Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: myOyxr9luQ7GK4X19EaYJnAcfcyvW1ANkwYIQKaFhtc=
Subject key identifier: 1F:4F:CA:0C:DF:49:10:FB:AD:B8:DF:81:2B:8B:30:26:F9:65:6E:F9
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019CA86ACEE2746968A1DB51AB4E85E11025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 08:01:37 +0000
Manifest this update: Sun 01 Mar 2026 08:01:37 +0000
Manifest next update: Mon 02 Mar 2026 08:01:37 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: KFK6sGAESnOM7Scw1pT08/70nhIjyXeA/BhGVMfwiYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:ce:e2:74:69:68:a1:db:51:ab:4e:85:e1:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Mar 1 08:01:37 2026 GMT
Not After : Mar 2 08:01:37 2026 GMT
Subject: CN=1f4fca0cdf4910fbadb8df812b8b3026f9656ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:0c:4e:83:1a:d0:27:c3:a4:df:99:e4:4f:
df:78:3c:88:00:1d:0b:ee:ac:29:77:46:16:46:5d:
06:98:a2:4b:c7:86:19:6a:ce:08:c0:c9:c2:b6:63:
7e:06:eb:13:44:95:d3:88:5c:6d:be:58:33:36:b3:
93:b1:d0:5c:0e:1b:b7:c8:07:60:89:1e:bb:ef:ec:
f4:cc:5b:83:3f:92:aa:6f:1c:c1:33:a2:f5:74:1a:
3f:d1:fa:55:a3:22:d6:7d:d8:2e:ad:b4:c7:1b:ff:
c6:94:c9:d5:83:03:47:d9:76:d9:e8:a4:71:54:35:
da:1c:e9:a1:31:41:ac:ba:dc:af:41:76:77:6d:21:
a0:83:dc:31:b3:e6:96:ce:e2:74:ad:7a:8f:3c:a6:
16:88:88:ff:e2:e0:fb:a8:62:d8:ad:9c:01:66:b3:
86:90:bc:f5:47:49:ed:2e:e7:e4:54:2a:53:a1:d3:
4f:92:a7:27:03:4e:98:a4:05:31:60:c0:5b:bf:62:
f6:7a:36:37:a5:84:66:23:82:32:48:79:c0:16:86:
b6:ac:cc:10:f5:3c:e9:b6:dd:79:5e:34:c2:c9:2d:
d0:5a:10:aa:5b:37:07:bc:4c:79:7c:36:7e:31:56:
d4:6f:94:cd:f0:3c:b5:3f:2d:2b:ce:ac:e7:00:75:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:CA:0C:DF:49:10:FB:AD:B8:DF:81:2B:8B:30:26:F9:65:6E:F9
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:c6:8b:a2:32:26:4e:c1:04:f0:62:4a:b1:28:0c:37:15:
2b:a7:a9:0f:bb:77:9a:cd:c1:2d:8a:e1:2d:8a:98:b3:69:43:
0a:d3:91:bf:29:5b:89:e2:96:b0:7e:e1:16:92:63:ec:5c:10:
93:3b:ed:30:c9:d6:0a:e0:45:08:3e:bc:41:3d:63:11:77:21:
51:55:ee:1e:d2:0f:df:67:fe:92:38:44:5d:59:00:d2:5e:75:
fd:37:45:70:be:28:71:fa:61:14:ca:45:ed:ee:3f:d5:df:00:
60:da:d3:17:24:d9:ae:37:ce:d8:c7:43:34:b6:5e:14:98:3a:
ae:46:ef:f2:37:ed:ce:72:39:17:73:45:97:a0:0d:32:84:9f:
25:ba:06:06:ae:c0:d3:fa:7f:e6:d9:f4:d8:75:03:fb:ab:53:
e5:ab:08:f6:59:3d:5e:a3:13:8f:3d:31:ca:73:fe:fa:73:c8:
40:f0:f5:34:15:f6:f3:01:27:ae:9f:18:94:e5:ca:4e:12:a1:
b0:87:0a:99:8e:3d:14:d6:77:46:58:f1:89:13:1d:1b:f6:e4:
8e:c4:1b:d0:dd:21:fd:26:0f:67:41:53:8a:55:56:12:86:aa:
63:a7:8a:71:3b:dd:7e:45:db:3e:da:af:1e:8f:68:28:74:95:
59:16:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:59 2026 by rpki-client