Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: am6QaCOqyadpWPpV4sq0mXNwWqZGtMiYj+nr+GAwfAk=
Subject key identifier: A3:12:5E:24:B5:AD:E6:90:33:7A:90:34:7E:B7:4E:02:F7:7A:E8:CB
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019CADC8424B0FADEBFF2B686E5B8418B596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:48 +0000
Manifest this update: Mon 02 Mar 2026 09:01:48 +0000
Manifest next update: Tue 03 Mar 2026 09:01:48 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: mUtg2LXueJKzqhZRWPkMK4jsjRP5Wnt0S5E/7Z+vg0o=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:42:4b:0f:ad:eb:ff:2b:68:6e:5b:84:18:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Mar 2 09:01:48 2026 GMT
Not After : Mar 3 09:01:48 2026 GMT
Subject: CN=a3125e24b5ade690337a90347eb74e02f77ae8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:4f:ee:ea:0b:eb:b8:9c:d0:a0:2b:a4:1c:
f4:d9:c9:0b:9d:4d:5f:cb:cc:07:ce:b3:e0:7b:00:
eb:7f:28:d8:d9:9d:c5:6c:d9:35:55:7a:16:f9:a5:
7f:3c:4f:fb:99:29:4f:72:f6:1a:3c:ca:9d:d4:11:
74:88:02:6f:62:af:ea:7b:2c:8d:78:35:85:69:f0:
3a:f8:55:e3:8f:51:fe:1a:7a:30:05:7f:9f:a5:27:
9d:c7:42:4a:17:49:57:e7:b5:47:b5:4d:b4:29:7d:
a7:30:39:6b:7f:09:66:84:1b:fe:a7:71:23:6c:e9:
21:2d:f9:84:f3:23:db:c1:e6:67:0f:c0:96:68:96:
9c:0e:14:8c:36:5d:21:21:d5:be:77:8b:9c:b3:6b:
7c:83:fc:a5:58:ac:2a:8c:03:b1:e0:b1:80:76:40:
80:46:59:d3:1b:8e:96:45:14:0f:2b:b0:5b:e1:75:
81:99:93:13:77:70:23:44:1a:61:ff:c1:45:46:fc:
b3:d3:9e:f1:b8:fe:a4:07:8c:28:31:84:07:3b:a7:
70:ab:4e:94:f0:b7:cd:6d:83:3a:1e:a7:73:de:5d:
88:25:c2:e5:83:cd:08:2d:79:00:02:4c:ce:b6:0b:
c5:48:8f:36:3d:0f:8c:58:5a:da:b1:d4:e3:f3:4f:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:5E:24:B5:AD:E6:90:33:7A:90:34:7E:B7:4E:02:F7:7A:E8:CB
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:6a:42:4d:00:b4:ab:1d:45:fd:6f:1f:89:48:66:97:3f:
03:ee:e7:9e:81:be:0c:7d:1e:6b:91:b4:6c:50:12:3f:0f:36:
f7:42:d9:16:2e:de:9a:9d:95:31:c7:b9:5f:55:71:27:75:90:
4b:40:68:eb:14:6d:7a:77:38:78:16:ac:3d:37:20:d1:36:c4:
8d:9a:5e:6d:25:46:ea:ff:f1:9c:ad:6c:cf:44:f5:bc:22:ce:
8b:8e:1b:87:57:cf:4a:0d:b3:55:82:b0:f8:d0:d9:1d:22:af:
ec:1a:d1:7c:9b:2b:12:a0:2f:87:34:e8:65:09:c7:4b:be:30:
84:b6:59:b6:67:48:7f:59:76:9f:81:61:0f:b1:e4:be:c6:29:
04:98:0a:0c:d5:97:49:cc:d1:29:57:97:c0:29:2a:8c:8f:2d:
cf:f2:ad:10:fa:ce:35:1c:ba:aa:37:b1:07:6c:11:b8:bd:e8:
3e:81:77:6d:5c:fa:6f:d9:53:82:f9:6a:96:fe:27:7e:4a:44:
62:94:b7:00:7e:54:65:f4:a2:69:31:ba:9d:5e:a5:f7:95:5d:
04:b5:81:8f:86:8b:22:5b:ac:23:bb:4e:da:f9:d5:60:0d:a9:
c2:04:74:bd:d3:fb:1f:93:36:d7:ad:9f:0e:5a:aa:7d:53:de:
58:07:eb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:25 2026 by rpki-client