Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: br1dJ6XcsDStdkayqp7p9glEWdasgtHYwW6bSkNvSDI=
Subject key identifier: 12:B0:9A:3E:BA:E7:F6:24:3C:2B:6E:E2:B1:FA:67:41:CA:49:47:50
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019CAAFD686A19C7516131AA36487021F1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0D50
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: apcLr34tN1TlI/TF2kIpxoFJnDkOednmFyAr0vy18aA=)
2: tTSKZ9SBm5TzwVGPFr99l5iaN7Y.roa (hash: 6iyRKX1ykzt8wMyhT1hUZtasJQSEcc9fv+Jwo+YKOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:68:6a:19:c7:51:61:31:aa:36:48:70:21:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=12b09a3ebae7f6243c2b6ee2b1fa6741ca494750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:8e:2d:89:37:d8:35:f0:b6:10:39:48:e4:
f3:46:29:f2:8a:34:2a:07:8c:b8:e8:d6:6f:9f:bb:
ac:c8:aa:58:0b:8f:62:74:7d:2e:30:4c:bd:5d:4f:
fd:20:73:f6:fb:64:d9:7f:96:03:94:a8:c9:e1:a4:
3b:48:5d:0b:fe:c2:f7:e0:5c:ef:f3:4d:c1:4e:94:
c1:70:ba:10:cd:ff:21:2f:e1:90:a1:95:ca:aa:ed:
d2:1f:24:80:6b:df:3e:f8:cf:0f:45:2d:ef:c2:b5:
9f:5c:6f:b2:e9:66:b6:b9:03:6f:4b:76:7b:1d:b2:
fa:6f:f7:b7:ff:f8:21:d3:9f:28:a2:df:35:65:3d:
42:00:54:90:93:c5:11:cf:82:61:59:fa:41:35:1d:
60:99:1a:f6:35:d3:54:e1:2c:c4:5d:77:e2:d5:3b:
4f:47:17:bd:c3:30:f1:e6:4e:f8:be:bc:16:d4:1f:
13:dc:aa:8c:2d:b8:ab:4e:5b:ab:c4:d9:2e:95:2a:
e9:e2:b8:c8:d3:d4:28:bf:7f:bb:f9:20:4a:05:99:
28:8d:f5:9d:72:af:18:11:90:67:f4:bf:c2:cc:30:
e7:2f:49:19:7b:8e:5a:3d:2d:07:10:d2:65:54:5b:
8c:29:56:22:da:02:3d:75:17:73:af:cd:5a:ea:74:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:9A:3E:BA:E7:F6:24:3C:2B:6E:E2:B1:FA:67:41:CA:49:47:50
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:37:4f:00:14:93:e2:4d:ac:fa:53:2a:db:2a:b1:d7:8c:45:
b7:15:38:b8:b1:f8:ac:26:39:ca:d8:d1:84:bb:cb:bd:a5:a5:
7f:95:80:f5:2d:55:6f:bd:c2:60:d5:2d:49:b2:60:c7:46:71:
35:d2:32:dd:07:4f:2a:b5:ac:07:57:36:d6:6a:e4:08:83:54:
38:a5:3b:68:b8:40:ac:d8:8d:b7:ba:d8:b2:3b:c6:b7:12:6d:
63:c9:2b:09:ef:e9:d0:ba:e5:5a:e2:f8:6e:70:a4:ce:cc:71:
0f:cf:9c:bc:36:6a:8e:eb:03:c0:6e:04:5f:21:ee:8e:f0:76:
c1:c4:39:31:65:33:aa:61:90:85:1e:78:4e:92:c2:03:ee:ec:
fc:3e:2c:6a:7e:e8:e4:e9:c1:fd:63:64:d6:80:09:a7:20:0e:
2d:1f:fd:4b:f8:c9:93:62:cb:f0:2e:9c:78:ae:21:cb:05:7d:
89:f3:04:c0:e4:b8:f6:dd:80:b4:51:12:58:ee:86:b4:2f:b2:
63:5c:39:f5:ae:55:28:b3:ca:32:0b:d8:f3:49:68:80:74:ce:
c9:a2:bf:f6:e6:4d:c2:2b:95:f9:05:20:2e:cd:8e:28:6d:a2:
e9:de:ea:2c:05:26:a6:14:31:cd:5a:71:9f:09:e8:9f:dc:93:
3b:4d:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:27 2026 by rpki-client