Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: RUZNcACy0cwNQSbxCO5/cDOZwChTiU5oLmzdoNHrfzo=
Subject key identifier: FF:4D:E4:BE:AC:92:AF:A1:C3:35:EB:94:72:CE:15:D4:66:F2:28:A8
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019D375258ECC88C95797B6235164F640C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: rt6gU1exnVzLBKt9TKkR2DhKFpZIbrPumWym8bpgEx4=)
2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:58:ec:c8:8c:95:79:7b:62:35:16:4f:64:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=ff4de4beac92afa1c335eb9472ce15d466f228a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:2a:e1:96:0a:74:e6:ad:58:95:b1:92:57:
39:e5:22:b0:5b:69:ec:4a:89:16:93:8c:a4:05:cd:
64:de:49:d9:6c:df:5a:fa:ed:0d:11:9f:06:aa:98:
8e:fe:e8:97:62:d4:c3:43:ce:9b:f4:88:77:d4:f4:
b2:ae:23:4f:c2:8d:a7:f7:ec:d8:3d:f2:f2:19:3b:
ad:84:98:c1:34:a5:dc:39:20:fb:0a:ac:80:14:10:
38:fb:fa:4f:33:51:ef:48:67:ad:d3:89:1c:31:d1:
1d:6f:6a:5f:f8:09:3d:45:1a:a3:a0:c8:8d:62:cc:
c5:32:ad:06:4b:1f:9f:4a:00:79:8f:d6:30:13:ff:
8b:1e:63:23:2d:f8:61:b9:c3:22:94:ce:27:db:58:
1c:c3:94:93:f5:72:0d:1e:29:ae:69:89:05:85:49:
14:9f:3d:12:26:7c:52:51:a3:4a:22:29:34:6b:8e:
f0:be:e0:8b:3b:ff:20:88:87:3d:2e:9a:d4:66:c3:
bf:7f:a4:24:cc:72:fd:bb:b0:0f:a2:4f:97:ba:fe:
15:0f:ff:97:8b:b0:85:47:34:c6:48:77:a0:aa:22:
0c:97:0d:7b:c5:e4:37:11:dc:02:c5:11:4a:4c:79:
54:8f:d3:e8:4b:b4:8e:c5:d1:b5:3c:df:ba:56:35:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4D:E4:BE:AC:92:AF:A1:C3:35:EB:94:72:CE:15:D4:66:F2:28:A8
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:67:26:ac:76:19:ef:66:61:6f:c8:2b:82:44:dd:ee:fd:
ad:50:ee:56:b8:37:15:ab:b3:94:82:bb:d6:26:cc:87:d0:9a:
1c:a8:31:c2:50:82:d3:c3:97:53:c7:a1:0c:0e:f7:89:9f:2a:
3c:d4:76:bd:a1:94:ae:a7:59:50:fe:b5:7e:85:9f:a5:0c:cb:
a0:51:9d:0b:2f:1e:6c:07:6e:a7:76:5d:a4:5b:99:84:12:41:
1f:56:b8:0e:e3:ab:e7:96:b7:21:f3:cb:c4:fa:bb:69:5d:1d:
0c:42:0a:27:81:7c:12:8d:9d:86:b6:be:8a:2d:fc:26:98:43:
65:ce:1a:1a:bd:6f:5c:7a:3b:20:56:d9:89:07:a2:4f:87:54:
a5:9c:7c:e3:6b:ec:f2:71:cf:fc:7b:8f:9d:83:72:f1:97:bd:
e9:49:ce:74:cd:26:cf:d1:5b:0f:0b:ba:6c:bf:e5:c7:1f:18:
bc:cd:f8:c0:ef:7a:c6:3b:58:0a:09:8c:7c:3a:46:bd:f3:91:
a8:da:25:b5:ae:17:c5:b9:94:52:5a:fd:ca:4c:f2:96:9d:48:
17:4c:3d:0d:1e:c6:d2:0c:2c:ed:a2:f9:f6:9a:b5:74:fe:7b:
30:ca:f7:e7:13:05:3b:4a:d0:d6:48:68:25:66:d2:3b:5c:54:
e8:ae:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:50 2026 by rpki-client