Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: WR1qiBR4YbvQEllS/T0J38fOzGQWslla/sppvbsPDlo=
Subject key identifier: 51:B6:6A:D3:18:64:A4:97:F0:B8:06:5D:4F:93:39:0F:E4:C2:D3:4C
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019CAA2138AAF2511E8B98AE6FBAA01763DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0ED6
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: v5ygHkfPGhLIMcUNfoR95jCBkXN7u/lQWsLj1cIfABY=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:38:aa:f2:51:1e:8b:98:ae:6f:ba:a0:17:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=51b66ad31864a497f0b8065d4f93390fe4c2d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:2e:42:f0:1d:8b:ed:fa:64:af:a0:91:e6:
f0:8d:ac:82:0e:1a:6a:2e:31:e0:68:b8:c4:2f:f0:
91:c6:33:6f:5c:46:b5:81:c1:04:4b:f1:d8:61:33:
b5:de:39:5f:72:5f:e0:24:c0:03:25:46:a3:17:93:
87:f4:cf:a6:09:85:aa:a4:e0:72:55:9b:88:44:31:
d5:a7:0a:cf:be:31:f4:ae:65:78:f7:8e:70:25:ea:
2c:28:1c:8f:92:a1:b1:fa:92:53:a8:9b:63:0a:20:
19:63:8c:ec:e1:a2:7f:1f:39:67:7e:9d:5d:60:22:
f4:66:c4:be:79:6a:dd:bb:25:ef:e1:44:59:0b:05:
49:f4:ae:76:2a:23:dd:7f:07:0c:49:ef:c2:e9:ac:
bc:07:95:e4:9a:71:cd:0a:33:e7:a7:f4:e9:6e:d9:
44:d5:6c:7f:36:e0:d7:4f:d1:63:72:98:e0:d9:13:
fe:7d:11:fd:b3:0c:75:ae:e7:6e:64:24:3b:e5:18:
51:7c:07:de:38:d5:15:30:42:a9:ce:29:59:a8:be:
3f:8e:36:ee:37:af:66:d8:8b:18:1a:96:21:6a:4d:
d7:11:01:e9:ba:4f:ad:1a:9b:36:74:e1:ae:12:04:
ac:c7:93:a2:49:93:8f:7e:1a:92:31:60:4e:04:38:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:6A:D3:18:64:A4:97:F0:B8:06:5D:4F:93:39:0F:E4:C2:D3:4C
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:6a:ad:2c:01:a1:90:66:ac:68:84:8c:a6:47:7c:a4:c1:
0c:06:39:8b:95:42:19:8d:5d:96:73:eb:47:07:31:bb:84:69:
13:43:44:77:3c:a0:7a:00:05:61:fa:5a:2e:90:e8:e7:84:2a:
3f:49:5f:b0:da:79:5d:c2:f3:79:0b:4f:ee:03:b2:09:76:71:
3b:c5:9f:d4:46:48:30:d8:f5:bf:f2:a4:ec:70:9d:08:87:6e:
ba:10:b5:ae:85:64:b2:4b:4e:2b:07:c1:33:e9:1d:1c:11:e0:
42:44:34:3f:62:e7:5e:13:91:27:ff:2e:c2:ca:53:43:0f:5d:
e4:b7:40:47:8d:d2:c1:28:a7:ec:75:bf:4f:d5:e5:db:04:dc:
03:f3:73:b8:d0:10:63:3a:17:40:86:3a:9e:a4:b7:46:db:b7:
38:2c:c6:ba:c6:12:8f:97:8a:40:95:54:49:fb:99:26:ab:bb:
32:93:5d:0f:6b:a6:e9:d9:b4:55:43:26:64:ab:9d:cc:9e:9f:
b6:10:43:52:b8:8f:2e:d8:dd:6b:36:3f:d8:d8:c3:84:b0:7a:
b8:b5:98:d4:5b:60:72:a1:28:3e:6b:d2:51:1d:1b:07:a0:f0:
ab:b9:c1:d6:19:18:a1:9a:7b:b1:b6:16:85:33:06:e6:a8:e8:
54:d5:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:10 2026 by rpki-client