Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: 2WG5c4/5G/MPecr1IT3UXi7DD5QGXXbFb8uGWlOwppU=
Subject key identifier: 39:6B:99:60:D3:88:05:0E:B9:C1:9B:30:65:5B:A2:1C:3F:E9:CB:74
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019CAAC613D513DB7923B895437CDCAEEE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 14D9
Signing time: Sun 01 Mar 2026 19:00:33 +0000
Manifest this update: Sun 01 Mar 2026 19:00:33 +0000
Manifest next update: Mon 02 Mar 2026 19:00:33 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: +hSbq3QmFqxdEgWFpYZCwNG/ebduEh/XFdRB174aoIA=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:13:d5:13:db:79:23:b8:95:43:7c:dc:ae:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Mar 1 19:00:33 2026 GMT
Not After : Mar 2 19:00:33 2026 GMT
Subject: CN=396b9960d388050eb9c19b30655ba21c3fe9cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:b1:81:17:95:d7:84:6d:99:d4:5b:c2:95:
07:47:3e:fc:ba:32:0f:a4:b6:6e:15:b7:26:09:3b:
02:b7:d6:5e:1f:5e:33:b2:5e:71:a8:cd:57:3d:f0:
fa:d9:aa:4e:87:e2:04:f6:1a:c3:5e:a9:04:25:2f:
2b:c6:ee:30:92:54:fb:92:95:d2:f2:dd:60:06:c9:
d1:ea:6b:cb:4c:f8:89:72:b6:ba:48:b9:9e:18:3b:
89:cf:8c:27:24:17:81:09:f2:f0:86:73:01:dc:0e:
b7:f3:c8:8d:d6:12:d8:dc:af:2f:33:cb:97:41:f8:
a9:76:e4:ad:90:5e:80:62:4d:85:75:8b:f8:77:2c:
19:12:8b:bd:71:22:97:9b:6f:8c:74:90:ff:f7:04:
54:da:ef:fe:d5:0e:dc:30:42:4e:ca:d2:9c:71:1b:
e4:b9:54:02:11:b7:f0:2d:78:0f:4d:c8:70:a2:f6:
4d:0d:3a:55:ff:b1:6e:44:3e:24:a8:5c:e3:71:db:
b6:2d:12:f0:9d:7e:cd:f7:db:b8:9b:c2:03:b6:be:
ef:ae:69:b6:28:1c:5c:75:e5:59:6f:1f:b7:bb:e7:
7c:c0:93:04:f1:3d:07:46:4b:9e:15:4c:dd:03:cc:
52:66:11:e9:8c:65:de:88:da:c9:cb:3f:66:81:7f:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:99:60:D3:88:05:0E:B9:C1:9B:30:65:5B:A2:1C:3F:E9:CB:74
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8f:50:cf:5f:ad:d0:a1:db:3a:d9:fb:db:52:e4:a7:14:f4:
fb:b3:8e:77:e1:08:54:a4:aa:8a:18:eb:b6:93:13:3f:a0:a6:
00:85:ab:d3:e9:76:1c:8c:19:bd:ee:e5:65:ae:86:61:fa:3b:
17:76:6d:f5:03:d7:c7:a7:38:30:07:d2:47:83:70:7e:53:64:
ee:4a:ae:df:21:ce:24:84:b9:23:14:b5:2c:e6:bf:26:3a:3e:
63:c4:ce:a8:16:5e:e7:b6:49:85:cb:1d:57:59:8d:0a:81:60:
32:41:17:c3:45:a2:fb:dc:d6:71:2e:9c:36:67:52:f8:e6:a5:
ec:af:4a:d8:bd:26:cd:59:d0:6a:6a:11:a9:c8:b9:04:85:2d:
80:bf:c8:bf:a7:77:96:d4:36:5f:42:d0:a3:6e:06:8d:03:3d:
c8:b5:86:42:69:df:c4:a0:4e:7f:48:d3:d3:b0:d7:31:b7:eb:
73:97:8b:cb:96:1b:5f:ae:2a:b6:a0:be:e9:0c:bd:cc:be:65:
60:1b:c2:c2:c8:58:01:d0:5f:ce:fd:c2:c6:c1:47:aa:96:26:
f3:fe:9a:cc:ba:27:22:ee:5e:f6:a1:6c:16:df:f5:82:75:38:
38:43:4b:2f:83:28:65:b8:30:12:60:23:ee:1a:ed:4f:3b:ba:
52:b1:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:26 2026 by rpki-client