Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: Ir+a3CBNE6IGP7ToPFaIpR/0I3Xz4b7nWqw4lcxkKQw=
Subject key identifier: AE:BC:72:DC:EF:3B:0D:35:02:5A:0D:51:D8:35:5E:AA:3E:4E:45:BD
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019D38D3508F15D67193D7234B875067C2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1071
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: 7tpS3qSO4iKzGQ3WDLEQzKngoqzOUn31eW5tp3QM+O0=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:50:8f:15:d6:71:93:d7:23:4b:87:50:67:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=aebc72dcef3b0d35025a0d51d8355eaa3e4e45bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:ee:09:a2:cb:76:19:03:e7:2d:e9:de:86:
3d:31:a7:99:4a:0e:e5:a4:b6:4b:db:d7:9b:82:6c:
97:17:a9:52:30:7b:0d:a8:c0:91:9b:58:af:c4:4b:
6a:99:2a:f9:5a:95:0f:3f:1b:50:fb:41:16:22:eb:
46:ff:1f:6a:41:35:20:29:0f:1c:67:22:00:6a:3d:
70:f7:c3:5c:f4:e2:d0:db:8a:47:64:bd:c0:17:6d:
4d:82:5d:cc:74:78:0a:e6:80:84:ee:be:22:0f:ac:
22:8f:ed:2a:ea:89:f2:d8:61:de:77:63:ff:f1:0c:
29:5a:94:53:af:67:8d:fc:29:0a:d9:f2:23:cd:d7:
23:6f:dc:c4:81:69:be:3a:53:93:f2:1e:d0:78:d5:
03:5f:94:a1:f2:f3:2e:0f:25:1d:e0:8f:ef:f1:d1:
98:5c:2d:db:4d:34:bc:52:6a:c8:01:ae:92:a5:1a:
3a:55:9f:62:19:e8:c9:b1:7c:6e:5c:55:04:17:b1:
ec:3d:e1:dd:b2:7e:da:39:25:c0:f2:95:30:c6:36:
cb:38:9c:43:60:80:7c:89:08:4b:df:2c:62:f9:2d:
7d:db:d0:5d:69:81:7d:2f:d3:82:34:d9:ea:f5:6c:
ad:97:d5:04:1d:ec:54:48:7d:87:57:9d:41:ca:2e:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:72:DC:EF:3B:0D:35:02:5A:0D:51:D8:35:5E:AA:3E:4E:45:BD
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:95:d6:39:db:50:a9:6c:bf:ce:1c:7f:a0:f8:a5:cf:36:
98:a1:39:db:3e:7f:b8:9d:74:06:42:c9:1e:84:b4:db:d3:50:
d2:26:e7:50:5e:5b:0a:6b:4c:3e:80:5b:05:61:02:f0:c1:6a:
67:a2:ce:09:0e:ac:17:a9:fa:10:1f:77:02:04:91:dc:1e:2d:
2f:6b:61:4d:b1:b4:08:42:d9:46:88:47:71:e8:7a:62:ed:3d:
42:00:95:0e:58:88:ad:6d:51:1a:3f:5c:da:19:1c:59:9c:f6:
96:39:50:9f:81:99:00:9a:fa:24:6b:c4:1e:2f:31:43:8d:79:
cf:46:c2:3f:0a:ad:63:6b:20:15:0f:d3:e5:64:1d:10:eb:a4:
57:9b:2d:d8:bf:0b:0b:83:92:1c:92:57:89:58:f9:b2:de:20:
5f:e2:09:dc:17:bb:86:fe:2f:61:d5:18:b3:03:1b:e4:c6:8b:
f4:a8:b2:cb:a9:4f:19:1c:5f:9b:75:29:ae:9a:d2:9c:ac:79:
73:7f:08:93:e9:97:55:5d:f8:a1:2c:b8:c1:ba:eb:b1:6a:f5:
74:80:42:11:93:83:10:38:bc:84:67:e1:f6:f6:a8:90:76:20:
40:61:01:40:4c:30:fe:00:ca:44:94:36:09:fa:fb:09:75:90:
1a:38:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:22 2026 by rpki-client