Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: dOiIzYLj7jWxVvi0JoCH5GiTBNyB/nKiYaFTeUBPIZY=
Subject key identifier: A3:36:CE:E7:9F:59:FC:1E:91:AA:A5:27:E5:35:E3:74:0E:13:1B:69
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019D371B541D53E34917E24B24C4894B38B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0F1F
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: UPxXgDDbZa8RRXqgMpV0Qv9BA3PrxJ5lPZI03S2sxmM=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:54:1d:53:e3:49:17:e2:4b:24:c4:89:4b:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=a336cee79f59fc1e91aaa527e535e3740e131b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:2e:16:68:d5:b7:40:35:d2:f2:ba:8f:b7:
0a:ba:58:18:06:41:fe:0a:43:5e:82:e1:0c:a4:7f:
57:33:ea:f7:85:53:d3:0c:8f:9f:83:9d:5b:61:6e:
dc:99:5e:7c:c0:aa:d2:86:15:94:e7:c4:81:c6:97:
08:e6:88:09:3c:87:f0:2e:b5:84:58:c3:12:f5:5d:
8b:fd:6b:c7:8d:f4:b7:a6:8a:25:72:33:e8:56:99:
69:d5:8b:a4:52:1e:b2:ea:6b:98:83:77:81:52:2f:
1d:76:36:17:17:d2:6e:7a:c0:8d:d4:a2:4b:b4:f3:
22:3d:4a:46:de:e9:85:3e:47:48:9e:f0:5d:6a:97:
ed:ef:0a:ff:55:f4:43:92:c6:c9:97:db:1e:a8:ea:
35:ae:87:39:f2:0a:d9:f3:bb:1f:17:41:e9:6b:7b:
4b:09:0b:e5:d5:45:4e:12:5e:87:d9:cd:0d:bb:17:
66:eb:55:ea:33:24:73:2a:8a:30:76:4c:e6:fe:c8:
bb:9b:38:d5:2f:91:ee:9c:2b:09:27:2a:64:38:af:
9c:64:6b:e2:f4:19:35:c1:47:1f:83:d3:c5:de:7d:
c9:ee:65:21:0f:69:50:cc:67:07:26:41:5a:21:7b:
df:60:d7:ec:1f:17:af:6c:9e:ad:87:f0:f1:1b:cb:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:CE:E7:9F:59:FC:1E:91:AA:A5:27:E5:35:E3:74:0E:13:1B:69
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d1:10:67:8c:11:6d:e6:b1:70:47:15:ee:a5:80:25:04:11:
2a:26:70:2f:ea:92:90:46:56:52:63:f7:e5:be:e5:51:5f:2f:
01:1d:cf:e6:7d:d9:26:6c:40:92:87:1a:fc:fd:0b:07:8a:6e:
b6:46:f3:20:c6:ff:76:15:bd:60:95:62:e0:9c:d4:5d:b0:31:
59:51:6d:f9:bc:b5:58:c0:f7:bc:12:78:e2:74:ae:82:c1:aa:
25:ca:a5:f6:71:fd:41:f4:f2:9f:1a:ea:fb:e5:75:5f:ff:af:
63:c9:0f:91:a1:1d:fc:27:37:c3:f1:e9:95:47:27:15:e6:74:
23:77:1e:ca:13:71:1d:88:d7:8b:cd:68:8c:97:ee:f2:1e:80:
9e:e0:ce:5d:8b:35:ea:d2:06:60:12:16:c6:af:b7:f1:fa:a5:
cc:a1:f9:95:83:1c:ea:72:7e:c8:d8:a4:7f:f1:ca:0d:3e:fd:
e5:05:ed:02:b2:79:b0:21:83:5f:8c:56:87:59:59:87:3c:bd:
52:38:29:98:f8:1d:fc:28:ed:7b:2f:91:cf:7f:0d:25:4a:c9:
c5:54:e0:b0:51:b0:9d:54:ba:6f:d1:db:75:d8:c6:d7:03:62:
00:43:b6:5a:3e:62:fb:89:5c:a1:ca:90:16:0b:79:5b:15:f5:
dd:41:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client