Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: iwjLNzM3a6TH+5wDWKn4ZVzjsIY9ojacKJoVMtZVuLs=
Subject key identifier: E6:36:7E:84:1B:7D:6E:E9:92:4E:59:D4:21:4A:DD:19:5A:81:0F:FD
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 019CAAC64CACA0F691A6BCAF00F359A6E607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: ZKym81nKOSxJ1RvzcYv20Vtz9VAyx1ngFnz+3fDeD3E=)
2: ZbjQSCZ3uAIwmEEj11MfV5D8gC8.roa (hash: 5T7LXIEjxnn1PBqbN7TiQKs4WoehbeF3nUrwaJWfoo4=)
3: rgMK6sFHXbkCK94M_mgXVownuMc.roa (hash: Ezgfu8asu1o9JhVctSXTvp8BRnlwnmsHy1jD2PscHGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4c:ac:a0:f6:91:a6:bc:af:00:f3:59:a6:e6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=e6367e841b7d6ee9924e59d4214add195a810ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:73:1d:c4:08:00:d7:08:b7:00:ce:cf:a8:
af:f8:cc:d1:14:14:09:3d:54:4a:70:92:c5:c7:ea:
ef:ef:1f:b4:12:45:ff:79:ce:a9:b3:55:c8:c4:6b:
e3:60:a1:60:3e:48:de:74:29:4c:b3:db:57:1e:ec:
6c:c4:82:cc:77:56:69:47:f4:45:8e:9e:60:2a:02:
5f:b0:b2:98:fb:48:09:15:a6:5d:28:29:f4:99:a4:
3d:53:eb:9e:c1:7e:78:e5:8a:9a:1c:1c:bb:99:31:
eb:20:bc:d8:8b:84:c9:01:39:7f:64:b0:23:a0:e9:
6e:4b:bb:31:56:ba:e0:59:7a:e9:a3:a1:67:93:fb:
b9:68:23:10:d4:c8:13:d1:9c:13:53:d3:3c:e5:e4:
12:01:1f:22:54:bf:18:cf:b9:8d:ce:8c:6c:5d:f6:
29:65:25:f6:16:3d:cb:ae:fd:c4:c7:3d:06:68:20:
bf:42:99:ca:7f:f8:de:ae:a1:d5:b1:03:33:2d:44:
40:5d:2f:9f:b2:4e:8b:9f:2f:42:c8:29:50:2b:f8:
5a:e1:fb:c9:01:a8:6e:21:80:a6:48:0c:82:a6:e4:
d2:b0:4c:b7:91:00:c3:a6:92:bc:ab:6d:07:96:7a:
30:1b:ec:01:ac:82:67:23:44:e5:00:39:30:38:e8:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:7E:84:1B:7D:6E:E9:92:4E:59:D4:21:4A:DD:19:5A:81:0F:FD
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b5:ff:0b:bd:66:9d:66:74:20:7b:37:e1:a2:5c:4d:ec:2b:
9e:8b:21:8f:7b:a2:0e:a1:5b:56:be:19:30:f8:ae:c7:be:3f:
c1:9b:3d:61:27:e4:62:38:13:7c:b6:e9:c1:b4:65:62:c0:04:
a8:c9:34:44:35:d2:43:8a:0a:de:81:b2:d9:4f:09:55:e6:a9:
ca:d6:00:b6:57:89:70:0c:35:34:7f:c4:b5:36:a7:65:c7:e5:
bb:2f:80:6d:33:ec:6c:fc:d1:0a:7f:3c:fc:27:80:54:2f:0c:
c5:da:12:f1:a0:e2:9c:21:ec:ca:bf:8c:22:06:1d:42:d4:a8:
a5:ec:43:ce:53:fd:fd:ab:d3:32:82:15:c9:c8:48:cd:44:e1:
0f:ca:36:2e:e8:76:e3:21:7d:d2:f8:c6:cd:d3:68:69:e6:d8:
7b:09:33:75:f4:d6:9a:99:2f:c0:0b:7e:a9:ed:8a:10:3a:77:
65:95:81:de:cf:c8:85:f1:c0:07:10:67:61:3c:1d:fc:03:6c:
9c:5d:8b:e1:c8:4a:46:dc:37:0d:fb:fb:2e:5c:a6:fb:91:74:
81:a3:5a:ec:c7:4d:60:6c:07:70:8b:a0:b2:15:27:77:1e:51:
96:8c:c0:68:24:8c:bc:1c:28:21:10:53:f2:1d:98:43:4a:c7:
ee:c8:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:38 2026 by rpki-client