Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: Jvk2oYGF8mnhomRbO139Q5GHbF07O809JBPEvv/jScY=
Subject key identifier: 96:1A:23:E1:A8:3F:63:A9:20:31:13:02:95:0E:FF:DD:B8:8B:9E:B9
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019D37F735DBB0F007D7F3B9943986B0F583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0CE0
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: XEYQi9QZWRqtDcUx+LMn7U4IDTq1LevdOa57kvFse+4=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:35:db:b0:f0:07:d7:f3:b9:94:39:86:b0:f5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=961a23e1a83f63a920311302950effddb88b9eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:f3:9b:af:bf:50:a5:74:8b:20:0d:46:97:
8f:b6:45:ec:c5:4d:eb:5c:b4:db:2b:2c:e0:ba:a9:
da:18:22:cf:24:64:91:a4:09:a2:0e:f5:22:68:9f:
d4:61:7c:5f:64:c0:e2:c6:9c:1c:6d:82:4d:4b:7a:
6e:9d:7e:bb:e8:4e:94:b8:38:ec:57:92:3d:54:e7:
ea:c1:b8:7c:22:c6:1b:59:51:ed:9b:7d:20:3c:e2:
56:ee:d7:58:88:2d:ff:3d:03:15:2e:0d:3e:33:11:
35:39:e8:35:68:a4:49:22:83:c3:8f:32:77:84:14:
ae:9e:bd:aa:e7:2f:56:e6:ad:7b:81:60:10:04:4c:
5f:a2:25:d7:69:a3:c3:38:12:e4:1e:4a:02:c3:4e:
84:cb:6b:5f:df:cf:a9:ca:74:fd:d8:20:9f:36:fe:
b5:ce:0b:68:0f:e7:d3:c0:b9:e7:00:00:4a:bb:04:
1d:c5:58:f1:11:b0:50:3a:3a:f3:d5:de:33:43:5b:
37:7e:2a:54:62:97:22:b5:aa:22:9c:53:0d:a4:0a:
17:6b:4f:66:6c:39:34:8d:c3:eb:da:0c:e3:0a:32:
6f:ec:f8:4b:aa:c6:28:da:6d:d0:12:29:4c:7d:14:
e6:f9:2a:d4:cd:8b:c4:cb:d4:b6:83:7a:47:e7:a3:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:23:E1:A8:3F:63:A9:20:31:13:02:95:0E:FF:DD:B8:8B:9E:B9
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:b4:17:9f:11:04:80:df:45:ad:1a:22:13:9b:7d:d2:02:
86:e6:80:34:68:2b:6c:94:54:82:39:51:fd:b1:ad:76:08:13:
5f:71:14:49:39:32:f4:7e:5f:5d:cf:c3:14:04:53:53:dd:7a:
78:4c:48:da:8a:a2:8e:c1:15:11:5d:e8:fd:23:2d:5c:aa:57:
e2:c7:50:bd:ca:6b:80:f2:cd:9c:44:39:fe:7a:23:ab:5e:4e:
56:ac:ed:f9:3f:7d:a5:3b:ec:02:36:95:e8:fa:c9:c3:8e:9c:
e3:ef:00:63:d1:a7:7d:aa:06:3a:b5:f8:f7:33:0c:17:d0:4f:
59:55:96:2a:8e:a1:c9:33:c2:16:0c:ac:10:9f:3b:83:97:86:
75:9d:cc:25:b5:38:dd:e3:22:e4:90:f4:f2:95:04:78:4f:2d:
a7:4d:1a:12:18:ed:a0:ab:c2:f4:02:0b:77:15:04:68:49:58:
b9:7d:6b:52:69:60:e5:e2:13:92:26:f9:fc:2f:56:36:8d:96:
be:bb:b3:93:10:de:6a:01:22:08:63:ea:99:72:f5:3f:28:fb:
11:99:da:a2:7c:ef:70:94:91:57:d0:e3:7c:fc:ad:a7:9d:26:
ff:d2:c1:28:b9:06:32:aa:9d:fa:92:56:ab:56:cf:25:4a:ea:
6d:88:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:03 2026 by rpki-client