Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: rnUZU23H0pwK5sSgNpGamkE+wwn5xsRkGOnWPYricxY=
Subject key identifier: 60:9E:47:5F:01:30:60:D1:81:E0:20:83:89:FA:67:79:1A:FE:D2:4B
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019D39E56C311F6BE31EF993F716F362D13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 184F
Signing time: Sun 29 Mar 2026 14:00:29 +0000
Manifest this update: Sun 29 Mar 2026 14:00:29 +0000
Manifest next update: Mon 30 Mar 2026 14:00:29 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: YTAffDVBq3GEPpZfnyGlk+2tDrkJZa3MX2HlZamCczI=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:6c:31:1f:6b:e3:1e:f9:93:f7:16:f3:62:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Mar 29 14:00:29 2026 GMT
Not After : Mar 30 14:00:29 2026 GMT
Subject: CN=609e475f013060d181e0208389fa67791afed24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:59:3b:49:bd:ff:96:d1:65:e0:7a:7f:05:
de:b7:d1:1d:ea:9c:41:a5:dc:1c:ff:dd:e4:87:98:
dd:ea:ec:b6:db:4f:c8:4f:55:c0:59:0d:c8:f9:e4:
d1:22:13:91:37:9c:ea:3e:8d:c3:40:13:70:10:77:
03:dc:47:17:1d:e9:16:65:c5:d4:aa:49:2c:a3:01:
08:e3:54:0b:d8:77:58:0d:7c:93:49:73:c9:e3:b0:
37:01:6e:2a:4b:25:29:65:96:44:62:e3:73:a1:fc:
8d:5b:45:32:f1:1c:11:6a:a2:ee:5c:39:71:d8:a7:
6f:14:1c:2a:03:d3:4b:5c:96:58:81:4b:2e:01:c7:
52:68:67:c3:bb:2a:95:e0:38:c7:f4:91:fd:5c:4c:
08:c8:b8:33:3a:9a:95:09:a0:df:87:4b:97:fa:b7:
96:80:8b:97:14:ea:5e:18:74:a2:78:39:a1:ab:45:
aa:30:71:ae:fa:59:2b:d0:de:92:0a:fe:55:bf:d2:
a1:61:59:04:a1:fa:59:f9:94:e6:a0:da:43:e9:66:
37:f4:37:a3:7b:69:90:b5:1a:cb:30:ba:a3:5e:a0:
da:71:d4:e5:38:7c:e0:29:a9:0e:17:cf:be:e0:ae:
2e:f5:23:2a:b4:af:e4:04:ea:36:33:ce:47:06:47:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:47:5F:01:30:60:D1:81:E0:20:83:89:FA:67:79:1A:FE:D2:4B
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:5a:31:03:a6:7b:d2:80:49:4a:52:40:56:71:cf:23:8c:
6d:c4:90:e8:6f:e5:75:69:bd:ea:87:38:66:9c:8b:53:f5:07:
e1:96:18:3a:85:e7:e6:6f:fe:76:86:62:6b:3a:a4:79:86:06:
bc:14:24:1d:8d:5a:17:f2:da:81:c1:20:41:6d:92:fe:42:c0:
15:e8:98:62:80:52:b1:fd:fb:67:b3:fb:75:c9:dc:75:32:f4:
84:06:4d:d6:6f:4b:7d:01:8e:e1:c8:85:0f:08:aa:a4:e2:39:
ff:ff:dc:17:d9:16:f1:a4:e5:3a:19:09:78:d7:8e:e3:44:d0:
12:b0:af:18:84:eb:0e:35:7c:0c:20:7a:43:cf:23:b9:ed:58:
07:28:16:8b:e4:60:6e:50:f2:1d:c6:c6:ab:e0:0e:be:64:77:
7d:b1:07:ed:e6:42:d4:ed:b9:10:31:12:3e:29:bb:c3:7d:75:
4f:e2:44:80:64:2c:3f:88:38:5b:13:0f:31:43:83:77:a6:16:
c5:a4:80:77:db:fa:2e:e9:71:69:88:30:73:2e:cf:b6:27:96:
3e:fd:29:df:c7:1f:75:d5:b2:d5:93:cf:84:e2:36:c9:2e:bd:
8d:aa:5f:5b:45:f8:9f:56:52:dd:6e:97:54:7c:6a:ca:51:82:
3e:ab:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:21 2026 by rpki-client