Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: N20a93gY4rvb6AosNSf4TkT8cjRUPfxk5MHg9FMq/LU=
Subject key identifier: AA:79:80:A0:3E:47:5E:1A:98:07:52:DD:1B:D9:03:37:64:8C:24:3E
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019CAAC6768ABCB135FBE5C6F207E18619A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 152A
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: MO4fyYWi6osPOi90RAVdm/yfzX6NbmPS5AwxFz/0T88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:76:8a:bc:b1:35:fb:e5:c6:f2:07:e1:86:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=aa7980a03e475e1a980752dd1bd90337648c243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:ee:54:30:95:78:de:3f:c9:a3:53:26:b6:
69:6e:63:6a:f4:ef:cd:50:2d:4a:73:0b:0c:da:81:
44:2d:d1:28:29:54:da:e3:c7:36:5d:cf:95:41:e9:
87:29:6d:e2:f9:5a:b4:19:3f:92:60:ee:58:e4:9e:
ef:be:1a:d8:10:a7:88:5a:87:86:10:44:b2:b4:01:
83:11:91:a2:0b:4d:95:98:41:8b:11:f3:cb:8f:17:
73:6c:3e:37:5a:2f:2e:27:d5:5f:4f:61:7d:aa:d6:
f3:50:35:4f:12:9c:83:8e:65:79:81:2e:09:84:ae:
f5:de:0d:12:2a:df:02:28:6d:04:69:66:6a:a0:32:
ee:f0:80:fe:06:bb:08:86:7c:36:fb:16:49:1f:47:
38:22:1e:2f:08:57:d3:56:d2:1f:c2:ad:65:cd:99:
b7:ea:92:61:aa:60:b2:47:30:b3:0e:21:69:64:84:
b1:87:bc:1a:d5:be:63:6a:ee:0d:86:b9:9c:31:36:
a0:af:67:9a:eb:f7:74:d6:f5:b9:c2:c1:9f:91:ba:
19:58:1c:23:f1:77:e3:15:ab:63:94:9a:77:bb:cb:
c6:9d:22:8a:fd:bc:4e:fb:3b:db:4b:dc:1c:df:24:
46:06:f6:50:5d:79:ef:2a:49:e9:e2:dd:26:19:75:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:80:A0:3E:47:5E:1A:98:07:52:DD:1B:D9:03:37:64:8C:24:3E
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:ec:24:c7:36:ad:4c:1a:26:06:67:46:a1:21:41:66:a3:
dd:69:fc:65:04:76:f8:fb:5a:66:f0:a9:a4:38:93:cc:41:c5:
e6:e3:bc:7d:7a:ab:ef:97:d0:9a:5e:f6:98:d2:88:71:3b:ab:
98:5f:f9:39:9d:77:f9:46:7d:de:60:29:2b:ff:82:25:89:6a:
ac:ce:35:e8:c1:57:3e:a9:c3:e4:9c:ef:57:76:1b:39:24:fd:
fd:ec:aa:62:b5:fa:3e:d8:c4:ec:a1:ba:80:35:e3:15:9f:e2:
64:15:5d:74:ab:7e:7f:20:d8:20:82:d1:6a:47:7e:2d:65:46:
45:bf:0c:2f:e7:63:ce:26:28:f6:80:b2:dd:fd:9c:9e:49:b4:
07:94:c7:81:d0:21:84:ec:57:35:6c:29:47:df:38:3c:91:75:
e3:9e:55:72:e9:8b:74:19:73:37:21:7a:f7:43:8f:94:5a:15:
a6:33:b9:d8:d7:4b:dc:34:4e:84:c9:7f:40:09:1a:4c:3d:cb:
23:8d:80:0a:bf:6c:a4:dc:c2:8b:66:46:c8:fb:10:72:5d:29:
ee:d7:b3:0e:67:3a:f0:2d:63:61:b8:87:98:e6:b2:d6:bc:cb:
b7:3c:38:b1:e6:38:0c:89:2b:27:58:c2:e4:05:ff:e5:63:92:
ec:ea:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:41 2026 by rpki-client