Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: 4MrIT8+nLlMjYu1776nh7zQOL+z2HXma0lE75sSyyHU=
Subject key identifier: 53:A2:9F:7A:B7:D9:F3:4B:16:9C:DA:51:55:AC:F3:39:55:E4:50:A1
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 019D3865D7B34921D6D2AA10AEA766400DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 0D73
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: vIGOFpqqyxHjS3VwxydIqUrZGTnJfNXuYBV9PoTx0mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d7:b3:49:21:d6:d2:aa:10:ae:a7:66:40:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=53a29f7ab7d9f34b169cda5155acf33955e450a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:e1:6b:3d:2e:2a:c1:98:11:19:32:bb:08:
ad:4b:cc:18:d9:5d:f7:4b:c6:6c:a2:5e:1b:5b:ee:
00:2f:97:a0:59:b8:cc:73:bb:2c:c7:d1:2e:59:8a:
1b:59:61:3f:32:7a:3d:20:81:ea:39:15:8b:02:d0:
67:f6:c4:4a:4b:56:f4:d6:f1:b5:c2:94:65:2e:43:
94:a8:d5:9f:46:da:4d:a9:c9:ec:c0:e3:de:18:3a:
44:fb:15:c6:20:77:22:f4:79:98:e9:33:14:78:a7:
9a:d6:c5:f9:3b:d1:7a:8e:da:c3:a7:39:2a:c9:63:
bc:13:ea:6e:36:dc:53:fc:b5:71:6e:4a:df:5d:3f:
42:bd:1d:cc:52:47:82:c8:53:bd:a8:43:d4:a8:41:
d5:a8:eb:61:e9:76:e0:3c:2e:f7:79:32:fa:43:1b:
11:22:4f:d7:28:58:df:d1:78:be:84:fe:72:84:e3:
9a:b1:4a:f2:bb:90:60:70:90:81:b6:45:0e:e8:28:
ae:c1:d9:05:eb:a9:c0:65:8f:ea:d9:47:ae:cb:14:
32:cc:89:fa:be:86:d6:59:07:80:3a:d7:f5:0e:fb:
44:b4:74:ed:17:25:a5:c5:07:8d:7e:c6:c4:02:4f:
d7:4b:98:e2:24:10:15:d2:aa:ee:8b:ac:17:85:38:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:9F:7A:B7:D9:F3:4B:16:9C:DA:51:55:AC:F3:39:55:E4:50:A1
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:58:c5:a8:ba:c0:88:60:98:46:30:06:ac:e0:c7:75:ae:d6:
36:85:86:76:cd:22:fc:49:87:39:76:c7:84:31:b3:0d:7a:31:
94:6f:f3:21:83:64:4e:a1:97:06:02:b1:e9:51:d5:7f:46:23:
77:ce:3e:91:64:b7:b0:25:33:89:92:fc:7f:9f:b8:41:0a:c1:
b3:2c:fc:df:39:e9:98:3c:21:4b:17:85:5c:fc:89:e4:2c:b7:
e8:7f:71:ff:f3:29:8a:03:21:12:52:6d:4c:ba:d8:3e:f5:08:
d3:9e:da:e8:af:ae:c8:5e:d9:52:aa:08:41:1a:2a:60:a0:d9:
be:f1:10:97:c7:eb:b3:af:6a:81:fb:1a:cd:d0:62:9f:29:02:
0f:43:ce:db:16:91:bd:7c:d7:25:ac:a3:bd:e5:74:f3:a9:93:
2c:1f:6c:29:2b:61:1f:0a:4b:97:95:5b:2c:27:69:83:2a:5a:
05:6a:34:35:40:88:43:e8:7c:f6:34:35:b1:21:4f:80:a5:d3:
7e:ff:90:18:a7:80:13:26:04:34:b9:a0:ba:a3:82:94:84:c8:
60:0f:91:25:cd:96:db:f5:eb:67:95:c9:d1:eb:d8:6c:d8:ca:
ca:cf:cd:ab:b7:3f:e0:28:86:0a:cf:63:fa:a9:85:48:fd:b5:
6e:86:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:00 2026 by rpki-client