Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: pCazlbhP5zWP4UBfNcBQKR+Ka3kimsiaIeD2uuFy2Ww=
Subject key identifier: 65:40:7C:B5:AA:D4:31:22:8A:86:6F:20:F8:C3:83:AD:F9:66:C6:10
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019CACB5068752777C75A1AF4C250F12C25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 038B
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: wG6Tb8PR5nO6UUg8i/T+Bp9ltioUyzRNc1YE7vTz0ew=)
2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:06:87:52:77:7c:75:a1:af:4c:25:0f:12:c2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=65407cb5aad431228a866f20f8c383adf966c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:63:4e:fa:de:ad:64:31:9d:02:8e:f5:6c:
81:02:7a:cd:fd:10:03:e1:ad:c6:e5:b2:e1:fe:08:
6d:90:77:86:fc:09:3b:6c:1d:d8:df:8c:cf:56:5f:
1f:37:1f:f8:dd:ea:c3:3b:60:00:19:c9:c2:2a:1f:
1b:f7:71:12:10:f8:51:30:2a:bd:df:51:0e:8d:a2:
41:32:de:8b:98:f9:4e:c5:02:21:c6:a3:bb:76:9f:
43:f4:56:cf:c8:b6:a4:a1:2d:d9:b2:d1:c8:a1:f1:
bc:0b:64:94:94:ab:e0:da:eb:0b:1f:d9:82:f5:ea:
e2:6e:86:c4:a8:f5:bb:1b:be:aa:2a:82:56:25:2b:
ff:f9:99:cf:d6:e3:f3:66:a6:83:ba:1d:af:ff:ee:
20:a4:08:b8:33:56:d5:aa:48:92:e0:5f:67:95:18:
c1:88:06:ba:90:a8:f3:97:3a:88:c9:d8:c2:33:b8:
70:89:d7:50:40:02:f6:b1:56:ea:d8:65:11:a3:20:
5d:d9:18:02:5f:18:78:52:b9:a0:d1:b1:90:a2:11:
df:0e:37:39:42:f8:7e:f6:e7:2d:74:d3:c8:d8:c4:
4d:56:80:1e:6b:14:09:f2:80:74:ab:0f:6a:08:bc:
88:03:32:b6:e3:05:f9:65:c8:66:7b:91:c6:88:4e:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:7C:B5:AA:D4:31:22:8A:86:6F:20:F8:C3:83:AD:F9:66:C6:10
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f6:fd:8b:57:37:c6:08:e3:9b:10:e5:55:43:3a:28:91:5c:
64:2d:8e:14:00:1f:54:ca:a5:a1:5a:09:3b:0e:75:89:91:45:
6c:b8:bc:28:42:fe:7f:94:2f:4f:2f:af:54:54:0f:0e:d6:6e:
8d:1e:2e:0b:46:61:2d:ce:37:e3:3b:bb:92:dd:89:25:67:c6:
03:a5:fd:ac:a2:e1:f5:9f:15:c7:bc:89:22:8d:18:cb:d9:43:
ee:c7:18:88:8a:be:e3:35:8e:b9:ee:6d:36:47:7f:d6:2e:2d:
5a:7b:d0:43:1d:fa:31:05:88:72:6f:db:26:6c:76:ae:d5:d7:
f2:19:96:5d:fa:6d:6e:07:94:a4:b7:11:6d:ee:f6:3b:1c:de:
ff:0d:93:9d:7e:1b:09:8c:86:24:fd:e5:6e:0d:f5:ac:47:be:
5c:1c:57:93:e4:72:34:8c:25:f9:95:74:75:3b:40:5e:d6:ff:
f3:94:cc:97:e1:bc:26:e8:f0:2f:b0:7d:78:61:a9:ef:89:89:
d8:f1:f6:f2:3d:d9:22:cb:7f:d6:49:1a:18:d8:64:9f:ae:cb:
db:b1:55:99:30:b7:3d:96:46:45:1e:0a:8f:cd:dc:eb:cc:6b:
aa:fc:a3:a7:75:bb:9f:6a:38:80:53:77:01:17:45:82:25:ee:
5e:bb:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:09 2026 by rpki-client