Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: PeZUQM+p5h5Z0zN2qcF8fYUCl0fyjHhAPXafwz8X5I4=
Subject key identifier: 2F:1E:DB:69:50:A8:71:C5:A8:95:A4:70:9C:EA:F7:72:55:C5:67:DD
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019CAA8F6C24D1BCC10A2B28F4AF4A3041FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 18:00:51 +0000
Manifest this update: Sun 01 Mar 2026 18:00:51 +0000
Manifest next update: Mon 02 Mar 2026 18:00:51 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: npB9Q3nH2Bn34ON8lwoJDQKSXdEqVDtMQl4JDRze5AQ=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6c:24:d1:bc:c1:0a:2b:28:f4:af:4a:30:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Mar 1 18:00:51 2026 GMT
Not After : Mar 2 18:00:51 2026 GMT
Subject: CN=2f1edb6950a871c5a895a4709ceaf77255c567dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:8b:82:9f:7b:f2:0a:e0:95:91:fe:0d:4f:
8b:36:ca:e2:d9:50:36:9b:8a:88:9b:a3:53:79:6d:
3f:08:26:25:69:be:c9:4a:2b:1a:1a:ac:bf:10:f2:
7e:22:b2:74:09:78:48:3a:86:20:ed:59:33:cb:ef:
70:78:a1:70:6d:98:ed:1a:6a:b1:6f:9e:8a:ac:08:
44:a3:8c:0b:d7:83:40:6d:1e:c9:16:2c:7a:59:b8:
3c:18:14:89:78:82:5b:6e:b6:a1:7e:a0:bf:22:d3:
3a:f1:07:ca:6b:ba:04:f9:c6:5f:29:cb:04:98:8a:
80:45:3d:31:7c:15:91:b8:8c:62:3f:05:15:ff:bd:
d0:32:57:b6:c1:70:4a:2e:aa:e1:32:0c:6b:02:48:
62:41:cd:83:f6:7e:9e:ea:91:29:dc:82:74:20:f2:
53:70:9e:b7:73:32:c4:7d:e0:62:46:f7:55:50:99:
db:3c:9f:82:02:0c:f3:2b:e3:cb:f1:75:a5:5d:9b:
65:23:71:e9:ea:79:3e:3d:e2:b5:44:7d:f9:e0:58:
b6:41:2c:2b:5a:36:40:f2:c7:5e:1e:7d:f7:b2:f3:
e5:52:0c:57:06:55:3b:9a:a8:b6:d9:8e:94:ba:b2:
95:67:d4:77:1d:06:13:d7:22:5f:9a:eb:79:da:c8:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:DB:69:50:A8:71:C5:A8:95:A4:70:9C:EA:F7:72:55:C5:67:DD
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:8c:6f:e4:bf:a2:03:2e:f8:bb:2f:c5:6f:ad:3e:ee:67:
39:5f:fe:cf:fc:c9:5b:3b:ac:9e:1a:cf:64:bf:62:88:7c:a1:
e8:d9:40:e0:cf:68:d8:dc:6c:3a:b2:f4:ca:d9:c6:d6:47:f4:
46:48:9a:ad:39:62:b9:ff:c7:1e:4d:72:db:5d:2f:cb:a3:14:
41:92:9b:30:18:65:7a:f6:22:d3:0d:cd:b4:ee:c9:a6:14:43:
c4:95:20:4d:bc:68:e0:b2:14:97:7e:ed:1b:23:ef:d8:43:98:
4b:2b:33:e5:48:bd:95:ca:b7:2b:49:4d:57:ea:c0:32:7c:26:
d5:1d:10:f2:b3:73:01:b3:07:73:4b:87:7d:24:ff:20:f4:b8:
05:79:e7:66:4f:6f:b2:8b:8c:0e:85:f0:d8:8b:48:6f:41:4b:
68:2b:04:65:13:bc:46:a5:0f:1f:7f:97:0f:83:25:6d:2e:ca:
3c:bc:5f:9b:e7:68:6b:d5:fa:b5:a8:28:31:5e:17:5a:7d:86:
c8:13:9a:a6:97:fd:b6:8c:f2:28:2a:90:91:87:36:d0:00:7e:
8d:d0:cf:6e:8e:a3:8a:fb:94:38:29:c4:01:f8:2b:2e:ac:08:
a3:ab:be:b0:8f:3f:17:b4:57:95:48:e6:c0:9b:aa:45:0a:52:
04:eb:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:42 2026 by rpki-client