Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: cBJ6VA80YNSfQLQZYGhVmTelCfkPZGosaTsXextyPYE=
Subject key identifier: 5B:25:9F:9C:36:20:65:14:1B:18:0D:53:E7:8E:7F:DC:46:FE:51:88
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019CABD972F0191110836889E36B35C1B717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 049A
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: tBXNGG3xtuF8i8zofJgPn00fTpjWJYOzatelnD9vO64=)
2: OfoBCzmtnFm0hwGR9A2PXWfAk1I.roa (hash: ayIedPzOzNkrSBeiWSMs33csQjbzHkEQVrKoALTU/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:72:f0:19:11:10:83:68:89:e3:6b:35:c1:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=5b259f9c362065141b180d53e78e7fdc46fe5188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:62:86:7d:1c:f9:c4:c5:c7:c6:bc:3f:96:
46:49:0f:5b:10:2c:04:7a:1c:25:97:01:93:59:78:
ec:25:6c:dd:7d:d6:0b:84:b3:6c:e5:01:98:dd:10:
02:2f:86:af:7d:a9:26:a0:15:1e:5b:aa:68:8a:73:
fd:0f:17:51:4c:a5:65:13:23:dc:e2:24:33:7a:ee:
c9:9b:a7:d1:61:48:8b:41:39:e2:33:de:57:a1:26:
de:0e:0b:68:57:c2:5d:e2:83:d5:7d:86:24:5b:e0:
54:80:4c:1c:a4:70:5c:fc:0e:a9:f8:ec:ec:32:23:
38:8b:72:86:14:1d:cb:93:47:d0:0e:c0:70:20:87:
1b:49:32:82:17:2a:c1:12:cf:d5:9b:be:79:2f:0c:
45:a9:a8:bc:be:78:b1:c0:85:07:54:ef:8f:e1:22:
ca:79:c5:2c:09:d8:b6:86:ca:66:31:46:0a:b2:5c:
c3:21:90:5e:3a:4b:b5:63:e9:a2:22:44:26:98:64:
6e:3f:b9:7a:86:d4:ee:f7:3a:00:3d:c2:83:fc:ce:
40:63:2e:71:83:39:f9:78:1e:a5:25:35:99:74:9b:
65:82:28:8b:ac:ba:d1:10:cf:88:73:d1:ee:6c:e2:
76:55:b8:be:19:68:27:15:ca:da:b4:6a:45:a2:4e:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:9F:9C:36:20:65:14:1B:18:0D:53:E7:8E:7F:DC:46:FE:51:88
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:0a:90:dd:ac:77:58:4a:c8:ae:a3:7f:90:16:dc:3c:c6:
9e:09:35:a0:ac:f4:6d:63:97:e9:b3:e3:7b:b0:84:e3:7b:22:
54:e7:15:83:91:20:18:fa:d8:a6:bf:88:98:d5:89:b5:b7:c4:
58:6b:bd:b1:a1:bd:2d:db:19:33:e8:65:f1:66:68:3f:fa:48:
98:59:69:dc:f0:e6:26:ca:f5:e9:5d:78:3e:28:d9:72:de:1c:
13:a4:29:9b:17:e9:75:a9:4f:70:40:32:d5:7e:be:2d:5b:77:
97:48:1d:5b:5a:6b:1a:61:8d:72:20:3c:74:dc:e7:42:a8:2e:
de:75:c3:0e:3f:2a:f3:62:92:39:9a:d4:a0:52:36:20:0d:91:
a9:de:82:1b:40:5d:07:ba:5e:c9:bf:cb:7f:ad:d6:77:fc:6a:
ad:49:70:d4:76:87:78:6c:db:8a:e2:dd:7b:7c:11:43:0d:76:
41:22:7b:8d:9a:6a:47:59:25:18:51:dc:89:16:6d:91:04:b9:
82:4a:8a:40:71:1f:52:c7:9d:52:98:64:2d:c9:27:83:a3:ea:
35:0e:c9:29:d3:b7:8a:f7:9a:57:c0:b6:47:94:9c:c1:91:dd:
5c:03:78:09:ae:1c:25:73:b0:a7:f7:f5:9c:bb:81:4c:d8:e6:
e1:39:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:18 2026 by rpki-client