Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: I3lX6802XYW1BkS2Vda88NhYjchpN7RwlJmhD6fggP8=
Subject key identifier: 26:34:2C:3C:10:B5:57:A7:09:11:65:A0:94:87:84:B2:DF:31:97:1A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 019D397779FB86E5A60A2EFBA353203C427E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 18AD
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 89gAB1G84T4iLrE6TJCRB4LLU4gsL/jHzzGnNmN5V+A=)
2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:79:fb:86:e5:a6:0a:2e:fb:a3:53:20:3c:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=26342c3c10b557a7091165a0948784b2df31971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:66:d6:fb:99:5f:56:32:43:fc:9e:7f:80:
5a:3f:da:a5:70:e1:eb:d7:4f:24:a8:4a:ed:25:5e:
cb:27:fd:f5:3c:0a:91:0e:88:84:a2:c4:a4:b1:22:
4b:96:3f:bb:5e:91:0c:72:f3:be:f9:30:31:a3:05:
9d:e3:21:9a:fc:b0:fd:23:e1:44:21:b8:95:37:bb:
0b:ec:95:bb:de:99:8f:e5:70:8e:ea:d4:e7:f1:4a:
77:3d:b4:46:a5:cb:20:cd:4e:72:c2:ff:c5:a0:84:
e8:3c:5d:4e:d4:82:61:62:b5:8a:f9:7b:67:25:0a:
3b:1f:9f:99:6e:ef:d2:97:2a:88:9e:8b:6a:4e:62:
8a:d9:1b:2e:7a:c4:54:57:3f:5f:c5:67:db:b0:65:
7c:ed:42:5f:16:d4:eb:0c:69:cb:c5:bd:0d:51:06:
51:4e:20:6c:c8:8c:a3:23:d4:4a:75:77:be:de:19:
42:40:65:4a:35:ac:26:0d:72:63:2a:21:7b:97:69:
0c:71:bb:47:a9:40:dd:e3:3d:2c:6a:6f:5a:5a:b9:
85:ed:a7:f9:e0:21:a2:b4:f2:9a:5d:c2:13:4f:d0:
17:ef:cd:e3:c2:3d:be:c1:74:cc:ee:5f:e3:a2:6c:
a5:40:7a:ec:7f:0d:a5:1b:96:50:4b:09:70:72:41:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:34:2C:3C:10:B5:57:A7:09:11:65:A0:94:87:84:B2:DF:31:97:1A
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:b6:b3:17:6c:82:e6:ca:b2:f4:66:2f:d5:4f:5e:c8:e8:
d2:2c:db:31:e4:ed:24:88:4b:b5:e6:7b:57:66:16:3a:e6:15:
13:1c:cb:19:10:38:86:f7:55:77:f6:b4:4b:4d:02:86:40:fc:
54:ae:7a:4e:11:d3:61:f9:4f:cc:df:74:75:8e:de:ca:5b:95:
c5:18:ef:c4:6e:ff:77:87:ba:50:6d:4c:14:09:d4:10:25:a2:
80:2e:fe:58:27:3f:05:1e:76:38:2a:ea:48:45:19:22:5a:44:
24:5c:d0:5a:a0:13:03:ca:9f:6b:13:da:12:d0:2b:d0:f4:43:
5a:9e:d2:93:09:ad:8a:cc:99:bf:64:1b:69:86:78:c9:68:0d:
a1:89:72:43:38:31:42:b0:68:58:2d:1a:1e:b4:d9:d3:b2:48:
2b:4b:bd:5a:e6:4d:60:2e:dd:62:f3:ec:4e:7a:ae:7d:be:93:
71:83:38:95:48:38:03:9d:85:b8:cb:34:85:b1:88:48:d5:92:
97:56:dc:22:fa:55:74:9e:85:09:67:9e:c9:4c:b5:70:50:99:
a2:6d:c4:df:f7:40:5f:8b:8d:21:1a:73:61:d7:5a:39:3a:a1:
21:68:31:65:08:59:c1:ee:e9:7a:6a:04:ee:cc:cc:1e:bc:89:
e0:48:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:45 2026 by rpki-client