Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: /+OW/bIWuGmtKoPBzen+Zqp6D9tJP+6OUHx+n7RKdgM=
Subject key identifier: D8:93:5C:11:8E:BF:55:28:01:72:58:E9:E6:AF:EA:E5:E5:50:0B:FB
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019D3A1CE474CFF06A683B864D737BAE1877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 15B7
Signing time: Sun 29 Mar 2026 15:01:05 +0000
Manifest this update: Sun 29 Mar 2026 15:01:05 +0000
Manifest next update: Mon 30 Mar 2026 15:01:05 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: ut/toft0qlGu43p5V83hwR/9GCKqbVF260Yzsra+TFg=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e4:74:cf:f0:6a:68:3b:86:4d:73:7b:ae:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Mar 29 15:01:05 2026 GMT
Not After : Mar 30 15:01:05 2026 GMT
Subject: CN=d8935c118ebf5528017258e9e6afeae5e5500bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:1d:9f:98:b9:4b:f2:52:05:96:1d:39:ee:
fe:1d:9c:77:82:1c:00:26:6f:bd:dc:5a:77:e1:76:
1a:6b:81:8e:6c:a2:14:53:5b:02:f3:1b:2a:49:d6:
12:42:9f:05:bd:2b:23:be:c7:c1:6d:34:ef:43:01:
a2:93:05:20:f6:43:3b:59:e0:32:81:5c:f1:aa:e4:
ed:aa:14:78:9b:95:c8:12:bf:67:d7:25:05:65:67:
8c:dc:ed:01:9f:54:af:70:53:44:e6:e9:7d:14:91:
3f:e7:f8:38:b3:09:79:6e:36:39:35:be:8f:ba:bd:
4c:e8:93:1b:bd:ab:7e:ae:41:74:d7:4d:99:c1:d0:
19:74:8c:b9:ba:ec:52:84:bc:39:0b:0d:46:00:95:
ad:cb:ba:56:15:dc:62:fe:df:3c:11:fa:0f:5b:1a:
55:5c:66:bf:06:9d:f6:82:dd:7f:43:c5:38:03:cd:
7a:8f:59:69:6c:69:a6:6e:b2:f0:fe:d2:7a:e3:2f:
ab:ee:70:5b:97:77:6b:35:80:c4:b5:6c:94:b5:c6:
7a:29:ae:ce:51:5e:97:79:8e:57:39:c7:4d:f8:48:
f4:36:47:cc:94:9f:b1:e9:50:c8:aa:d5:1e:10:34:
07:e1:50:d2:c0:56:f0:45:25:48:c7:1b:0b:11:7e:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:5C:11:8E:BF:55:28:01:72:58:E9:E6:AF:EA:E5:E5:50:0B:FB
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:03:e9:61:b7:54:35:d4:d9:42:3c:a4:2b:8a:80:c2:48:
e4:a2:a9:91:fd:f5:16:36:4d:fd:3d:99:b5:a2:f2:6a:5a:3f:
a7:4e:8a:7a:97:12:27:97:4f:68:1e:47:2b:27:44:80:a4:1a:
74:32:1e:b8:4a:90:b1:18:d7:25:8c:4e:d2:5f:2a:dc:85:db:
c9:ab:c6:d2:17:05:5c:78:49:24:08:1b:7f:cd:77:7f:53:7d:
c2:8d:02:f7:35:05:b7:29:dd:7c:fa:5f:d5:0f:32:b7:fd:2f:
87:34:e0:50:37:8e:35:04:30:f6:66:85:d9:b8:a6:4f:88:d8:
8c:3a:db:94:80:98:14:ae:36:e7:c0:46:b2:06:2d:da:a8:6b:
50:58:64:ea:0c:11:55:92:b6:4e:09:54:ba:46:da:24:51:2b:
0b:c9:7e:0a:49:db:d2:79:f7:48:2e:6e:6c:60:e4:ca:fe:d4:
a2:eb:18:cb:d2:ed:93:aa:88:23:d5:44:07:91:ca:9f:c8:b3:
ba:72:89:63:75:54:06:f0:8d:1c:de:2b:6a:1b:24:da:a6:31:
36:0d:f4:f9:30:d4:68:36:7d:b0:01:c7:55:e2:83:2d:e3:0e:
19:2a:66:fa:bc:7d:00:03:ee:a3:55:b4:64:21:3c:19:99:d4:
a9:8b:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:48:18 2026 by rpki-client