Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: TBvuzMEE9Nv9vxpgHDsmon5XPdizsa47eDgnXvc+yiQ=
Subject key identifier: D7:5F:97:E0:69:DE:BF:0D:9A:62:B3:A3:94:73:D0:6C:10:6D:5B:F5
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019CABD8EB627B1602CC0B8327CA27D708B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 02AF
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: +9xm3IkHSgq86s7ox0YIDh1E1W58NV3Zw8UT9+XxQgg=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:eb:62:7b:16:02:cc:0b:83:27:ca:27:d7:08:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=d75f97e069debf0d9a62b3a39473d06c106d5bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:9b:c1:ff:13:a1:a9:9c:ef:a6:b8:4a:ec:
ee:80:a7:70:8b:e6:11:5e:b9:77:1a:7a:3f:5a:7a:
36:4b:19:5d:88:91:93:4d:fe:31:34:58:6c:76:83:
8e:db:36:ba:09:07:4b:d7:55:24:3a:ec:b7:d7:9b:
5e:01:98:9b:4f:2a:a1:4c:72:85:83:72:68:35:03:
cc:1d:fe:43:67:a1:10:63:22:7c:76:b7:50:cb:49:
7e:24:87:3f:23:27:e3:c7:19:e6:ff:29:58:bc:ed:
c9:ee:c1:a0:57:7b:0b:94:10:83:05:ef:f0:f0:be:
28:5a:e1:7c:0f:73:71:69:62:1e:6f:28:04:d3:88:
62:94:b2:85:93:e9:85:cf:8b:cf:fe:22:ca:e6:70:
ce:16:a9:4e:b1:ee:db:21:62:65:2c:36:dd:ab:23:
be:e1:f5:e4:e4:41:58:ba:c1:07:e3:b6:c8:42:9d:
49:46:7e:a2:e2:30:29:93:80:cc:d2:e3:0d:6d:f3:
17:64:94:75:0a:6b:ff:14:41:70:82:95:44:aa:06:
05:bf:74:70:33:f2:d9:38:51:1e:60:30:a6:20:ae:
69:d4:c7:12:0e:58:a1:a6:3b:19:bc:74:22:d6:ee:
4b:06:c4:ce:4a:68:bb:7a:e7:80:91:c9:0e:69:48:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:97:E0:69:DE:BF:0D:9A:62:B3:A3:94:73:D0:6C:10:6D:5B:F5
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:e5:4b:0f:7f:ab:de:92:7a:92:a5:9f:25:cc:fa:82:a2:
8d:0b:52:7b:92:e6:7c:0d:9e:f3:15:92:5f:63:2f:72:59:58:
94:44:8b:39:39:8b:d7:d9:7a:ab:f6:28:fa:3e:8a:1b:c5:f2:
25:73:12:86:e8:16:ff:69:b9:af:3e:c9:ea:50:34:1e:22:eb:
4b:6a:86:35:43:9d:72:0c:08:65:1b:1a:7a:6c:b5:d7:7f:b8:
b5:c8:ec:db:73:3c:0d:67:6b:21:39:48:4c:62:12:87:b3:be:
81:06:e2:27:42:89:56:eb:1e:36:0f:41:45:fa:5e:18:08:5f:
32:ad:d5:7d:55:01:89:67:8c:b0:aa:fa:3d:0e:ae:39:e8:d1:
3b:4c:00:4c:03:3b:73:08:10:19:c5:8b:1e:cf:ea:14:32:58:
35:df:d0:1d:76:02:6b:c9:0b:f0:d1:7f:35:9b:c3:85:a3:6d:
6a:19:ff:49:14:07:11:ac:9a:a9:2f:30:f1:90:3f:8d:bd:b2:
17:3e:47:13:00:71:81:92:b3:b2:f0:07:ff:f7:8e:a5:de:b8:
cb:c1:12:69:c0:f2:fb:d1:e3:89:3d:8a:8c:3c:e8:d4:fa:9e:
f6:10:a7:61:a5:09:40:b9:80:4d:65:7b:8f:35:ad:fd:37:00:
d0:ea:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:40 2026 by rpki-client