Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: mpA6dfUNykl3VNPRn0hr0perDMOjqUrRm+sVE+pWk+s=
Subject key identifier: 2D:DC:E7:62:F4:24:C9:EF:7F:21:FF:35:94:E3:8F:BC:5E:2E:59:DC
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019CAA8F68FA15699D6D039FDC49A773F4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: Xzioj6+OC4cTU+XD/PmVrzeJiN4EKipdemvjMXzRIwY=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:68:fa:15:69:9d:6d:03:9f:dc:49:a7:73:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=2ddce762f424c9ef7f21ff3594e38fbc5e2e59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:06:58:79:85:2e:0a:f1:35:25:c9:f8:5f:
83:e8:a0:a9:c5:e1:6a:90:3f:f8:df:01:ab:a5:8c:
9a:91:c3:d8:d7:84:f1:7f:8c:1d:ad:92:47:cb:43:
81:18:81:fa:d7:b6:df:a6:e5:1f:d4:a7:12:a6:43:
88:96:fa:6b:e3:75:5b:d1:3f:7d:aa:a3:2c:41:a0:
c5:4e:ac:02:e7:19:9d:95:a0:76:49:41:2a:f4:c5:
d5:34:86:98:8f:4e:61:aa:41:b8:13:4b:9f:35:b0:
61:44:73:3a:72:7a:e9:6b:10:e5:fa:73:23:76:65:
71:90:55:cb:aa:d3:dd:d4:68:8e:8b:f7:34:b5:7f:
5d:37:c4:5c:79:4f:19:4c:96:78:a7:0d:87:96:20:
b6:a9:20:0e:60:8d:75:99:a0:18:4f:b1:0d:0a:96:
9e:e9:f6:05:19:0e:17:f9:9e:0c:34:d8:fd:21:ec:
dd:42:67:62:c9:63:9e:a9:b2:d1:b4:cc:2c:4b:49:
f6:28:43:bb:2f:5e:5d:6b:36:59:c5:23:b0:11:51:
d0:4e:60:ee:73:0a:21:0c:0b:8e:99:ce:8f:a4:5a:
e5:2a:6f:03:61:6d:38:08:e4:78:b4:23:9a:71:bf:
bb:6b:e6:23:49:92:42:76:f8:15:9b:34:4c:37:87:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:E7:62:F4:24:C9:EF:7F:21:FF:35:94:E3:8F:BC:5E:2E:59:DC
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:64:e6:98:fa:8a:48:2c:bd:f8:42:da:ed:ef:aa:c7:24:9f:
d6:1e:31:1f:10:92:57:e5:a7:39:98:07:38:84:ed:e1:17:39:
d8:7f:97:f3:3d:d9:d4:40:4c:37:fa:a9:bb:49:5b:14:6c:c1:
90:a3:cf:33:82:c0:08:4a:b0:e6:4e:3e:dc:4d:ca:7a:68:4e:
c1:2b:1e:ee:cc:3d:36:09:5c:97:1a:fd:63:86:df:e7:91:87:
17:78:11:b1:f2:00:c6:56:c7:c9:7e:59:8d:6d:cb:3e:91:18:
8f:c7:0d:42:c0:69:84:2c:dd:44:6d:1f:f1:32:29:38:76:c1:
2b:b7:3b:4a:52:3d:f7:c8:92:e9:5e:da:ef:61:5d:6f:17:18:
41:bc:6b:7e:8d:0f:c9:d7:3a:47:1a:5d:25:a3:05:b8:96:c1:
4d:bc:c0:9b:99:7e:65:62:17:25:6a:f9:74:20:a2:a8:fc:8d:
c9:21:1a:07:84:43:ca:17:f1:db:f8:e4:bd:46:02:c7:77:0a:
2b:d6:b6:d8:6d:62:1b:e9:a2:22:91:56:da:27:54:5e:9d:02:
36:a7:0e:e2:6a:31:9e:60:91:d3:fc:cf:e0:d0:19:fb:29:9d:
44:a7:79:e0:08:07:e2:6f:9f:36:71:4e:50:f8:e0:29:1d:5f:
10:ab:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:08 2026 by rpki-client