Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: GloIZuLP/Pe0rJLDivyaZ70GXsq2w64rrpu9NdgiG5M=
Subject key identifier: C3:1A:89:3F:04:92:78:60:76:5B:91:10:B5:CD:3B:5C:44:2F:50:A2
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019D37C0306CFE24C7C6B4476AE8582E31E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 15DC
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: O+bm6PeWcHA7PeRDbVpcHbsbSgIf2nlZerqBzQSBTC4=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:30:6c:fe:24:c7:c6:b4:47:6a:e8:58:2e:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=c31a893f04927860765b9110b5cd3b5c442f50a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:0f:dc:9c:b6:b3:52:2e:ca:a0:05:a0:d3:
fb:c8:a8:2d:c9:7a:ce:8a:36:7f:3f:56:66:5c:73:
1c:ef:18:57:41:d5:c1:71:60:01:08:98:b9:34:61:
f5:a6:79:ce:7f:0b:f1:e0:99:77:f6:46:27:4f:cc:
90:7e:09:03:c7:96:dc:b5:96:3a:62:cd:6a:05:7e:
4f:2f:f0:06:99:7f:a3:11:b6:40:14:2d:d8:7b:ec:
55:d4:46:70:74:ce:84:06:f3:16:38:ba:1d:c8:69:
c1:91:0c:92:ef:5b:b1:41:7f:b1:84:59:2d:45:ad:
94:8d:3c:0a:1e:55:8b:b8:fb:1f:2f:15:62:0c:b7:
b9:ae:47:e7:e3:37:5c:a3:a1:e6:96:c4:a0:9e:72:
bf:5d:6d:45:c4:c9:d6:32:fc:3d:2c:c5:dc:e3:9a:
04:d2:53:75:c8:5e:da:c1:46:e8:b4:3d:05:ba:80:
a4:46:81:c1:06:dc:d1:4e:1a:9c:29:16:b9:d0:44:
f8:f4:47:08:c9:03:95:82:b4:c4:fc:d8:e4:c7:2a:
77:db:9c:48:4a:fc:41:1c:a8:f3:c0:82:f0:6d:59:
57:fb:c3:f0:6b:02:d3:6d:be:28:f0:7e:26:75:f0:
0e:2f:bc:9f:f8:91:c2:5a:21:f2:89:14:a9:d3:54:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1A:89:3F:04:92:78:60:76:5B:91:10:B5:CD:3B:5C:44:2F:50:A2
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:42:3c:18:5d:c1:d4:cd:27:01:26:da:24:11:f1:6b:65:bf:
4f:f9:5a:5f:2c:d3:48:68:b7:66:a0:c4:af:d2:c9:ac:d7:ad:
c2:4e:61:59:fe:99:f3:eb:32:ec:93:a5:5e:90:eb:d7:4e:60:
d4:81:13:4d:b5:7d:6f:a1:d7:f1:a8:e4:7e:1f:b2:23:c1:3d:
f2:5b:75:21:5e:d8:d4:f4:93:69:5e:e5:3c:f9:41:28:d3:e6:
69:55:71:1d:04:fa:9a:58:bd:be:d4:ba:5a:90:f9:e1:d5:2d:
5f:69:09:71:61:42:95:07:f4:34:05:52:b2:a2:ca:95:e1:93:
b7:02:ae:eb:ff:92:2b:09:01:a7:0f:a5:66:4f:92:fe:2f:ce:
44:da:a4:ef:73:2b:13:e3:27:ac:0e:2a:3c:65:46:56:df:57:
c9:16:54:5d:dd:6f:68:86:50:d4:6a:0a:6b:6c:c3:7d:76:f9:
50:35:4b:ca:02:94:41:d5:18:ec:9c:e3:d0:88:1b:74:53:05:
3c:14:f5:c0:99:f7:05:bf:dd:0f:5f:de:25:62:7b:02:c7:e8:
23:b5:b8:d6:0d:8b:3a:3e:dd:db:da:7a:d1:5e:41:ac:ce:1f:
0e:af:5e:b4:26:cb:cd:ec:2c:15:09:39:5e:b4:4a:07:e3:fa:
85:d5:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:07 2026 by rpki-client