Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: R1b48Jj++WHjVkIQaMfZsW+kvAXLErins55VExKTHek=
Subject key identifier: 2D:E8:21:17:6D:81:21:AB:59:B3:19:D0:A8:49:C2:A8:CD:F7:65:70
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019CAA8FF538EA189E5DBA52EECC2038A856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0251
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: k81a30W6+8SSRHoGlln/UzUgtV7GzA+TVWhGHaxoWkU=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f5:38:ea:18:9e:5d:ba:52:ee:cc:20:38:a8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=2de821176d8121ab59b319d0a849c2a8cdf76570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:a7:74:cd:da:17:3e:d4:c6:d6:02:cd:62:
bd:cc:4b:89:00:7d:6d:6f:79:89:22:16:a3:88:58:
6a:9a:24:50:32:d4:9c:41:f2:21:36:65:96:d2:97:
57:c2:d2:24:68:3d:3b:09:c2:d2:b9:72:64:c8:be:
2c:ea:5f:ae:69:f9:6d:1d:7e:50:cf:a9:68:11:c5:
a9:ca:50:d5:1a:1a:d1:b9:9a:29:16:5b:78:9c:66:
fd:73:84:b6:c6:e7:b3:60:db:b9:7f:e0:fd:71:3a:
e1:2f:04:93:c4:d5:51:fc:5a:83:4c:cb:26:0b:cc:
5e:e5:a8:4c:76:d8:5e:66:1e:60:55:83:6c:fe:be:
94:4d:15:3b:55:c2:3c:0c:86:94:a8:8a:ac:2b:61:
2d:de:ba:56:b6:65:c9:62:65:44:51:1a:1f:89:f0:
e9:d0:29:71:40:ec:95:d5:a4:f6:47:80:0d:41:b6:
51:fe:84:7b:e3:8d:0e:e7:42:42:9d:e0:0f:f4:63:
ea:a2:c0:3e:2b:1a:4c:60:c7:b9:03:8b:6d:3e:87:
97:3c:8a:cf:77:dc:15:1b:93:a7:57:d6:51:3f:c8:
b1:1c:29:4f:06:70:45:c0:61:7b:49:8a:f8:f4:bb:
3a:53:37:ec:54:67:53:9e:fe:77:14:94:6b:19:35:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:21:17:6D:81:21:AB:59:B3:19:D0:A8:49:C2:A8:CD:F7:65:70
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:24:fa:07:25:fa:39:8e:f1:9d:1f:2a:f3:09:1d:e9:58:
db:2f:9c:77:80:a4:fb:f6:ee:67:2f:5e:6b:32:97:32:3c:47:
8a:21:20:76:93:b5:31:a2:52:30:7a:2c:91:10:50:52:14:54:
f2:4d:1a:01:a0:c0:d3:18:c7:ac:5c:aa:15:a2:ce:f6:a8:02:
8e:3f:1a:f5:79:82:ad:b9:7a:40:44:2c:53:4b:c9:a4:01:a6:
40:18:41:55:f5:48:e5:c8:67:07:bd:45:24:29:c0:9e:9b:c9:
45:4b:fe:4c:67:19:93:36:12:43:47:e7:7c:da:fb:9a:9c:fc:
23:f8:71:52:4c:41:48:6c:e3:d6:19:92:cd:b8:fc:a7:d2:a6:
a9:32:cd:31:a1:f3:e8:01:82:c2:21:5f:00:80:03:65:e0:2c:
12:2f:55:d9:f1:6b:0a:ff:27:fc:51:53:38:0b:8f:ad:df:97:
da:d4:74:4a:d7:96:69:f1:e4:87:20:df:0c:d1:7d:2b:53:bb:
6b:77:b0:de:64:f1:4e:4b:03:36:83:20:d2:ce:11:b4:3e:62:
fe:d1:9f:bf:46:dd:49:5e:9d:32:5c:1a:d5:60:f7:8f:bf:3c:
69:b6:52:c0:15:96:23:90:66:53:b6:f1:a6:1d:3e:8e:af:ae:
db:1c:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:57 2026 by rpki-client