Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: mSg+IFoSPQHRuwZRD42UVBTZEHSFeBhd8aXVD+IxrOQ=
Subject key identifier: DD:1F:AC:D0:13:5B:D3:11:1A:5A:1E:F3:58:1E:EE:3E:0A:0C:03:FE
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019D3977DE2917A09D25DA691AA60A6A5B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0846
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: J62SpOrmmNZbuUnlvxDYEyXqdQiJJJMer9U2AiJaHuo=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:de:29:17:a0:9d:25:da:69:1a:a6:0a:6a:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=dd1facd0135bd3111a5a1ef3581eee3e0a0c03fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:61:35:9e:f2:73:4d:5b:45:8f:a9:67:3e:
3a:07:63:13:9c:af:15:b2:32:4d:0e:38:9d:dc:d6:
45:89:15:28:ec:2c:1e:8d:09:df:57:f2:a5:47:fe:
4c:33:3f:69:07:86:53:4a:6b:60:03:fd:2b:88:33:
cf:01:61:70:ae:bf:7a:25:72:f6:e8:69:69:8b:e5:
07:9c:9f:a6:82:04:87:69:76:73:6a:b6:30:4e:fd:
ad:97:e7:5d:29:e9:96:6e:53:dc:fa:d1:9a:ca:cf:
56:a5:75:e2:bf:07:cc:b7:31:80:5d:56:5c:52:78:
69:ba:98:23:47:45:fa:e9:04:88:d3:c8:6d:a1:d3:
07:29:ac:e0:f8:98:da:3e:90:e0:e4:6a:7d:bd:5b:
10:47:2a:e1:5e:54:6d:9a:34:31:a2:58:f8:67:3a:
64:bd:fb:10:58:b1:10:3e:c3:bc:52:2c:7a:05:09:
07:13:3c:f9:4d:49:83:b1:6c:7e:71:c2:f5:2d:3a:
a4:9a:a2:a2:4c:d8:45:85:b0:67:8b:0e:8a:6a:08:
5a:59:dc:7f:6d:1b:ff:96:62:1b:3c:7f:01:16:c1:
45:06:f3:3e:3e:07:27:03:ac:98:32:85:e9:14:f9:
aa:7b:21:65:45:1c:49:6d:4c:d1:69:cb:aa:d9:00:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1F:AC:D0:13:5B:D3:11:1A:5A:1E:F3:58:1E:EE:3E:0A:0C:03:FE
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:64:73:61:6d:04:0a:29:ed:58:e5:1a:a6:1c:1e:dc:87:
2a:c9:0e:9d:1a:fe:77:81:4b:22:6c:02:29:be:28:31:20:b9:
f7:e2:49:16:30:fd:90:5a:9b:5b:f3:29:7c:11:8d:cd:78:f4:
96:99:af:16:af:9a:d9:e3:b5:dd:75:8e:10:20:76:96:20:e4:
0e:f7:7b:34:f6:e3:10:de:72:f6:a8:e8:1e:67:e6:62:13:f0:
e4:73:c1:08:84:48:d5:de:6e:80:56:d8:03:7b:48:1a:73:bf:
a8:2d:15:8c:17:02:c5:b6:24:3b:33:18:25:45:e7:09:b2:87:
24:70:5f:88:c3:cd:94:19:d5:7e:bd:a5:72:69:4a:df:2b:df:
19:43:1f:e1:bb:fa:dd:90:f4:66:12:20:81:93:bd:20:fc:f8:
03:36:e8:12:4b:b2:0e:35:cb:ed:c4:db:5d:48:63:59:13:f2:
c2:44:67:7c:80:9e:86:2b:70:f1:40:06:21:69:ec:50:8a:82:
db:16:77:a3:34:1c:8c:51:9b:db:b5:12:db:ee:3c:fc:da:4c:
d2:b5:30:86:56:30:06:fd:20:30:20:27:54:9f:90:47:63:32:
00:c4:8c:31:9d:84:4b:24:4e:80:7e:e6:b9:5c:b3:d0:b7:ba:
bc:8d:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:52 2026 by rpki-client