Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: OZECUHr5IaCxS/sgPFruzAjZ1OfhkLZ3QughOrFjTk8=
Subject key identifier: F2:5C:0C:AB:48:E5:AC:86:43:8E:55:F8:1A:ED:47:CE:36:FE:E4:05
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 019D37F6E2BAD089019820501EA2D1BD07CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 127A
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: bAqvaOAbS_zyWG89lZX643VSXiY.roa (hash: aCU8YvRzFkWCl+qdiCxPi41xQwSF9YId56RdRoh8KaQ=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: +Kdps4brhVUw2qwe60VNQ8JtSYiVwa6PR/CYYXTMyhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e2:ba:d0:89:01:98:20:50:1e:a2:d1:bd:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=f25c0cab48e5ac86438e55f81aed47ce36fee405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:f4:44:33:cc:e0:ec:21:22:f5:7f:61:8c:
64:6a:6e:23:8a:09:26:58:74:87:9c:46:8a:9d:6f:
4a:3a:69:21:7f:ac:5a:27:4e:6b:67:ca:01:f5:87:
90:b6:d5:a8:b9:19:33:1d:b2:07:ca:1d:12:51:2f:
58:75:09:fe:82:7f:aa:a5:ca:84:31:ae:bd:06:84:
33:2b:b2:7a:51:2e:a2:25:ce:4a:37:d8:17:62:8c:
6d:0c:a6:d7:ca:8d:74:50:b9:1e:c9:ae:ca:85:6b:
98:9f:10:ed:38:dd:e6:45:f1:77:6f:69:be:c6:ae:
c3:00:ab:f7:3b:ae:6e:94:38:18:98:a5:41:2f:b1:
77:01:fd:b2:6e:2c:1d:05:6c:09:e5:30:d5:96:78:
28:30:f9:ce:7e:cc:cf:cb:f5:c9:4d:59:23:90:e8:
21:74:a1:72:e8:46:07:ac:d5:07:94:e5:46:fb:a9:
ba:aa:51:40:ed:9f:c4:d2:36:a6:40:6f:9d:20:b5:
98:48:9a:65:e7:10:ef:82:d3:16:79:97:f0:9f:45:
ff:67:0c:50:5d:33:a5:e5:90:e5:56:cd:ff:d1:54:
bf:fe:f7:cf:68:ec:84:dd:79:24:92:20:ff:d3:22:
dc:88:f0:4a:64:98:50:5e:c5:a0:b5:80:3d:fa:a8:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:0C:AB:48:E5:AC:86:43:8E:55:F8:1A:ED:47:CE:36:FE:E4:05
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:12:95:8e:04:ad:f1:ef:79:27:c0:8b:ba:2f:2f:00:69:
92:94:a4:c9:d2:5a:3a:b5:c2:6e:f9:bb:e6:5e:cf:9d:d2:ca:
ef:12:95:37:70:32:ca:1d:ea:b7:34:66:0a:83:b6:8a:02:fc:
d6:75:64:30:2b:fa:a8:df:62:d5:84:18:b7:1b:76:20:f8:e6:
28:64:2d:21:5a:f6:a2:fe:b5:bc:e0:5b:37:92:50:2d:89:2f:
b7:10:ff:67:f6:83:97:10:8a:6e:72:d0:d9:0f:12:68:a4:3b:
27:c3:fb:71:6c:d8:d7:6d:7e:35:6a:32:60:4b:b1:19:de:a4:
6c:b9:1f:1d:8b:ce:b3:af:02:8f:7e:e8:1e:e8:be:2f:6e:dd:
c0:de:01:e3:c9:56:66:85:cc:de:ab:cb:2c:bf:10:8d:db:af:
64:27:20:ab:ee:63:c2:81:4c:50:43:8c:66:04:6f:3e:a9:44:
6d:06:28:c8:80:36:85:e2:c9:15:08:43:be:f5:45:6e:09:65:
f9:e6:e1:95:2c:db:d0:37:c8:df:4d:18:63:6d:78:88:7d:a7:
59:ec:8c:51:da:ca:f4:05:fd:e8:76:88:35:80:ae:39:dc:6e:
ef:1f:d2:93:b0:6c:40:e2:1a:3e:d9:0b:ab:1f:4a:f9:64:a7:
48:d3:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:40 2026 by rpki-client