Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: EaG3CRG5oM15QJrAVXlrwbJaBWEbt7z5z2q9p0OIOJg=
Subject key identifier: 61:3B:C8:B3:F6:89:FD:CB:2A:38:40:5F:4E:1C:D4:B2:74:C1:7B:7F
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019D37C07A44BCC3F5CDB8E6B8ED429EB3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 1573
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: YfDpCtmWkU03Ar2/lA2H4Rn6YpCb4VQ56knzcrzpWYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7a:44:bc:c3:f5:cd:b8:e6:b8:ed:42:9e:b3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=613bc8b3f689fdcb2a38405f4e1cd4b274c17b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:d1:bc:5f:5f:9f:39:c4:9a:96:4c:92:0c:
ba:ed:bf:5b:93:19:d1:1d:9a:c5:d3:8c:f3:c9:14:
ab:b9:0c:c0:5d:37:03:98:aa:4f:da:0a:d3:0f:24:
85:55:0b:d9:e8:f8:97:17:ed:90:c6:c4:a4:df:36:
9c:eb:26:09:57:c1:b3:65:1c:9f:37:31:2f:0e:6f:
e3:7a:de:60:18:b4:6e:92:8d:fe:97:7c:b3:b1:52:
15:07:a0:13:76:28:15:ea:dc:f4:9a:32:41:4a:68:
3a:0f:17:bc:16:29:8d:75:6e:45:fb:a2:71:85:37:
61:11:42:af:98:f9:d1:f0:81:43:c1:6f:28:34:94:
db:5e:74:16:34:3b:e9:2c:5e:de:b6:52:60:05:75:
fa:dc:cd:26:49:50:7f:ab:f4:3c:72:7f:60:ee:a6:
cf:b0:99:06:04:6b:d3:74:c0:bf:96:fb:93:85:df:
43:f3:93:1c:37:74:26:e3:dc:c8:3d:1b:76:35:17:
5a:7d:89:62:75:31:e9:12:22:4f:eb:87:0b:a0:b7:
1f:fa:b9:0e:b4:41:e9:80:3f:c7:44:c7:85:f0:b9:
fd:ec:47:fc:ed:1f:6f:3a:72:72:9f:c0:e1:80:17:
d4:7e:f7:85:1d:ef:2e:cd:91:76:c4:72:dd:65:08:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3B:C8:B3:F6:89:FD:CB:2A:38:40:5F:4E:1C:D4:B2:74:C1:7B:7F
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:f1:e6:f8:d5:ef:77:d0:87:76:32:76:2c:a9:7e:b9:93:
58:e1:c2:e3:14:fd:96:c7:17:2f:ee:e8:2b:a4:1a:13:c4:a2:
97:73:b8:9b:e6:d5:29:14:53:33:6f:f3:c8:f0:79:6f:8c:da:
d7:02:f1:e1:97:ae:cc:91:bb:b9:cc:44:71:b6:7e:b7:94:9b:
23:3b:33:83:3f:92:61:02:81:17:21:45:30:83:aa:12:18:37:
10:d7:1f:f1:54:39:12:3c:db:33:f1:e4:d2:67:83:0e:4c:b3:
0b:08:08:54:b5:39:a8:8f:ee:36:71:29:a4:c1:ae:85:cc:f4:
6f:36:44:eb:1b:42:04:a3:11:43:6a:68:9a:c5:98:68:4e:ed:
72:0f:1e:66:62:df:42:8c:30:0e:d4:45:a3:77:a6:d1:5b:ff:
02:05:3c:a8:e1:31:ea:b6:55:fc:ef:d9:e6:d1:55:4a:b8:35:
2f:d2:a7:7a:54:13:6c:b9:62:cb:26:c0:d4:88:86:7d:8d:26:
0e:d8:a9:2a:0d:66:74:0c:ed:00:d9:81:60:95:26:5f:26:d8:
87:3d:ed:df:c1:88:db:22:1b:dd:48:d9:66:7d:44:cf:7f:7e:
43:c4:3f:ec:61:b6:fe:e0:21:36:02:c2:83:c8:a4:8e:f4:b8:
79:c4:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:45 2026 by rpki-client