Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: wX1TtpyOMkYIuPVMtN/3G5FeN5jFspzYHjJrnKtWgzI=
Subject key identifier: 10:32:F7:AC:5E:32:F7:F9:C9:16:A4:58:DF:44:46:35:4F:B9:7C:BD
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019CAAC66059637757410B4F698275795A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1593
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: KmRNwKwpzX2kRmNbmtPF0v1iVtWOZiXYL6rysBSrV4Y=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:60:59:63:77:57:41:0b:4f:69:82:75:79:5a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=1032f7ac5e32f7f9c916a458df4446354fb97cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:13:0a:04:ac:a7:b0:d5:4a:e5:3d:f0:a3:
7d:3e:19:78:88:73:ac:f2:35:68:19:56:aa:a0:cf:
7f:d5:ff:52:fb:29:6e:aa:b6:99:f6:fc:68:b0:b8:
40:eb:ed:23:8c:db:8f:e4:ac:0d:bc:b1:53:ed:0d:
f7:69:8f:99:8f:e4:0a:7a:0b:a1:52:52:aa:ed:72:
31:80:27:88:a4:52:d8:9e:90:d9:85:4f:fe:2e:e5:
d5:b8:89:1a:65:95:6c:60:1d:7a:a2:75:f5:3a:c8:
98:f5:fa:f5:2e:c3:c6:c4:bb:31:bd:e7:c9:b4:8a:
9a:37:33:96:66:82:05:15:00:b4:58:47:4c:08:84:
bd:92:64:74:03:d9:26:e8:5b:f0:05:0c:d0:58:2e:
5a:81:d0:ad:f6:e5:4d:81:a3:bf:2d:8e:2c:01:fc:
17:91:b5:8f:ae:75:5c:38:1a:48:f7:76:00:af:28:
66:73:60:00:a7:97:a9:66:82:ed:8b:24:85:e0:77:
77:2f:1b:15:02:d2:12:38:89:ed:69:bf:e6:84:1f:
06:d2:df:77:a7:b0:c0:76:22:34:33:f4:9c:d9:f4:
6d:f6:f4:94:9b:8d:82:13:53:ea:10:d6:98:2b:36:
52:aa:75:e3:1b:cf:6b:15:26:47:95:55:b3:54:39:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:F7:AC:5E:32:F7:F9:C9:16:A4:58:DF:44:46:35:4F:B9:7C:BD
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:78:dd:47:97:ef:6b:8e:64:93:9b:58:eb:4c:62:f0:8e:
d0:34:95:49:51:35:87:a7:bd:1d:e1:20:60:96:77:11:05:f8:
0d:61:94:71:3c:05:25:79:61:a0:60:e6:76:46:5e:f1:b8:71:
11:fd:a0:43:c8:22:ac:6d:e2:cb:e9:11:91:20:52:b0:5a:4e:
7d:69:dd:72:aa:80:09:2f:e1:7c:1a:80:7e:6e:be:8d:e8:bc:
4b:50:d9:71:c2:09:35:85:ea:cb:b9:bc:d2:4f:54:0e:05:a5:
46:6b:aa:f2:1a:d9:c5:09:86:24:fc:4d:e4:31:31:96:4a:c2:
92:cd:9d:6a:b0:f5:af:85:90:f6:f4:ac:06:07:df:40:45:68:
62:84:11:f9:53:a2:72:4d:0f:b1:59:55:84:bb:78:b8:3e:60:
28:60:d1:14:23:bc:b6:25:6c:f1:e8:5d:1e:63:51:bc:f1:d4:
bc:e7:83:f9:95:e5:85:39:81:7f:38:64:f3:95:9c:65:c8:1f:
fc:87:31:19:a6:8a:03:37:a6:a7:02:81:46:3f:24:55:e2:63:
40:43:a5:7b:82:e4:27:3e:0f:ff:40:4f:fe:12:2c:1d:84:64:
f8:31:db:a8:2c:66:b0:8a:36:58:fe:2b:4a:79:98:bd:58:14:
7b:5b:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:51 2026 by rpki-client