Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier: d7GCnY/IEF4ywRvYi5IlSaRxahO6st3XfJoDoywD/fQ=
Subject key identifier: C3:55:4F:C9:94:F9:43:4B:31:60:05:7B:E5:70:9F:29:5F:44:C8:5D
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 019D386583F2D83045DBC7F9834F23E6ED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number: 01F6
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: Q+OMfEtbhekFb2lW++tX0sGwiEpPxyUqVLoBuRbnFFU=)
2: hrDir8hInSlFPN-Q1uO1aajy_9g.roa (hash: LO9s/4upanODPdu0Y/QyxRsG/lztm/48QBv0SUqV5f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:83:f2:d8:30:45:db:c7:f9:83:4f:23:e6:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=c3554fc994f9434b3160057be5709f295f44c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:02:46:05:b0:5d:fa:5f:9e:85:e7:ea:2b:
45:4a:b3:d4:90:47:43:8c:9f:c9:ba:27:8f:7e:c8:
b4:ad:db:0b:57:bc:3e:a7:53:03:ea:b3:25:5a:2f:
41:14:6b:6a:77:71:ae:cc:99:f6:4f:eb:df:82:c9:
57:41:07:7a:e4:bb:29:9c:41:34:f6:50:ba:38:4b:
20:f4:cb:96:35:1d:b0:63:75:be:44:e0:7c:31:fe:
a3:92:24:39:4a:24:02:44:7d:03:18:1c:1c:30:30:
ef:8c:11:da:0e:b3:cd:97:14:57:44:b4:91:19:ca:
e7:c9:3a:2f:2e:aa:73:01:0a:71:57:fc:d7:c7:2c:
8c:d9:22:9c:ab:05:41:70:90:3b:64:d9:43:ff:0e:
53:89:f8:1b:e4:45:b0:07:a5:ea:ee:69:bf:d4:3f:
ad:1a:72:1b:a6:7b:86:d3:ae:86:98:2f:af:5b:90:
97:ca:03:fa:5f:36:bf:12:f4:fa:92:ce:8a:06:06:
40:b1:70:78:6d:fa:d8:11:9b:ed:b7:8f:30:de:33:
e0:00:7a:76:23:69:29:a0:3c:55:b6:e6:fc:6d:d5:
af:00:35:7b:c0:fe:ad:15:f7:67:2a:a9:5d:e1:e7:
74:51:16:d6:04:c2:c4:b8:b3:a1:f1:e3:7c:ab:11:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:4F:C9:94:F9:43:4B:31:60:05:7B:E5:70:9F:29:5F:44:C8:5D
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b4:42:fc:20:05:6a:f8:f8:58:61:0a:f1:db:50:72:91:f1:
02:22:41:83:0b:23:c9:5b:2b:6a:fa:79:17:79:79:6b:f1:e1:
93:c4:1c:6b:b4:ae:48:01:de:69:95:79:97:5f:f2:fb:1a:f3:
b0:07:0a:d8:b7:3a:8a:36:a2:f1:e9:cc:e4:cc:98:29:ed:b2:
48:cf:e9:de:0a:ef:29:a0:fc:42:e1:d6:2c:c3:06:05:51:5b:
70:4e:5f:fb:0f:1f:72:dc:74:24:bb:7c:86:22:1c:0d:06:88:
3b:b0:3a:ff:1e:2b:a8:98:25:05:b7:ec:ae:62:a5:21:83:c3:
50:53:86:c3:20:c7:9e:de:88:33:df:c7:87:24:ac:f4:2f:a1:
05:5b:6b:1d:0d:16:ec:86:56:13:2f:8a:e8:42:ce:fb:62:8d:
36:ce:00:79:0b:d6:65:be:64:19:bc:07:23:2a:84:3d:7a:86:
49:bd:e8:6e:22:98:4e:15:2e:64:57:22:4c:89:5b:3a:58:ab:
96:32:4d:ec:15:90:8b:48:f3:bf:43:5b:93:29:7f:76:df:9b:
91:f0:83:dc:b9:f3:c4:7d:d5:c0:05:45:a5:14:fb:86:83:3f:
3d:bb:6e:4e:90:0d:77:74:bf:3e:e3:0d:c0:17:12:72:5b:4e:
4d:ad:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client