Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: qYVTUtPY65F460mzZg7COMl1NQ3zlTecm/xxyvt9fH4=
Subject key identifier: 13:CB:0B:A3:F2:4A:FD:B2:01:A5:CA:3E:54:49:38:F4:E2:69:D4:0B
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019CA97D58C1A2CDE7D56CAC83D871B8FD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 13:01:30 +0000
Manifest this update: Sun 01 Mar 2026 13:01:30 +0000
Manifest next update: Mon 02 Mar 2026 13:01:30 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: 4KJRXNeiA7KjUkCIj40KQJxTJbN4ZGczk7ZlSerkR/M=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:58:c1:a2:cd:e7:d5:6c:ac:83:d8:71:b8:fd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Mar 1 13:01:30 2026 GMT
Not After : Mar 2 13:01:30 2026 GMT
Subject: CN=13cb0ba3f24afdb201a5ca3e544938f4e269d40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:c5:a4:20:70:79:bc:f4:d2:fc:e4:e6:f0:
7f:4d:a5:f6:6f:46:a4:21:ab:ba:91:c1:34:4e:65:
4e:11:ea:57:11:67:47:08:b6:9f:11:0f:d9:76:cb:
fb:70:df:8e:c8:0f:53:22:5a:a7:99:15:ef:6f:e1:
86:89:fe:dc:59:3a:10:f4:62:aa:b1:08:45:2e:e2:
88:e8:a3:8d:49:ba:b6:16:77:ad:db:36:a6:61:ce:
5b:8d:f2:3e:98:49:7e:40:6c:a3:ad:9c:0d:b4:90:
68:cf:d0:52:d2:28:3c:c6:44:91:a7:87:e2:56:6c:
00:8f:9a:22:96:61:6b:4e:c1:5f:c1:17:ae:84:b3:
8c:a0:9b:28:44:dd:c7:9f:f9:37:06:05:19:83:84:
f1:7f:c4:74:1c:84:54:9f:0f:13:f2:47:4a:16:b9:
fd:ea:1d:41:db:e7:1f:01:4c:b2:4b:18:a4:61:a8:
54:45:74:64:74:0e:31:a8:2e:ca:e2:66:d1:72:6a:
63:89:93:62:71:f5:86:8e:53:86:fe:b1:47:25:ba:
9d:c7:7f:a3:0c:19:9b:18:5f:3d:a3:8c:4c:fa:35:
14:94:b3:80:99:40:e9:02:eb:5b:16:ad:19:d0:21:
07:28:88:83:93:22:e8:f8:a5:57:ee:92:01:ce:09:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:0B:A3:F2:4A:FD:B2:01:A5:CA:3E:54:49:38:F4:E2:69:D4:0B
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6f:f7:d5:8b:ba:ab:fc:32:9f:bd:4c:a7:c5:c6:dd:77:70:
d5:1c:35:a5:04:93:74:9f:32:0b:9b:41:b4:b2:44:d9:7c:11:
18:b9:06:d1:69:92:da:a6:83:0f:b0:76:14:80:ad:3d:49:f8:
ee:f9:a2:4a:1c:29:dc:45:1b:11:81:38:d6:a0:30:c2:f4:9d:
70:0e:ee:a5:17:fd:0a:c6:8a:d3:71:8b:f7:f9:d9:bd:dc:b9:
f4:5f:e8:ae:8a:07:95:ea:a1:0f:b2:6c:0e:45:95:77:ff:a2:
dc:e9:87:4a:f1:ea:f2:6d:c7:80:da:28:98:70:75:8f:52:53:
0c:84:ee:1d:73:e5:f0:16:1c:64:f4:b9:0e:0c:02:4b:14:c4:
68:e2:46:f9:e6:ef:54:5b:f2:40:12:08:62:c0:ea:1f:51:26:
c7:45:8d:75:11:ab:18:60:bd:5f:41:97:ff:46:cb:4f:9c:3f:
f4:be:d5:aa:29:4c:58:70:4e:09:51:de:2c:ee:e6:16:b8:ea:
a7:d0:6d:b1:e3:43:9c:20:f8:93:61:22:74:6f:8f:84:d7:85:
19:41:51:a4:03:86:14:60:aa:46:00:a3:eb:11:b5:13:49:27:
97:3f:78:73:8f:dc:b8:81:a8:37:fb:c7:19:9a:5d:48:13:d1:
23:a8:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:14 2026 by rpki-client