f:32:d7:1f:fa:78:21:3d:c7:20:78:ec:aa:33:f6:
a4:03:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:05 2026 by rpki-client