Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: 1DxBK/s6QXFLbPW4gPdd+H6lshF9Vy47zlo0+i8Sh+k=
Subject key identifier: 28:69:54:CA:4F:5A:34:54:34:BA:57:B2:2D:7B:5D:FC:2B:8B:E5:E4
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019D37C13F47036C6888F748A5A83865F9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 03D3
Signing time: Sun 29 Mar 2026 04:01:44 +0000
Manifest this update: Sun 29 Mar 2026 04:01:44 +0000
Manifest next update: Mon 30 Mar 2026 04:01:44 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: 06/4G2mHv66rs11+mjVGWLVC7tComO89OxdTJ30E3dU=)
2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:3f:47:03:6c:68:88:f7:48:a5:a8:38:65:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Mar 29 04:01:44 2026 GMT
Not After : Mar 30 04:01:44 2026 GMT
Subject: CN=286954ca4f5a345434ba57b22d7b5dfc2b8be5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:5b:f1:48:e9:4a:a3:02:a0:29:03:9e:73:
a5:d4:e6:d7:0d:28:f6:8e:ff:20:1e:dc:f3:45:e3:
7a:af:e9:77:57:93:cd:57:65:9f:36:65:28:85:94:
33:55:6f:7a:73:47:5a:e7:2f:95:16:1e:3e:2e:4c:
10:5d:90:5b:be:16:dc:b1:99:4a:e3:b4:dc:da:f2:
fd:f0:59:88:71:f7:7f:4a:4b:d8:69:54:47:e2:27:
04:0b:3c:b3:ff:fd:c5:2b:c1:b5:cd:22:66:d5:18:
e4:14:02:a0:12:33:80:d1:ca:d0:1c:af:8d:ae:1f:
fb:92:49:1a:db:12:6d:a9:7f:2f:cc:72:ce:3a:76:
52:bd:32:6a:22:d4:7d:fa:c0:e1:14:71:a7:4d:6b:
1e:b2:77:76:4f:62:70:6e:a0:c4:16:e0:35:c8:31:
b4:81:05:c4:6f:51:19:9d:95:1a:57:42:ef:6d:76:
98:96:fb:e5:64:f8:41:d5:d0:96:c5:cc:4f:cd:51:
78:ce:2d:3a:bc:18:07:31:18:df:d1:ee:75:5d:31:
1e:b9:77:dc:a4:59:a0:e8:9e:7d:84:4a:0c:bf:0a:
16:65:c6:fc:af:4a:bf:18:2b:65:58:4c:7e:7d:b0:
ec:c3:15:f6:9b:06:43:55:af:49:e3:8c:7d:e7:5b:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:54:CA:4F:5A:34:54:34:BA:57:B2:2D:7B:5D:FC:2B:8B:E5:E4
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:0d:b8:91:62:f4:ce:f0:a1:c2:23:f9:7c:68:18:b6:8f:
97:5d:b0:e9:50:59:1e:85:d2:d0:30:f6:6d:8b:8c:36:aa:5c:
32:4f:dd:0a:0a:8d:95:7f:6a:a0:08:c2:05:95:06:55:55:4b:
b3:aa:01:8b:50:c8:46:a0:47:c7:9c:95:36:d6:19:5e:9a:df:
83:e3:5e:38:c3:a4:5e:06:78:76:a8:7c:2f:33:57:1e:4a:52:
52:83:f5:af:32:b4:3c:40:bb:c1:77:aa:17:b1:ca:57:e1:7f:
a8:c0:91:70:9a:c4:eb:03:66:42:c9:a1:66:e6:62:b0:9f:d6:
56:f6:72:88:7f:5b:c8:70:96:d6:ad:dc:ed:f0:c0:cf:2f:db:
c4:1e:9d:aa:eb:70:51:07:e7:61:ed:11:2e:d6:46:80:82:de:
1b:e3:ac:9d:be:74:74:0a:ad:fd:d4:77:4b:11:29:94:ef:42:
c6:4d:b5:9a:eb:23:73:31:dc:3d:85:0e:ce:8f:5d:b8:4c:c7:
85:b6:9e:3d:09:c1:9b:7d:c0:71:f8:e1:d3:0b:25:7e:28:30:
7d:21:5f:40:65:d5:32:bd:8b:37:20:c4:bc:45:be:22:69:69:
89:00:32:82:74:14:bd:ef:5b:4e:56:22:e3:27:38:cd:5f:a8:
f8:f0:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:45 2026 by rpki-client