Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: UNPxbdWvxLjiGM72a/a0l5Lbf6tMKKkVVFTpsye343o=
Subject key identifier: 4D:76:D8:D0:82:0B:3D:55:6F:1C:BC:3F:3B:27:3B:96:AA:3C:77:8C
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019CACB4E1B13E1C4953BF4D25B21D07A3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1670
Signing time: Mon 02 Mar 2026 04:01:01 +0000
Manifest this update: Mon 02 Mar 2026 04:01:01 +0000
Manifest next update: Tue 03 Mar 2026 04:01:01 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: jUf7GPit7naAucgFqIPUx2tP1nZ8qTdD+W9yLrQq+Ag=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e1:b1:3e:1c:49:53:bf:4d:25:b2:1d:07:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Mar 2 04:01:01 2026 GMT
Not After : Mar 3 04:01:01 2026 GMT
Subject: CN=4d76d8d0820b3d556f1cbc3f3b273b96aa3c778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:18:cc:17:e7:53:ee:dc:34:82:73:b4:a6:
ae:fb:9a:29:70:f0:0b:66:3f:3d:05:a9:9d:ea:27:
9b:fe:51:b4:11:fe:a4:29:40:9e:fb:43:16:ab:8e:
45:c9:b6:2f:f9:77:cc:44:83:a6:85:4e:0d:dd:91:
0b:89:2d:8b:c6:d5:ac:bf:36:fa:3f:05:20:89:49:
e7:b1:36:19:67:1a:8b:79:3c:78:08:98:96:f9:a4:
24:c9:44:7a:de:09:c7:f5:ba:e8:d8:48:82:ea:ab:
49:04:0b:a5:c1:6c:25:a6:6b:07:1a:34:f1:72:1d:
be:7d:de:c0:d2:3b:63:aa:7b:b8:7a:07:90:85:09:
4d:57:fe:95:8a:54:0d:d8:41:3f:cd:ac:8e:af:3c:
59:32:1e:88:f9:a4:dd:7c:26:f7:9c:47:87:35:29:
d8:84:ad:34:d4:8d:b6:3b:d4:b1:fb:e3:58:8c:bc:
97:f0:06:22:b5:51:3f:8a:e2:dc:f8:eb:2d:f9:64:
b5:3f:67:13:e4:b7:d2:fa:b3:4d:b9:28:9c:d4:6b:
b9:e7:2f:bd:5d:61:1c:0d:4c:80:41:9d:33:15:f4:
f6:86:19:9f:a7:26:a3:6d:08:96:69:e7:b8:bf:b3:
ee:80:47:f7:4a:be:a7:74:4b:70:3e:d5:79:0c:14:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:D8:D0:82:0B:3D:55:6F:1C:BC:3F:3B:27:3B:96:AA:3C:77:8C
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:60:f3:25:26:55:2d:16:1f:2d:f1:aa:63:86:2f:ae:c3:
9e:a9:5b:21:b5:1d:27:66:56:2e:b3:30:88:48:d7:4f:89:0d:
1d:69:9e:d6:59:42:df:ea:74:2e:86:21:42:2a:17:e7:9b:36:
42:1c:11:4b:9f:22:9f:8a:ea:1f:0f:89:9e:0b:e5:fe:a7:cb:
f8:64:98:af:26:2c:57:08:65:34:67:68:40:7c:1a:e4:33:bd:
36:2c:b6:68:6e:bb:0e:3b:87:24:1f:8a:8a:ef:0f:93:0f:96:
c1:cc:7c:4e:2e:17:cc:3d:de:d1:33:c6:a2:dd:2e:1d:ab:33:
ab:78:7b:a2:74:a6:e9:d5:3a:6d:f0:4c:5a:fa:74:93:8b:be:
37:64:3b:12:0a:7c:9a:2b:25:29:83:9e:9e:5d:62:2f:70:d9:
92:6a:c1:f0:06:2a:37:d0:18:04:6a:ba:80:f6:10:5f:0c:f3:
3e:de:ec:14:38:e8:ea:2a:13:70:09:40:2c:34:51:23:e1:ea:
f8:38:bf:8b:13:9a:f2:ae:77:20:80:53:3a:57:a8:d6:a0:6e:
ee:62:e1:a9:39:2e:07:90:5b:88:99:4e:3a:25:83:39:35:9d:
74:d2:67:02:a5:38:d7:54:12:c7:9c:1a:69:58:1c:1c:d9:50:
be:87:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:14 2026 by rpki-client