Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: b9PgsuX9Oan70cQ2Gt/W4PyLcYRDStZiboSK8IglMZ4=
Subject key identifier: 0C:0D:AC:B6:06:0D:66:4F:0F:4D:CF:C1:1D:A1:BB:36:35:C8:41:40
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019D39778FF893BE7E67BCF03A3265A4464A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 12:00:30 +0000
Manifest this update: Sun 29 Mar 2026 12:00:30 +0000
Manifest next update: Mon 30 Mar 2026 12:00:30 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: TohJVUMWVzH6cruKVOfABRXn1RXUWl2oCNa+xnHgSAA=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8f:f8:93:be:7e:67:bc:f0:3a:32:65:a4:46:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Mar 29 12:00:30 2026 GMT
Not After : Mar 30 12:00:30 2026 GMT
Subject: CN=0c0dacb6060d664f0f4dcfc11da1bb3635c84140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:9d:ad:62:2f:15:71:b3:7c:44:a1:fb:c5:
41:36:98:57:68:8b:6e:58:a7:28:5c:ca:e6:0f:da:
47:ba:b6:5e:22:bb:75:36:35:f7:4e:f5:81:7d:7c:
65:cb:18:b2:cd:17:c9:80:6a:ff:7f:3e:28:c7:db:
07:42:ef:ad:30:4b:e0:7c:aa:b2:30:ea:00:96:8b:
3c:ad:f9:35:c5:b9:19:c4:51:73:99:c4:aa:bb:0e:
4e:8f:0e:51:d6:22:33:17:f6:2c:0a:e8:b1:50:94:
53:28:98:e2:dd:cd:22:a9:e2:74:2f:7a:52:6d:94:
2d:9e:4f:cf:4c:31:95:75:74:af:32:b1:07:4a:5a:
be:3e:a2:42:38:d7:22:43:17:b4:93:95:4b:6f:ef:
6d:d7:a7:f6:2d:05:77:9a:ec:df:76:63:50:24:b4:
8c:9c:10:62:7e:2c:2f:6d:9b:c3:84:06:8d:b2:fd:
cb:4d:d1:c4:25:a6:6a:60:31:4c:7b:52:4b:7b:09:
0e:17:8a:75:6c:ca:d5:0a:da:50:f7:3e:ca:8a:0c:
ae:8d:ff:24:3f:f2:22:a7:28:36:c3:44:87:7d:83:
6f:f7:c4:6b:e8:84:e1:b9:78:51:ea:15:01:5c:b8:
c6:92:9d:7c:ca:6f:90:07:7e:b3:0a:16:02:b5:ef:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:AC:B6:06:0D:66:4F:0F:4D:CF:C1:1D:A1:BB:36:35:C8:41:40
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4c:3c:11:ad:d7:89:b9:3c:14:5e:ca:eb:fb:09:21:77:a4:
70:99:b2:e0:5f:61:45:88:c3:ac:9b:ea:ff:20:40:e8:b6:df:
db:e0:e7:dd:0c:07:c2:53:f4:b9:e3:02:c4:ae:49:54:29:af:
c2:aa:73:ff:34:a7:b6:f9:a4:e8:ad:04:d1:03:60:79:32:d2:
50:fe:fd:fb:db:84:ac:66:09:f7:9a:c9:16:ab:cd:25:02:a3:
36:5c:0b:ec:33:87:b7:53:5e:c5:ef:ed:a4:32:d0:61:52:a5:
bc:a2:d3:cc:eb:06:79:66:c5:62:06:8b:32:92:4c:a9:ec:06:
95:39:78:be:78:ff:91:5b:89:f3:6b:12:d1:e8:8a:00:f2:36:
84:46:b6:e3:52:6e:eb:ec:06:c2:a4:1f:8c:f9:a8:0e:39:2f:
f4:0d:8b:c2:4b:59:2e:c1:ae:4e:c7:40:20:7d:9a:f1:0b:ff:
4b:e1:93:c9:19:a0:86:d4:af:de:a5:e8:ed:32:93:25:eb:c8:
0c:d4:7e:38:c9:95:da:e8:de:f0:c3:38:fc:94:d2:81:5a:a1:
d5:31:85:ac:f6:c8:ef:55:f1:58:6c:f9:f6:75:e6:02:ee:d2:
d2:07:56:be:1f:d0:4d:a7:6a:13:0a:7d:a9:09:75:43:35:3a:
97:38:a2:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4/4k75+Z7zwOjJlpEZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4
NmRmZDAwHhcNMjYwMzI5MTIwMDMwWhcNMjYwMzMwMTIwMDMwWjAzMTEwLwYDVQQD
EygwYzBkYWNiNjA2MGQ2NjRmMGY0ZGNmYzExZGExYmIzNjM1Yzg0MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdudrWIvFXGzfESh+8VBNphXaItu
WKcoXMrmD9pHurZeIrt1NjX3TvWBfXxlyxiyzRfJgGr/fz4ox9sHQu+tMEvgfKqy
MOoAlos8rfk1xbkZxFFzmcSquw5Ojw5R1iIzF/YsCuixUJRTKJji3c0iqeJ0L3pS
bZQtnk/PTDGVdXSvMrEHSlq+PqJCONciQxe0k5VLb+9t16f2LQV3muzfdmNQJLSM
nBBifiwvbZvDhAaNsv3LTdHEJaZqYDFMe1JLewkOF4p1bMrVCtpQ9z7Kigyujf8k
P/Iipyg2w0SHfYNv98Rr6IThuXhR6hUBXLjGkp18ym+QB36zChYCte/l8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwNrLYGDWZPD03PwR2huzY1yEFAMB8GA1UdIwQY
MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt
YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw
LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEw8Ea3X
ibk8FF7K6/sJIXekcJmy4F9hRYjDrJvq/yBA6Lbf2+Dn3QwHwlP0ueMCxK5JVCmv
wqpz/zSntvmk6K0E0QNgeTLSUP79+9uErGYJ95rJFqvNJQKjNlwL7DOHt1Nexe/t
pDLQYVKlvKLTzOsGeWbFYgaLMpJMqewGlTl4vnj/kVuJ82sS0eiKAPI2hEa241Ju
6+wGwqQfjPmoDjkv9A2LwktZLsGuTsdAIH2a8Qv/S+GTyRmghtSv3qXo7TKTJevI
DNR+OMmV2uje8MM4/JTSgVqh1TGFrPbI71XxWGz59nXmAu7S0gdWvh/QTadqEwp9
qQl1QzU6lzii2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:38 2026 by rpki-client