Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: lNLw/MpsESHv3jtlqkIesz1WGeB/cuubYDAD+yeiqEk=
Subject key identifier: 90:D6:A7:8D:CF:C8:E2:09:D3:58:2E:0B:7D:CF:D6:EC:E1:E0:B7:10
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 019CE6DAD204528C2DCBF68D2A75302AAF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:26 +0000
Manifest this update: Fri 13 Mar 2026 11:00:26 +0000
Manifest next update: Sat 14 Mar 2026 11:00:26 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: 6sE2zdg2WeNeZYphyNag6OMLGF1N1YtsQ93zc3R6JAc=)
2: PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa (hash: GD/HWU3t0dVz2XNxiVj2DMFTslgyISmS+UP1+CaEce4=)
3: hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa (hash: qSG+GFEeR/GOxXMLx7StdEf6sz41a8hoOmnDw6GdlPY=)
4: jXdXWkgPJAckS1tbfXfBM3oOl2g.roa (hash: R2Qr1JCatkYhkl5XRuMbtN2cCVq0Xmr5HkM/fW29yJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:d2:04:52:8c:2d:cb:f6:8d:2a:75:30:2a:af:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Mar 13 11:00:26 2026 GMT
Not After : Mar 14 11:00:26 2026 GMT
Subject: CN=90d6a78dcfc8e209d3582e0b7dcfd6ece1e0b710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:c3:a1:ae:6b:ad:16:d0:fb:6a:7a:f4:5a:
e1:73:af:88:6f:c0:3a:60:94:c0:ed:c4:7a:e2:1b:
f3:a1:39:c8:36:6e:36:bc:76:fd:7b:43:99:84:11:
30:7d:4d:34:94:f6:d5:27:fc:03:06:0c:d8:76:a5:
84:d9:7d:3f:d1:02:13:ff:64:ed:1f:44:be:97:f5:
f0:c6:2c:af:ad:95:2b:72:04:63:01:91:97:b2:15:
05:14:03:77:4d:c5:29:e3:a0:01:87:79:fc:f9:b2:
0d:0c:f8:07:37:79:45:a1:52:52:65:74:76:0b:5e:
31:1c:2a:db:22:a2:85:53:9d:98:fe:a3:d6:24:98:
f9:63:c6:e9:30:ef:7f:fc:6a:7a:b4:94:21:f5:a5:
0e:ca:2a:69:e8:58:75:4a:45:6d:40:a8:06:af:0d:
1d:f1:65:19:61:20:3e:78:d9:03:d4:c7:cf:88:ab:
3d:b3:95:27:a8:55:24:de:73:97:71:68:ee:d0:bb:
40:68:1c:20:fc:08:3c:3a:35:04:9b:35:9b:25:39:
cb:0c:5d:b3:46:13:a8:78:61:e7:c5:cd:a3:d1:6a:
06:17:1a:31:1d:ca:15:ce:19:a5:0e:3b:2c:cb:73:
7f:6b:54:49:37:b5:db:6d:b1:29:12:e0:fd:ff:6f:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:A7:8D:CF:C8:E2:09:D3:58:2E:0B:7D:CF:D6:EC:E1:E0:B7:10
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:13:0e:03:ec:4d:3c:fe:d9:5b:94:46:f2:20:46:d1:3f:
43:ee:70:8d:f4:7e:2b:c4:db:99:7c:18:3c:f0:c9:86:bd:5d:
f9:ec:e1:f5:09:2b:13:36:b5:c0:db:da:bc:86:d8:03:9d:2d:
d1:8d:ef:d3:77:b9:05:cc:d1:00:33:44:2e:5e:a1:cc:9d:2a:
66:07:48:01:39:5a:3e:d8:60:91:76:07:b7:1d:b0:a0:6f:48:
6a:c8:c8:ad:62:34:8d:41:b8:13:86:db:f5:d1:c6:72:9b:4b:
49:1b:85:a6:4e:39:b6:96:65:0a:43:5c:2d:f0:e9:ce:b0:73:
51:85:d7:a6:33:e6:95:e7:ee:17:7b:55:ea:92:9a:50:22:7a:
ca:db:44:0c:c6:23:cc:31:3a:51:8d:50:b1:ae:9b:8c:3a:5f:
34:90:51:95:23:05:d9:40:75:f8:5e:53:4d:4e:10:85:8e:29:
64:e3:a9:f3:61:b8:6f:cb:0c:54:bc:ca:3b:96:68:97:d6:1c:
e5:df:e1:3d:4d:3c:a7:0d:97:90:f8:f1:f2:a8:d2:fd:8b:b1:
b1:09:dc:aa:b1:2b:e0:50:78:cf:21:2f:01:d3:53:8f:86:d4:
79:9f:ca:d5:f4:3f:91:5e:a8:13:12:e4:8d:9f:30:19:46:2c:
a0:d9:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:19:35 2026 by rpki-client