Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: dgRuTSvhkXrSXKGGM0Sw+psohsfbxhXm5zkGrHF5z98=
Subject key identifier: F2:71:AB:A0:18:9C:50:AC:3E:8F:EE:2B:EB:CA:18:D1:97:BD:D8:15
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 019D38D305F9B84F721702131635799B2CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 0769
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: JBs/iLCOxXQ8g27GzCVDg2IpOZXK2qtYgnLAgZ/gv+c=)
2: UrtdSIofhaNFKk3JSuwNs4gGVYM.roa (hash: ggNMIGKU56jLb1aZj1uZ1UliAG9bzA5REzJSwfmL/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:05:f9:b8:4f:72:17:02:13:16:35:79:9b:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=f271aba0189c50ac3e8fee2bebca18d197bdd815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:d5:68:4a:b8:e8:1e:bf:02:72:96:cb:7d:
50:a1:d3:12:bb:2b:5e:34:dd:3e:85:bb:77:1e:d1:
b0:c7:5f:79:a1:b3:76:44:73:50:68:85:bc:90:69:
ca:7b:67:af:19:d8:8a:9c:3b:4f:61:97:f9:68:97:
2b:f6:1c:f6:6c:c7:a0:3c:4a:a5:38:9b:7f:8b:50:
d1:e8:21:e0:0c:16:57:46:28:34:4f:77:78:d1:0a:
47:b1:44:fe:09:10:11:20:31:72:4a:c5:2a:1b:9f:
f1:26:8f:f7:0c:4b:29:da:1d:d2:de:fb:b4:bc:5b:
3d:9b:fe:52:9c:68:f5:96:56:90:35:f6:81:e0:8f:
fb:e9:91:09:00:00:31:49:7e:c6:a0:81:eb:8e:53:
27:d5:15:2d:ee:69:f9:2c:57:9d:93:db:07:c6:dc:
aa:cc:16:d3:47:51:2f:91:82:0d:da:67:8e:2e:5c:
d7:d3:bb:ca:8a:20:e6:b9:d6:54:71:df:c9:30:11:
47:33:fd:a6:9d:b6:71:75:22:bf:7e:8f:04:3f:6f:
00:e3:0b:b3:1c:b8:cb:56:21:6a:a3:d8:a1:1c:66:
c8:81:07:df:d8:b5:07:57:f0:a1:f2:b0:6b:da:db:
01:9a:3f:d4:6f:ff:8e:1a:d5:d4:34:c7:e9:20:9b:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:71:AB:A0:18:9C:50:AC:3E:8F:EE:2B:EB:CA:18:D1:97:BD:D8:15
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:8c:14:ef:bc:a9:af:11:7f:a1:13:f3:e4:6b:95:82:2a:
63:13:5b:23:8a:f4:8a:e3:50:d8:73:7f:aa:a9:ae:a5:e7:92:
7c:21:22:ce:05:09:a8:c5:52:52:2c:68:f5:af:9d:2d:d8:67:
3d:10:8b:7a:26:e7:62:56:05:d5:73:5e:29:9c:69:18:f6:af:
18:74:ae:00:bd:06:6c:38:f7:ae:82:94:ee:84:ec:3a:13:2b:
68:6e:c0:3e:22:7e:93:4e:7e:8f:93:f3:ad:e4:25:42:70:3a:
9e:1e:6e:a6:27:4f:8e:c1:5c:74:cf:e4:04:01:2b:8d:b8:be:
84:9c:84:3b:9a:d8:4b:e8:61:b3:90:7c:90:72:86:8f:5e:d6:
06:88:9d:ee:5a:66:f9:8b:9d:71:ed:1a:75:60:1e:d4:eb:b2:
69:a9:d5:e9:24:0b:29:63:e8:38:4d:50:33:05:53:8a:01:a2:
cd:ed:ae:aa:cf:d5:7d:36:b0:0e:45:b1:15:2e:5b:98:6e:b9:
b8:f8:cb:03:51:b8:59:c2:4c:4a:15:14:50:3d:f9:c0:ae:10:
fc:e7:25:80:f9:be:cf:e7:e1:4d:de:03:fc:cc:bd:95:2c:65:
11:33:82:f5:e0:80:93:3a:60:7a:ba:fb:ab:f8:01:df:38:62:
75:a8:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client