Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: Uco6mN5GY4iSpoAdlLFUcynXLdGqSkd9P4MYoanVgFQ=
Subject key identifier: EC:9E:50:9A:BC:77:58:6C:45:24:36:C4:CC:FC:4D:5F:19:EF:D3:53
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019D3752DCEBEEA621ED4F7A72FAE33454C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 17D3
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: mLSNh+LbZxusOfjyH+pXRSXbieS6lF65Nn0aJjupp0c=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dc:eb:ee:a6:21:ed:4f:7a:72:fa:e3:34:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=ec9e509abc77586c452436c4ccfc4d5f19efd353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:92:b9:a7:a1:de:24:ef:5b:cc:a4:65:98:
6c:99:e1:42:50:1d:bc:20:06:cc:c4:ca:ff:f9:4e:
32:af:19:0e:66:b2:05:ee:e1:4a:9f:46:b9:49:35:
78:07:e3:86:c8:4c:6e:66:a7:bb:c4:e1:63:7a:a6:
cd:c5:56:68:28:01:4a:cd:5f:ad:32:46:66:4e:e9:
43:82:ad:c5:64:53:ee:ce:9c:7a:42:4f:17:8c:0a:
4b:08:dc:5c:45:73:1a:04:02:e1:87:22:96:7a:34:
ae:fb:33:af:57:aa:71:45:fd:56:41:01:8b:bb:53:
5a:f7:d8:6d:8b:0d:66:f4:a0:4f:c2:a9:5e:6e:1d:
50:1e:57:79:a5:d4:93:ee:33:05:ce:98:b9:6b:2e:
71:98:42:fd:59:1b:b7:44:09:2f:95:5f:b0:59:62:
9e:00:58:0d:58:94:18:5e:fa:19:f1:b4:bb:5b:74:
c4:7e:98:31:13:35:90:e0:6f:70:79:8d:68:52:09:
b9:21:c2:9f:e8:e8:e1:b0:4d:92:81:c0:85:39:9b:
af:55:91:94:42:39:b6:db:91:2b:8a:02:68:a4:51:
83:24:cb:81:e7:40:fd:ff:dc:03:a1:62:95:24:8f:
4d:e4:a7:1e:a9:30:b2:d8:bb:9d:ca:37:26:62:83:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:50:9A:BC:77:58:6C:45:24:36:C4:CC:FC:4D:5F:19:EF:D3:53
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:c0:8c:ad:73:ab:81:57:f9:ce:d7:8e:a2:84:89:61:8b:
37:9c:ea:8d:a5:4f:14:23:a3:8d:c5:54:91:fd:e6:2b:d5:7d:
e5:0c:7d:28:24:ee:b1:c4:c2:47:87:8b:32:2b:0c:bb:39:72:
4e:2a:7d:5f:b6:b2:1c:89:fa:e2:75:9b:b4:66:9b:d2:2a:7c:
26:56:13:ab:6f:eb:ff:6d:45:02:cb:26:97:26:fa:db:73:4c:
38:e3:54:32:94:94:cd:fb:6a:db:74:25:7e:40:dc:4f:3a:b7:
9d:ad:58:c2:1c:21:fd:f1:92:82:1f:45:91:c8:74:c6:a8:c6:
8f:b9:d2:a9:fa:57:8e:67:40:6b:74:15:4c:d5:fa:68:22:8c:
47:d8:47:a2:25:d1:a9:3d:6c:66:87:64:eb:73:77:8e:bd:09:
89:18:58:3a:15:15:60:45:68:14:f8:ac:9d:05:96:17:ba:79:
fa:2a:a8:16:d3:9e:99:db:19:50:5a:b5:e2:58:9d:78:cb:00:
5b:e2:19:e2:3d:0e:70:58:f9:40:ab:e6:ae:68:12:1f:b7:d6:
e0:18:5a:11:12:37:30:3c:53:62:44:69:1a:f4:86:8e:29:51:
f2:ad:de:03:02:5b:8c:ab:b0:62:ae:e7:75:06:01:05:a0:f7:
17:9b:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:21 2026 by rpki-client