Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: 8O/sjgFCGuzy0rtez2GFm9cJ/UHi5TqgsC6wz5Ow3P0=
Subject key identifier: 37:9A:6C:0D:18:06:A2:6E:E0:75:67:84:39:BE:00:A4:71:A5:A2:2D
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 019D37F6E6B531C4CD21839CA2B14FD93C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: GRlLHme2CfPfs3GPBYXFKBQBw/80E0BakyYFTG042bI=)
2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e6:b5:31:c4:cd:21:83:9c:a2:b1:4f:d9:3c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=379a6c0d1806a26ee075678439be00a471a5a22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:0e:9a:d4:c8:4c:8f:5d:e8:9e:b6:eb:02:
55:20:02:78:df:89:a2:ff:c7:9c:03:4c:af:da:98:
d8:45:f4:aa:e5:62:52:c1:2c:6e:b3:a0:6c:cd:0d:
24:46:f5:71:0c:30:72:86:2b:42:77:f1:48:07:d0:
97:d4:45:c2:aa:25:76:85:07:10:a7:c1:32:fa:8a:
e7:1e:a4:8b:d4:e8:81:cd:39:a2:fd:56:25:10:ed:
25:82:50:1a:fc:e4:66:ea:24:28:60:16:1e:ef:cf:
e6:9c:dc:04:84:c9:25:9f:6c:12:6a:74:7d:7b:8f:
b8:29:dc:81:a9:89:91:4d:b9:77:6f:6b:57:0f:be:
b1:2a:4e:10:09:78:f3:70:43:36:40:6e:51:49:a9:
22:75:fa:57:3f:a7:1c:3b:2d:78:be:0f:92:bb:a7:
e3:79:75:99:70:94:1d:4a:a3:e6:30:79:76:91:b8:
1d:b2:a2:7b:bf:df:63:71:a0:14:65:cd:94:11:df:
f7:aa:22:d3:2c:bf:be:72:84:6e:56:ba:43:7c:55:
7d:e2:cb:e2:6a:17:48:89:18:a4:10:de:6b:d2:02:
79:67:00:82:e2:06:9b:e1:96:db:cb:be:c4:85:86:
fb:e2:96:b2:8b:c6:60:cd:86:7c:67:28:78:3d:3f:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:6C:0D:18:06:A2:6E:E0:75:67:84:39:BE:00:A4:71:A5:A2:2D
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:d7:df:a8:ff:bf:17:64:94:97:78:f1:39:f8:4c:06:2c:
02:fb:b1:4a:81:9f:49:cd:45:98:54:36:77:d2:2a:dc:40:27:
b8:b2:50:56:15:6c:8f:ef:5f:db:3a:ad:01:20:27:79:58:5c:
db:4a:af:d7:63:3c:83:d5:4a:33:4e:10:84:e0:ec:b8:bd:37:
d0:3c:77:32:da:09:2b:4a:94:58:78:37:21:17:82:8a:cb:83:
a8:37:85:86:9f:80:b4:e2:9a:c1:b9:34:bb:68:ea:86:36:b4:
46:ab:61:87:ad:a7:60:85:8a:45:14:d8:31:53:39:5f:5a:8a:
9e:7c:91:7d:79:e1:79:ae:47:4e:2f:db:69:0f:e9:dd:f1:de:
e3:3f:22:d7:13:5d:82:35:c0:49:d3:8b:f8:4f:0b:79:3e:fe:
ef:3a:46:85:a2:73:b3:11:3a:23:f4:04:d3:b7:7f:97:79:75:
76:bc:e1:07:90:7f:e1:d2:10:69:24:75:cb:2c:24:5e:eb:c3:
a7:1a:28:81:b2:42:d5:3e:78:29:02:5c:3e:4a:78:f5:ff:1d:
a5:5c:8e:35:d6:08:15:73:9b:ef:7b:40:10:ef:00:aa:2a:be:
e7:ad:0f:c9:40:6d:3f:f7:e2:a9:0b:60:f1:8f:fe:6a:41:96:
28:71:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:51 2026 by rpki-client