Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: mnCz1AzupgE4QL0S/RrCm3u5tzJEqMt1tH/5MmotTps=
Subject key identifier: B1:25:2F:FF:B1:82:BD:46:29:C5:EC:0F:12:F7:CE:44:80:3F:19:57
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019D390A147A9E8AC940E257EC7AF3E220B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 051B
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: H4BwfnwnuTnEsfla0xMtQxwXzUgpgxNoAqyBxlW/lYY=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:14:7a:9e:8a:c9:40:e2:57:ec:7a:f3:e2:20:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=b1252fffb182bd4629c5ec0f12f7ce44803f1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:ff:f3:ef:94:18:5a:c7:85:46:47:0a:82:
53:9e:3c:03:b7:83:93:09:2f:9f:4e:1f:c1:43:32:
94:5d:f3:a3:ad:60:23:7e:90:90:6f:18:c5:07:1d:
a7:e3:67:99:9d:ba:1d:27:24:4a:2b:29:87:45:2a:
8e:79:af:a2:c1:a1:42:69:de:50:93:45:35:7a:00:
a3:f0:58:39:de:1f:bd:9b:bb:5f:28:e1:4f:8f:2d:
07:0b:e9:dd:ab:ab:a0:e8:ce:c9:06:4a:96:e8:d5:
91:85:0c:15:9e:d2:4b:04:57:ce:b0:94:f8:61:ea:
5f:65:e6:fc:5e:9f:0c:7c:50:2d:85:aa:04:98:60:
88:33:10:ea:ea:28:c2:c0:10:f0:7a:67:3e:fc:d2:
12:c7:71:05:06:d5:36:bd:3a:41:64:35:fa:c9:16:
81:bb:c0:d3:fe:6d:b3:68:6f:48:19:52:f0:4c:3d:
18:a8:5f:86:8a:2e:40:d5:00:ac:c3:0b:9a:f2:01:
1e:53:b6:37:eb:03:58:98:ed:84:47:2b:d6:20:47:
ee:a2:3b:f2:dc:c7:eb:31:92:c1:40:5b:c4:87:12:
b6:aa:6f:4d:7b:1d:88:96:5d:75:c4:1a:d3:2c:b9:
69:61:e1:41:0d:63:9d:e4:22:2d:cb:74:b4:cf:ce:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:2F:FF:B1:82:BD:46:29:C5:EC:0F:12:F7:CE:44:80:3F:19:57
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:4c:0b:e0:50:35:7d:40:42:fe:6b:76:cb:f7:e4:90:82:
9e:c7:dd:7b:ff:14:57:11:ee:4b:e0:3a:d0:b9:43:f8:e0:5e:
51:6c:67:5e:9d:35:08:12:a4:57:2a:8e:5b:df:84:51:31:91:
36:50:66:ab:46:5a:84:49:dd:0f:8e:45:1b:11:ee:e5:8c:76:
1a:40:30:44:92:84:12:2b:c5:c9:97:df:d4:34:66:d0:03:03:
a7:4e:8c:0f:06:2d:66:05:f0:99:e9:22:02:7d:a0:12:04:2a:
ca:25:d5:0a:c2:bd:56:1a:d5:d5:91:2f:c7:0e:7c:17:d3:0c:
a7:86:ff:f5:72:bb:68:79:0a:e0:63:64:95:d6:67:8c:73:6e:
3b:a0:3b:2f:34:71:2c:b5:76:8b:7d:c3:e0:30:96:0e:2f:56:
a5:72:cb:23:10:2c:db:06:21:6d:89:b8:57:b0:6f:3b:29:18:
fe:29:f7:69:ee:14:51:a5:1c:72:f5:7f:57:3c:63:00:1e:19:
e9:94:87:0e:4e:1f:b3:c4:d3:d7:d0:86:cd:b6:6a:d9:49:1b:
37:de:46:88:0d:5d:3f:80:72:08:81:b4:83:d7:ac:dc:1c:68:
0d:d8:e8:ce:71:55:0b:1a:8a:c7:30:e0:fe:8d:d8:f3:11:5f:
7e:33:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:24 2026 by rpki-client