Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier: /bM6vKq5sLGjRveHcAKwKpGZoVIhfrv2HawsZqHI2ic=
Subject key identifier: D4:C3:2E:FB:1C:4E:A2:85:F4:CE:AB:48:DB:CA:EF:26:35:A6:CC:AF
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 019D37C1160AF893BC7F31E6A12B1B294DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: Tum+NqozWUui4aGjvQaysmWmcm/Svtctx/3ZLWyrXOA=)
2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:16:0a:f8:93:bc:7f:31:e6:a1:2b:1b:29:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=d4c32efb1c4ea285f4ceab48dbcaef2635a6ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:c5:22:8c:ba:66:fd:24:12:5e:33:97:77:
47:d7:df:2f:f4:8c:9a:0b:b1:aa:b8:a3:16:c7:14:
db:d2:f2:a1:1a:d1:56:8c:26:bb:6a:cc:5d:25:d1:
3d:c1:48:62:3b:5f:16:f1:38:4b:53:b7:d9:7d:ba:
d1:65:0c:f4:bd:9c:63:53:c1:57:ef:8a:af:ae:16:
3e:a6:f0:41:c6:f4:72:c7:2c:49:a9:34:a4:83:a0:
f2:0f:7e:3b:2d:61:1d:67:7f:73:23:27:ff:71:59:
3f:4c:cc:26:bf:c8:e0:a7:18:ac:91:83:dd:40:e0:
54:eb:99:0f:4b:8d:9a:73:c4:5c:3c:ae:f7:de:4f:
84:d7:f0:d4:a1:78:2f:cb:a5:89:73:7c:7b:12:80:
89:f9:f0:a2:17:7a:ef:1e:81:3d:ed:d1:d5:c3:8a:
02:86:07:6d:93:c6:85:0d:25:e4:62:99:14:e0:d7:
69:11:6a:f4:fe:4f:81:2f:46:49:47:dd:02:a5:92:
dc:b1:1e:2f:72:bc:53:3a:ce:c2:c0:20:04:4b:7a:
03:1f:ca:ab:77:21:03:47:a7:6b:79:5f:1b:c2:e4:
ce:88:68:18:90:d1:47:57:26:00:45:90:0b:a0:ca:
6d:bf:55:88:f1:a5:64:a8:0d:41:9f:56:50:53:1e:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:2E:FB:1C:4E:A2:85:F4:CE:AB:48:DB:CA:EF:26:35:A6:CC:AF
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c6:c9:09:1c:44:7d:59:f5:f8:cf:87:80:c9:6c:f3:51:12:
84:8c:40:58:02:10:23:24:8a:61:8f:9e:9b:51:6a:1c:92:85:
51:15:e3:ff:b0:a5:f4:5e:78:8f:73:d3:e0:7b:78:28:84:73:
5b:29:98:22:43:c7:c6:ad:49:14:19:7f:34:1d:c9:f7:d7:02:
9d:e6:db:bf:46:6f:80:a0:0c:5a:57:42:47:83:82:8f:cf:2f:
a2:4a:db:0f:ff:ba:d7:18:91:8e:bd:29:c7:bd:3c:7b:bc:d2:
af:d0:85:75:72:23:b9:aa:8e:45:3d:aa:6c:38:f6:9d:53:b2:
fb:20:ca:d1:5e:6a:80:02:af:42:ec:d4:d6:cb:8d:f7:7e:c7:
fe:d2:eb:15:52:13:c7:e4:ee:ca:b1:c7:7f:ba:8e:d3:97:98:
3b:e6:b5:99:f1:6f:5f:7f:0a:73:de:81:0f:05:f1:e9:b2:de:
12:82:a5:be:a6:28:73:ed:ea:a0:3a:56:fb:e5:ae:18:13:30:
b4:ac:15:5c:25:50:b0:07:c8:ab:5c:03:6e:71:ce:7f:52:1f:
39:1e:0b:b3:9f:3d:f0:9a:d3:a2:27:3d:a7:f8:c6:f0:fe:b8:
0c:34:d7:95:70:5e:8c:84:3b:c2:cc:50:ff:e5:b9:fe:bd:71:
2c:f5:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:39 2026 by rpki-client