Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: HbMsv207gQ5LUakncPkAOlITQ0qDvCzNxcF0knqXsfk=
Subject key identifier: 93:62:8E:11:90:76:77:B4:C7:41:31:75:E8:81:C5:2D:62:3F:94:60
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019D0C31005E710A7D37FDA72A114D5BF311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 187A
Signing time: Fri 20 Mar 2026 17:00:31 +0000
Manifest this update: Fri 20 Mar 2026 17:00:31 +0000
Manifest next update: Sat 21 Mar 2026 17:00:31 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: jlAM8BiVrEvYusssi2l78U93zh7LtUC8yrYBcyDPCyM=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:31:00:5e:71:0a:7d:37:fd:a7:2a:11:4d:5b:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Mar 20 17:00:31 2026 GMT
Not After : Mar 21 17:00:31 2026 GMT
Subject: CN=93628e11907677b4c7413175e881c52d623f9460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:20:c4:2a:74:64:f9:d1:d8:af:46:75:51:
56:64:e4:8b:0e:7d:2f:19:fb:91:f9:b3:22:51:ee:
e9:cc:1a:47:bb:67:66:b3:3c:2c:fc:9c:e7:5b:19:
2d:ed:43:45:8a:e9:8f:78:e1:7d:b4:ad:1b:88:ae:
80:de:17:ec:4b:36:48:e6:c3:1f:a7:e3:52:6d:b5:
58:13:77:47:3b:35:6f:61:96:64:6a:77:7d:23:39:
43:3c:4f:01:40:fa:46:06:94:3e:bd:62:60:5c:db:
fb:c3:4c:d4:64:85:b8:b1:21:98:71:40:65:07:d4:
c7:f5:2d:98:6b:81:f1:0a:0d:3c:f0:84:e5:09:5f:
2a:c2:30:d6:5a:c0:a5:6c:48:22:64:10:28:33:18:
87:b0:6c:b8:cf:e8:da:69:47:08:15:e8:b3:62:ab:
4e:86:fe:fe:b9:ef:10:13:b1:1a:89:7c:3f:50:c0:
af:21:77:85:ac:a9:08:18:39:ab:9c:0f:1e:38:a3:
2c:87:2a:4c:d8:ea:2c:90:7c:e8:73:4d:45:5f:2e:
4e:77:7d:ab:c5:37:66:da:1a:a9:ca:8b:c3:d1:65:
1e:d4:f4:60:3e:d9:e8:9f:9e:20:15:73:13:f9:e4:
ca:03:6f:14:5e:41:53:2d:ef:bf:5e:5f:3c:fa:d1:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:8E:11:90:76:77:B4:C7:41:31:75:E8:81:C5:2D:62:3F:94:60
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8c:c2:42:23:05:59:d9:c7:d1:68:ae:30:66:6c:58:ac:8b:
55:18:d5:07:77:00:d3:4b:6f:af:df:e3:f5:a9:61:da:ba:89:
64:76:f4:b5:16:14:c0:2a:79:c0:f4:68:77:29:ee:86:4f:c6:
a4:19:53:00:01:68:81:52:a8:1b:22:83:33:e3:84:e9:3c:78:
f7:c9:83:90:0f:44:3c:ba:54:8e:f1:e4:2d:53:e8:42:6c:38:
c1:d9:b8:98:33:66:f5:39:96:13:35:c0:8e:1e:d7:64:ac:93:
21:cf:89:66:41:4b:b3:ec:49:85:4e:69:27:a4:2b:0a:c2:6f:
b7:96:df:f8:cf:8f:ce:6e:4b:5e:2d:6f:3e:a6:03:d5:5a:7b:
69:39:b1:16:96:d2:74:b9:50:45:3f:ef:17:f3:77:5b:19:46:
69:c7:10:be:28:8c:15:0e:41:42:46:01:0a:bd:2d:e3:79:d7:
3a:6c:11:a1:12:3e:60:e9:78:20:38:1d:7d:a8:56:65:02:01:
e5:be:03:73:f0:bf:3a:69:27:56:21:b8:49:d4:36:01:6d:9a:
e4:c8:26:fe:d8:8b:64:2d:b3:f2:a6:c9:78:d9:c2:75:67:2a:
26:5f:3c:e0:63:f8:b2:17:77:6b:45:72:ce:26:e1:3b:f0:0f:
80:5b:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 04:07:47 2026 by rpki-client