Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: v2zbZ+yJV7918QsUuvMpyrPwpmJIqbKARCQcd2No7ok=
Subject key identifier: 24:A4:D6:19:6F:73:15:52:33:EE:86:CA:31:23:24:BE:C3:6B:7B:A3
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019CAA581E94F3A80B49EA43EA996EC24C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1583
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: NTiG5be4zsScC5qkf556HyJMJ1rhEf+Vw+Y7ZQq7CHw=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1e:94:f3:a8:0b:49:ea:43:ea:99:6e:c2:4c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=24a4d6196f73155233ee86ca312324bec36b7ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:a7:2c:05:c5:3b:59:f5:8f:54:74:ce:7e:
27:3f:27:2f:75:5c:e0:00:c4:e1:e9:70:56:23:8a:
d3:f1:42:c5:5f:18:41:67:43:70:b8:5b:d8:c5:f5:
83:46:90:5b:5d:81:3a:16:d0:2e:be:19:46:dc:c7:
38:a5:1e:95:aa:da:31:a4:40:f3:65:a3:f5:21:09:
13:d7:81:d1:76:20:0a:a7:65:6c:37:06:bf:e5:13:
57:a0:cf:5b:b8:da:72:32:da:4c:b4:b5:be:d7:ee:
2a:fa:eb:e5:01:24:5e:02:95:97:5a:9a:83:18:d2:
ea:0b:55:e4:46:18:7d:1f:b6:8e:28:b9:47:85:72:
84:90:19:5b:5f:0a:2b:9c:8b:d8:24:4f:da:7e:6f:
55:6c:a0:40:dc:b9:4e:8b:8c:8f:e7:57:1c:f7:76:
e8:55:c9:12:b0:e4:46:0b:7b:98:96:17:91:fc:a8:
bd:fc:68:46:1b:4e:50:41:9f:8a:7c:85:b1:5c:52:
34:40:30:1f:da:4b:37:9d:85:f6:f7:f9:0c:e9:02:
4b:9d:2d:c8:4c:0b:9a:89:e5:d5:69:6b:f7:92:ca:
aa:89:22:38:4a:ad:2e:33:38:9e:02:10:42:ca:c6:
30:58:83:73:05:6f:ee:09:1d:98:24:5f:9c:0a:d6:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:D6:19:6F:73:15:52:33:EE:86:CA:31:23:24:BE:C3:6B:7B:A3
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b2:38:30:6f:22:3b:54:48:0e:63:dc:84:34:fb:d8:97:7a:
a3:5b:e9:5e:d1:85:14:04:46:52:d3:5d:fd:0f:f7:e2:4d:fd:
f1:db:5d:cd:26:e5:5c:a4:2a:fd:fb:63:35:ff:d2:1f:4b:d4:
9f:57:c6:e5:5c:10:81:69:80:b2:b3:3e:1e:e3:85:88:d2:30:
1e:43:bb:95:f5:a8:31:c5:92:f6:5f:b5:01:e3:c3:47:c2:5e:
c4:ef:7c:9d:13:6b:84:df:f5:6b:07:ee:a2:b2:a0:d8:7f:5d:
50:25:44:49:ab:85:a4:48:69:2b:ec:b7:5c:26:3f:32:64:52:
a4:c9:5f:3d:16:97:ca:16:e1:cc:23:1d:bd:32:00:9b:01:c7:
0e:67:3e:a9:94:f9:86:0c:af:96:7d:8c:1d:07:56:d1:21:27:
99:64:19:e6:1f:1d:35:23:fa:58:a9:95:03:f6:56:24:75:a6:
94:60:a0:7f:89:49:51:04:42:22:9b:aa:39:09:e6:c1:4d:5c:
12:20:d4:2b:a3:ba:78:e1:0f:81:27:ff:c0:df:c6:1d:9f:ea:
81:e4:66:97:e0:8c:78:46:9c:55:49:b0:18:a3:54:8e:c3:bb:
5b:85:4d:17:28:cb:c5:18:0c:57:e4:4d:3a:67:fe:c9:91:6e:
13:e7:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:40 2026 by rpki-client