Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: pMRD4URLJycJPQ5qNWNiMzbGAyl/0whz9QN/LBwXQ6E=
Subject key identifier: A4:A1:14:C3:75:2C:90:22:EF:3E:88:3C:CA:66:29:55:63:B7:6E:AF
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019D3A8AFB1B16DF1EC1DC24B2BE8112DED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0850
Signing time: Sun 29 Mar 2026 17:01:19 +0000
Manifest this update: Sun 29 Mar 2026 17:01:19 +0000
Manifest next update: Mon 30 Mar 2026 17:01:19 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: ptcAk6NO1PsnSevnDAkDfd3p+lrUWWeISt/wlDgzenI=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:fb:1b:16:df:1e:c1:dc:24:b2:be:81:12:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Mar 29 17:01:19 2026 GMT
Not After : Mar 30 17:01:19 2026 GMT
Subject: CN=a4a114c3752c9022ef3e883cca66295563b76eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:d6:60:9c:1b:21:4d:dd:c9:25:01:2b:fc:
0d:30:86:c1:ba:11:d0:67:47:3d:0b:f0:3a:45:f1:
84:bb:15:cb:7c:64:6d:81:e9:e3:4e:04:f3:11:9a:
bc:f8:77:eb:d3:6d:a5:6d:d1:eb:da:fe:92:e1:a7:
7c:29:50:02:de:13:fc:02:59:0c:9c:68:a9:43:e8:
eb:cb:91:69:b3:85:e2:ee:bc:ae:7f:79:46:13:30:
e0:56:cc:47:d8:cb:ef:74:a2:ed:aa:92:77:22:bd:
3e:c1:03:a0:ca:45:e3:33:b7:e4:f2:20:c6:52:79:
58:2c:31:be:72:d7:ec:99:2a:8c:9e:9a:56:3c:5d:
5e:fa:69:b1:b5:9b:a1:a0:50:c8:89:c4:7b:3a:18:
12:1b:4a:97:fb:ed:15:e7:0f:b3:c4:b5:37:2b:a7:
60:a2:74:80:16:05:91:de:30:10:cb:bd:42:40:b8:
5d:3f:ad:68:4f:85:44:9d:9e:ca:3c:52:36:d4:f8:
44:92:dd:39:f7:79:ab:80:86:45:18:54:b5:7f:07:
12:61:70:62:db:43:f3:5c:80:1f:48:47:44:f1:e0:
72:36:61:20:73:87:a5:aa:a0:3d:20:c9:ba:95:26:
0e:3f:95:1e:37:f6:fa:56:a6:bc:2b:2e:fa:d3:3d:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:14:C3:75:2C:90:22:EF:3E:88:3C:CA:66:29:55:63:B7:6E:AF
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a9:0b:64:d9:b5:cd:bd:34:54:6c:5d:ab:62:75:0f:dc:a9:
11:b0:b2:d9:2c:9a:87:70:12:8f:66:4e:0d:71:0d:84:c9:2e:
58:a9:60:ab:39:58:96:7a:48:4a:be:fb:e9:7c:41:09:9c:4d:
71:e8:60:cc:5e:3b:86:d3:c8:e8:f4:e2:d6:42:a8:b9:74:82:
9d:02:ea:ec:d8:4a:47:d0:16:7d:0f:21:fa:0c:91:15:a8:e1:
17:76:19:d2:4a:45:c5:a5:f6:6f:f8:82:2d:eb:f5:ed:08:b9:
35:20:cf:ba:46:37:6a:db:80:c3:54:e9:ad:f4:d8:a2:65:d3:
88:1f:c0:de:bd:9e:13:57:c1:55:ad:f9:1e:47:cc:ac:11:b4:
87:7b:97:9b:57:58:86:40:18:5e:ae:ce:cd:3d:6c:f3:bd:1b:
21:6a:38:24:57:1b:66:57:9f:b3:b0:f8:bd:36:be:99:11:b7:
17:0a:5b:1c:0f:d9:2a:85:9e:92:0f:a0:48:9d:1d:8f:9d:78:
c6:3a:91:5e:5d:ce:0b:a2:12:84:f0:16:9c:72:e3:fe:ec:a7:
62:52:c1:50:67:99:2e:12:22:0f:33:61:03:83:69:71:a8:b3:
61:2b:88:32:94:a8:68:1e:c4:ea:a9:81:b8:52:55:15:11:66:
e8:84:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:31 2026 by rpki-client