Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: lt2pQoRPA7PCYz3C3XNk6ZsGRQ+9RCzJx7T0KYcfnhA=
Subject key identifier: D5:09:49:B9:E1:4C:2C:B9:5F:92:50:4E:18:78:8D:D8:D1:45:22:CA
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019D389BBD1DF9BF8AA2A309332F71919596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: 3kdasqcf68fcSUVZzM1CNXaOqMv9BL93NfWlnavINZc=)
2: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (hash: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8=)
3: oRqwFe3VNX-nfuj7iUR3S7koSy0.roa (hash: qiTN878gqiER6fqTmD5j2cm3Ln1rDVHVTApMOMHVgtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bd:1d:f9:bf:8a:a2:a3:09:33:2f:71:91:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=d50949b9e14c2cb95f92504e18788dd8d14522ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:a0:17:83:4b:e5:f7:01:c8:ef:71:f4:07:
9c:0b:eb:24:32:1d:48:9f:87:38:6a:5b:f4:25:79:
26:d7:ff:ff:5f:a4:17:c6:b3:a8:9f:02:f6:78:f3:
da:42:cf:7a:be:07:0a:6c:4e:12:3a:5c:ae:87:ca:
81:94:07:49:93:ab:d8:2a:4b:c6:c2:64:7a:4b:bd:
a1:09:6f:d2:0c:dc:a5:72:a6:95:8b:2a:4d:ea:aa:
95:e0:49:8a:2b:51:05:c8:65:63:c4:a1:33:88:1d:
6f:9a:ad:df:cf:d6:10:31:3a:35:7d:ce:d9:c8:80:
55:ac:aa:34:83:57:c1:04:81:ca:5e:cd:35:65:63:
c1:a5:db:51:c7:d2:45:39:f2:e2:91:eb:c5:d0:ff:
ae:65:c9:a8:d2:06:84:72:4f:b7:e2:8d:b0:6a:47:
2c:9f:6f:da:7e:e0:62:4b:25:e3:db:ec:47:18:52:
1d:33:44:7f:e5:77:0d:e1:2f:01:cd:fa:c7:99:4c:
48:88:12:bc:d3:79:05:83:fd:29:78:82:c9:f5:77:
09:3d:5b:9b:48:9b:d4:06:d7:af:7b:ba:57:a0:7a:
82:c2:ad:84:57:7b:09:4e:97:d1:b8:3f:02:46:e9:
85:8d:63:ee:10:4f:94:89:78:e5:e0:e8:3c:6d:f8:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:49:B9:E1:4C:2C:B9:5F:92:50:4E:18:78:8D:D8:D1:45:22:CA
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ed:87:0c:3f:7b:b4:45:2a:38:68:9a:a9:84:db:34:0e:f6:
9e:97:bc:6a:91:d6:ae:03:ed:e6:8a:ae:b8:29:26:2c:73:79:
ac:b6:68:3f:5f:44:49:24:fb:70:57:f2:8e:12:ed:ed:9c:cb:
e4:3e:7b:ff:0c:14:e9:c4:37:94:08:c9:a6:66:59:dd:0b:73:
36:20:15:92:5f:aa:a4:7f:b7:e1:7a:5b:eb:e0:8a:33:6a:71:
cd:de:29:86:7e:54:2f:ad:b7:8a:c6:29:2e:27:f6:41:eb:02:
41:d2:11:e9:77:50:6b:3a:a1:04:9a:48:11:e0:49:e8:bd:b4:
57:2f:7a:d5:ff:dc:d2:7a:27:e4:e4:e7:a2:66:cb:45:05:35:
ce:94:e2:41:d9:89:2e:03:c6:84:05:73:4b:b3:0d:26:22:f0:
dd:47:ce:f1:a8:2a:37:34:16:91:b9:e9:20:7d:c6:a9:aa:57:
f9:1a:4a:5c:b3:a4:a9:45:63:24:77:2e:54:04:b4:91:0f:8b:
e9:e2:93:0c:b7:2c:97:bf:55:9b:9e:6c:59:ec:82:4c:7e:fc:
3a:f9:2e:28:08:5e:72:61:f5:d3:01:81:39:94:ee:81:24:f5:
48:a8:82:82:e8:71:f6:8b:db:59:eb:74:c4:f2:f2:98:98:73:
63:55:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:51 2026 by rpki-client