Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: MuzY0QQ3FL/yv1mDQjbbLoBdqZZcDMo0ruYUXwe2+iY=
Subject key identifier: BD:B7:69:4E:80:50:8E:6E:97:39:5C:ED:81:39:50:BD:68:4C:73:F3
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 019CAEA3D1CFC08D3F7472B55DCF362218AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 13:01:37 +0000
Manifest this update: Mon 02 Mar 2026 13:01:37 +0000
Manifest next update: Tue 03 Mar 2026 13:01:37 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: FkwViW0IYwz5ssRCISry75CvI1nlruc7tMPjyMM+zvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:d1:cf:c0:8d:3f:74:72:b5:5d:cf:36:22:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Mar 2 13:01:37 2026 GMT
Not After : Mar 3 13:01:37 2026 GMT
Subject: CN=bdb7694e80508e6e97395ced813950bd684c73f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:aa:32:ff:ea:b8:cb:a7:e9:7a:dc:fa:0b:
33:4b:4e:8c:d2:a4:81:40:e9:90:6a:9c:ee:7f:c4:
ad:e1:84:68:5f:01:be:f7:a6:9a:2a:16:fc:0d:9f:
73:d2:b8:d1:44:de:e4:5f:b9:ba:d4:ef:9d:9d:d0:
3a:65:82:09:3e:eb:e4:16:ac:16:b4:68:7a:98:8c:
2e:66:5d:99:d5:73:41:de:a3:10:b2:5d:a4:f1:73:
e6:74:13:89:fe:f7:b7:77:46:6b:46:30:c3:83:02:
d7:2d:f7:70:e6:30:01:f2:b2:4d:8f:15:68:af:ac:
88:79:40:64:51:dc:5e:32:02:88:b9:93:ab:39:83:
f0:79:36:cd:d7:cf:11:5d:81:7a:87:5c:19:8c:bc:
dd:5b:86:80:9e:93:d1:d9:df:f1:3a:a9:48:47:30:
48:46:7f:1c:85:51:1a:c6:61:5d:9c:2c:35:29:05:
16:1c:f9:d1:70:6f:1c:b2:45:60:6f:4e:1f:38:57:
3a:a5:38:be:ec:a6:4c:b4:76:f7:72:80:9d:df:69:
d7:bf:d9:76:0f:d6:48:86:4f:7d:c4:a7:12:c8:9d:
a6:3b:a3:c1:3e:43:df:1c:08:23:a7:08:79:cf:ef:
66:d3:ad:0f:22:98:43:3c:a5:df:df:92:7f:55:f6:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:69:4E:80:50:8E:6E:97:39:5C:ED:81:39:50:BD:68:4C:73:F3
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:94:28:30:ec:50:09:a8:bf:f6:7b:43:65:d9:4a:cf:83:7d:
8b:b8:4f:34:9a:9a:d3:b0:e0:ea:e5:6a:d8:94:6e:c6:92:70:
65:1e:eb:98:9d:35:7c:9a:48:45:c6:cb:57:ee:99:26:ad:c7:
5f:f1:46:82:08:9b:a0:52:7c:de:12:c7:c7:7f:28:be:97:51:
32:68:11:e8:a5:06:1f:d0:0c:02:49:b3:e7:d8:32:45:a1:13:
b3:7a:05:fe:e3:6f:59:01:e0:29:12:f4:0d:62:f3:f7:26:77:
8e:47:e4:b6:40:d0:9d:9e:47:1b:16:df:e8:e1:98:06:e6:d9:
b9:cd:c2:e1:f2:d3:47:b6:e5:d8:f8:a3:f7:d5:02:e0:78:4d:
d8:8a:99:00:c4:d7:75:2a:9a:83:98:29:0e:89:cb:f6:2a:41:
e8:14:5f:62:9c:95:d8:08:b3:d1:86:e7:b6:fe:4d:c4:c7:6f:
83:39:09:d8:e7:e6:23:af:c6:e0:18:84:f4:21:f7:40:6b:6e:
2e:bf:51:28:db:c9:43:98:dc:ff:e9:d1:aa:a2:cf:c9:0b:08:
16:8d:26:31:61:77:4a:19:a3:19:85:04:aa:5b:fd:45:aa:b7:
eb:8b:f6:dd:99:93:67:9b:86:65:58:ce:ea:c5:e5:75:3d:c6:
75:53:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:55 2026 by rpki-client