Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: 5004uoZ8ZzaW75If1hMkddm9Kr/uj5rs80tjjlerjf0=
Subject key identifier: D5:E2:C0:76:EE:5D:D2:03:FE:73:2F:75:23:A3:3B:6E:5E:5C:A2:38
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019CAEA321059AD85EBF5209D26BF9EDB2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1595
Signing time: Mon 02 Mar 2026 13:00:52 +0000
Manifest this update: Mon 02 Mar 2026 13:00:52 +0000
Manifest next update: Tue 03 Mar 2026 13:00:52 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: g+T5wH9SJ8hsOeE1ukZ37poZ07s4hmEMwUf46GrVwuo=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:21:05:9a:d8:5e:bf:52:09:d2:6b:f9:ed:b2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Mar 2 13:00:52 2026 GMT
Not After : Mar 3 13:00:52 2026 GMT
Subject: CN=d5e2c076ee5dd203fe732f7523a33b6e5e5ca238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:38:ef:6a:12:86:00:8b:06:3c:ca:43:31:
a3:cb:53:a3:0a:f1:4d:c3:1b:13:eb:7d:45:80:aa:
e3:1c:e8:d8:38:c0:06:0c:b5:02:e4:6a:68:8c:11:
62:a6:a5:1f:eb:45:68:cf:f4:4a:35:72:4f:07:6f:
46:ec:c5:7a:23:dc:b0:ba:b8:2b:66:3a:96:f7:e0:
4b:0b:39:56:e6:1a:d1:6f:09:72:15:32:de:00:a5:
06:b4:91:6b:59:4f:fa:97:4e:ab:d7:cc:ec:d3:27:
a6:df:b9:76:dd:f4:43:32:b6:b2:41:13:24:fe:78:
9b:03:84:cd:8d:fb:3c:b7:be:08:2a:ea:63:e9:8a:
ca:31:92:c9:fd:7e:44:c8:bd:7b:68:fe:26:a0:02:
a9:35:59:29:7a:d8:a2:04:a9:ad:0f:96:71:dd:a1:
71:bb:93:9f:9f:81:dc:e0:c8:f0:85:55:6a:64:26:
14:48:72:b8:8c:dd:90:4b:0a:ed:b1:c9:39:59:f0:
f5:4f:7c:4d:1d:38:f7:60:b9:00:84:1f:e9:b0:70:
57:22:0e:f2:3e:81:7d:ec:57:78:4d:e3:9c:cf:90:
84:b3:6c:98:ad:49:f2:23:02:2c:92:d8:7c:61:98:
67:80:99:97:d2:5f:36:88:67:4b:d0:00:70:34:80:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:C0:76:EE:5D:D2:03:FE:73:2F:75:23:A3:3B:6E:5E:5C:A2:38
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:cb:91:cb:a2:36:b3:e3:dc:63:af:1c:a9:bb:b0:9d:e4:
4b:34:e3:46:bf:2a:f5:8e:76:6f:23:4f:ce:4c:6a:e5:45:e7:
e7:03:2d:c7:90:e0:2f:0a:1b:6a:36:43:19:43:62:25:cb:d9:
3e:93:3e:0d:ee:e2:be:65:52:2e:64:5c:fa:3d:b2:9f:13:4f:
23:28:ee:b2:ef:e4:fb:10:5b:77:97:73:24:49:82:ae:7d:b2:
29:02:b9:2b:63:f3:b7:13:fb:43:04:68:13:ee:db:b9:57:a2:
db:16:ec:32:6e:7f:8d:ee:00:ec:3d:85:d8:98:f5:46:ee:91:
2f:59:36:a2:2b:3a:75:f8:ac:47:b4:fa:c3:8c:a4:b0:a1:89:
d6:e8:c1:79:b7:02:47:97:84:cd:c1:9c:dd:80:68:03:13:e1:
e2:20:fc:55:7a:3b:b5:02:9b:a4:37:90:8f:b8:ce:1b:84:da:
60:e7:62:f8:48:a2:3e:73:ba:b1:8f:6f:f9:4f:34:d0:76:83:
08:bb:d6:24:cc:5d:76:bc:c2:cc:fc:b3:33:99:d2:c7:2d:28:
97:96:80:4e:13:ce:f7:5b:1d:70:7b:67:c4:67:7a:cc:56:24:
26:cf:db:63:59:91:eb:3f:84:92:83:c4:78:91:f8:b5:cf:de:
15:60:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:49:01 2026 by rpki-client