Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: MR+eEXqEVs1K+O2LQTXQbvJR/ToObQvUQ3ZhiS0Gdog=
Subject key identifier: 9D:4A:76:13:0E:16:65:32:0F:13:35:F4:E8:2A:56:CF:DA:A7:45:65
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 019D37C0E00E2566450C136834B6B381D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 0248
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: eHqi/4Zim3+ef0ZqpC7TLu5GFNgb3P4zyEd3PZ1TMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e0:0e:25:66:45:0c:13:68:34:b6:b3:81:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=9d4a76130e1665320f1335f4e82a56cfdaa74565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:d4:69:b7:72:62:42:4e:3b:be:c9:4a:0f:
d2:4d:54:44:43:3c:49:bc:30:01:08:4d:e3:ff:7b:
8a:44:a7:58:d7:7e:f5:20:d3:e2:db:f0:69:19:05:
9f:84:8a:ba:00:3c:c6:31:1a:67:3d:7e:60:f1:e4:
3d:51:50:84:8a:52:6b:2a:6e:26:1f:10:48:39:2e:
06:5a:66:6a:17:cb:54:d8:3d:a0:d3:98:71:33:15:
93:39:36:74:f6:35:48:e3:f3:c5:5d:4b:87:d9:eb:
26:5a:94:91:39:25:06:43:bc:c8:00:ab:9a:e0:f6:
37:89:cc:fc:fe:d8:28:1b:a9:a5:df:e0:24:20:e0:
fc:1b:a9:a1:97:46:c4:ef:70:75:d0:90:fa:2e:0d:
ae:17:33:b2:d2:04:1f:02:98:8f:98:57:45:80:cb:
b0:8a:1c:76:9f:93:55:e2:40:51:35:f8:38:f1:76:
21:9f:44:eb:34:6b:d4:1e:62:a9:3b:f1:05:91:95:
5a:8e:4a:f2:1a:60:9c:66:74:96:61:86:23:d7:57:
e2:e3:70:57:8b:37:2e:bd:e8:d8:ea:5f:d0:ce:34:
b0:66:e2:0b:56:93:1e:5f:7c:7e:cb:e5:19:c2:61:
a0:ef:e2:71:0a:cd:4e:ae:6c:59:97:77:41:e2:e4:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:76:13:0E:16:65:32:0F:13:35:F4:E8:2A:56:CF:DA:A7:45:65
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:9c:44:e3:a0:28:ab:1e:ae:59:44:fb:1e:4b:3e:35:4b:
40:9d:ff:a1:cf:25:28:fc:eb:bb:74:7c:30:80:1f:4e:d1:b7:
b2:12:f3:7d:f4:f3:cc:80:d9:e7:55:f7:94:23:bd:7f:3d:1d:
ca:44:8d:81:7e:c3:d9:51:4b:a7:db:50:1d:5f:ed:93:ca:be:
77:f4:a1:89:11:e8:64:4d:c2:6b:b3:8c:4d:26:01:82:2b:ae:
4b:b7:f7:1b:30:bd:be:71:0e:fe:a8:dc:03:39:d4:78:26:b8:
ae:c6:a7:21:dc:3f:7a:8e:01:c8:60:c8:02:d6:94:17:83:a7:
7a:5e:b9:10:40:69:7a:ce:85:e3:19:97:f1:85:17:61:fb:e2:
a6:06:8f:4d:db:0b:ed:23:af:85:42:c3:79:f1:c9:fd:2b:72:
31:b1:42:9b:86:e4:b3:40:64:79:ce:35:85:b1:1d:5f:55:f2:
6a:39:40:57:f3:a4:a5:cc:d1:76:af:e0:2d:cb:76:23:28:b3:
bc:ad:b1:fa:13:f6:8c:b0:a9:71:94:5f:1d:63:1f:e1:e6:61:
27:a2:34:6e:92:1a:71:e0:b3:aa:80:26:27:9c:6a:29:f1:6e:
dd:81:17:10:f4:f0:fb:73:67:21:82:3f:01:43:a7:f1:40:21:
db:07:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:08 2026 by rpki-client