Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: S1eVO2uPfNj3S8NIwygO55Gj2Hlamx/uDoDRBrJiXCc=
Subject key identifier: 9D:C2:9C:97:27:B3:1D:13:D4:BF:E7:06:D4:43:F8:AF:A7:3B:2D:1C
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 019CEC6F455D262E3CD2BE902BA1DE091C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1870
Signing time: Sat 14 Mar 2026 13:00:40 +0000
Manifest this update: Sat 14 Mar 2026 13:00:40 +0000
Manifest next update: Sun 15 Mar 2026 13:00:40 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: Zg0KxT+Hv0sA0pgam84EmQ4S3nlW32Nckf1ODlorPOc=)
2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:45:5d:26:2e:3c:d2:be:90:2b:a1:de:09:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Mar 15 13:00:40 2026 GMT
Subject: CN=9dc29c9727b31d13d4bfe706d443f8afa73b2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:ff:cf:99:72:ae:b4:b7:f2:23:ae:2c:c9:
9d:22:38:9c:42:d7:ab:8f:63:38:0c:05:ec:13:77:
5a:cd:cb:13:1c:63:d8:eb:46:8a:ff:c1:ec:89:5c:
be:23:59:75:3c:c7:3a:0a:8d:6c:dc:25:37:be:9b:
bb:07:e4:e5:d2:05:93:ad:51:2d:36:02:04:0c:34:
89:f2:28:46:22:8e:65:2a:b0:87:bb:1e:3f:ac:24:
ee:7f:1c:07:91:ca:fd:d8:33:3a:9d:64:c7:77:38:
39:e8:31:c3:02:bd:9e:c9:b1:a4:ea:8a:3d:56:fa:
8f:06:37:1f:d7:b2:f5:2c:e4:de:9e:e9:7f:87:90:
14:dc:49:ea:d9:ac:7d:cd:70:55:0f:38:8e:7e:13:
f8:82:e9:b9:82:a5:45:cb:32:d1:74:c7:cb:1d:c8:
76:16:a8:2b:d9:4c:8a:62:b6:7a:24:1c:a1:71:dd:
00:ec:23:8f:2d:93:dd:49:5f:68:95:50:39:e4:a6:
2b:64:69:91:cc:79:1e:32:d5:f0:da:8f:8f:f6:84:
f5:dd:af:28:b8:fa:13:7a:7f:b2:cf:e6:05:11:ee:
e0:03:7d:9e:ef:fc:23:1f:d5:31:46:c5:1e:38:7d:
cd:85:2a:09:e7:93:41:f2:7a:a4:98:b0:a8:db:b5:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C2:9C:97:27:B3:1D:13:D4:BF:E7:06:D4:43:F8:AF:A7:3B:2D:1C
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fd:07:4c:f5:d4:e0:45:2f:bf:bd:ec:bf:dd:05:d7:89:be:
de:e6:18:bc:61:c4:82:14:ac:40:4f:6e:93:ae:63:65:e1:9c:
ff:f3:ff:e5:85:07:0a:37:9f:db:58:26:82:98:bb:0e:d7:b0:
73:c1:c7:aa:46:86:5c:f6:a0:ef:80:b2:09:23:2a:5e:ab:f5:
38:45:d9:db:f2:7e:dd:bd:1f:d3:63:d4:9f:2e:2c:f0:2c:df:
d7:c2:4b:2c:e3:42:e5:f2:e2:5d:b1:e6:5a:a0:18:7f:47:e2:
5b:79:04:6f:44:61:d4:70:21:0d:b6:a9:f2:4c:a8:05:bc:8a:
d2:1d:22:d1:41:5f:17:f1:af:1e:1c:a9:a2:7b:3a:8b:40:ab:
79:2b:40:e4:b2:8f:4b:5c:43:c2:2c:75:a7:8b:4a:6c:b4:3d:
49:10:2c:1f:93:f1:f2:7f:a5:eb:c2:5e:0f:04:39:cc:11:4a:
46:f5:cc:1a:79:bd:0a:5b:55:ad:23:81:88:24:c4:22:c2:bb:
c7:97:a0:c3:f8:aa:85:a8:52:fd:3d:e2:b1:3c:7c:72:e7:96:
4b:74:e1:6f:c7:c0:cf:f9:83:ef:8a:14:10:f4:a1:e9:be:51:
3d:b5:3f:19:47:b8:3b:ac:d5:3f:ba:ef:21:dd:b9:9b:e4:fc:
a8:f5:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 17:18:10 2026 by rpki-client