Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: EQOhVL7BhAVBS5OlMicg/rYOpe9FQ+S9pcf4GH5GwSg=
Subject key identifier: 79:98:81:66:BA:85:63:10:1F:51:69:40:15:DD:15:F1:B7:67:F9:0F
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 019D39AF3FD5C03ABA0059171E9C22935148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 0324
Signing time: Sun 29 Mar 2026 13:01:19 +0000
Manifest this update: Sun 29 Mar 2026 13:01:19 +0000
Manifest next update: Mon 30 Mar 2026 13:01:19 +0000
Files and hashes: 1: aZInJVVj-s0Wg32prdB7tBivvYA.roa (hash: PJXuAgUz8U1MrkWq0hGkH/inn8z2Szk0o8qw96eYX7Q=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: MABDfoGbVYRxysNFI2lB9RIjAqCvH4VNQBWtsIB9rNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3f:d5:c0:3a:ba:00:59:17:1e:9c:22:93:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Mar 29 13:01:19 2026 GMT
Not After : Mar 30 13:01:19 2026 GMT
Subject: CN=79988166ba8563101f51694015dd15f1b767f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:ae:72:17:02:52:8e:53:f2:1d:81:65:66:
cd:5b:24:d4:14:30:07:1c:15:83:25:69:3b:4d:ff:
27:1c:8f:b0:a1:a6:5c:95:c2:a6:e0:b9:cd:3a:04:
58:7e:15:ac:5d:31:60:56:d6:e2:65:58:e3:41:fa:
11:cc:96:32:e5:5c:7a:e9:67:1f:70:8f:13:da:c3:
c1:c0:e1:56:3c:df:1e:1f:21:e5:f0:e7:d0:16:55:
8a:e2:6e:02:38:eb:cb:ef:88:f5:5b:02:b5:1b:b3:
52:33:d0:23:b7:9f:12:80:df:69:ef:dc:01:ba:1b:
9c:30:e0:24:06:a2:d7:e0:91:60:f3:2e:ef:82:f7:
cf:19:77:01:ad:f4:48:84:de:91:7a:2d:5d:b7:58:
fa:ee:f4:9c:62:c8:d2:2b:03:a0:c4:9e:40:e1:80:
62:16:82:7c:b6:a2:e2:2e:ba:d2:83:d8:84:03:d8:
95:b5:10:16:95:fa:f9:f4:ac:03:04:f0:88:b2:25:
30:68:29:fa:bf:06:f1:5b:ad:6e:0c:da:a6:35:e9:
f2:93:e9:ea:7c:3a:7e:a3:be:ba:c9:37:82:6b:7d:
46:e8:6d:45:74:20:2c:2a:59:f8:84:99:5a:0f:33:
5d:09:fd:de:ac:74:c3:14:f5:5a:13:13:27:9e:09:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:81:66:BA:85:63:10:1F:51:69:40:15:DD:15:F1:B7:67:F9:0F
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b6:0a:2d:44:e8:0e:19:ca:c8:03:5c:9a:15:d4:bc:99:b0:
9b:b3:89:e0:62:2d:b1:cd:0d:c2:2c:8d:c8:0c:88:00:f9:49:
e7:d6:6a:6e:04:2c:0d:25:5f:d7:6e:85:b9:00:3a:f4:96:09:
1a:c9:d0:43:3e:aa:b0:bb:e7:cc:6d:4d:25:c5:9d:09:65:72:
55:a8:9a:cf:17:3c:f7:55:19:9c:8e:cf:0f:47:c3:80:0c:6a:
13:41:be:a6:23:58:9f:29:92:f0:60:ce:2a:0c:e2:9e:a1:c7:
38:b4:a6:74:78:82:5f:0c:c7:e9:c7:dc:01:dd:c7:6f:74:21:
f8:7c:db:eb:49:c2:55:e4:36:4a:fb:5e:92:18:13:66:60:06:
ae:88:b8:15:71:0a:32:33:0a:1c:eb:76:8a:ba:b8:bf:47:51:
89:8a:7f:e3:2f:f5:db:c1:61:ee:57:e8:e5:d6:ff:c2:94:0b:
47:96:d6:d7:84:30:24:69:91:c6:5b:73:e9:1c:83:17:1a:5e:
00:33:a1:39:bf:91:ad:2c:a1:51:4c:37:3d:5b:c4:b2:08:8f:
ca:0c:a0:cb:06:eb:27:5f:8a:20:44:e5:86:c3:b7:c9:8b:bb:
e0:9b:b4:03:37:ee:42:08:43:85:9e:b3:7d:01:5a:53:54:54:
1a:ad:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:42 2026 by rpki-client