Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: DVF8qRO7RkMtfmF4u5WeUmdrDe2srb0cUVCZhGwQGN0=
Subject key identifier: 96:F6:E7:62:6B:EB:B7:B4:A4:CA:08:9D:02:B3:F7:7D:61:75:68:C6
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 019DA3418DC7108EE380F5377D7BD771884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 128F
Signing time: Sun 19 Apr 2026 01:01:15 +0000
Manifest this update: Sun 19 Apr 2026 01:01:15 +0000
Manifest next update: Mon 20 Apr 2026 01:01:15 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: IaWtioTKnJ2Otm4o6P7xUZ47x7uYYO7lVprEun7wcNM=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:8d:c7:10:8e:e3:80:f5:37:7d:7b:d7:71:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Apr 19 01:01:15 2026 GMT
Not After : Apr 20 01:01:15 2026 GMT
Subject: CN=96f6e7626bebb7b4a4ca089d02b3f77d617568c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:25:23:d9:b3:a6:bd:48:c6:e5:7e:c6:4d:
ff:d0:1a:99:ff:69:cf:4b:d9:8c:da:90:3f:5c:ef:
16:28:91:b9:5a:6e:89:d8:c6:7a:34:c0:9d:0d:2b:
ff:43:6c:15:4c:06:2c:e8:cb:86:ab:4a:5c:9e:50:
91:30:c2:2f:ef:e3:59:f8:86:12:cb:6a:ee:2f:9b:
4f:4c:18:0c:25:9d:8e:92:3f:02:ca:7a:54:7e:04:
67:89:77:5f:a7:6b:ee:85:90:29:a0:00:de:55:8d:
fd:63:fd:35:ba:ab:53:a3:63:28:c9:20:ec:fe:76:
24:19:57:3e:d8:9a:18:59:80:3b:18:4d:bc:af:39:
ce:94:47:a6:97:3a:38:38:94:bf:ce:2a:da:af:50:
7e:36:57:28:1a:00:d2:14:9b:d9:9f:0e:e3:5d:b6:
4d:dd:9e:9d:f8:17:ae:15:2e:90:6c:4d:84:76:7a:
31:ea:22:e7:ac:20:e5:f9:de:17:b3:6a:63:33:00:
1f:58:39:7c:8e:2a:39:65:e5:1d:33:29:44:da:c2:
88:e6:bb:44:2e:db:1a:a0:32:b1:2c:f5:cc:40:23:
01:13:aa:eb:5b:f6:0f:bc:c4:60:ea:06:0e:fe:cd:
60:37:80:f7:03:d2:8d:df:55:dd:35:4e:b0:89:a9:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:E7:62:6B:EB:B7:B4:A4:CA:08:9D:02:B3:F7:7D:61:75:68:C6
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:91:33:47:4e:9c:98:dd:7c:93:3a:e3:a9:89:b0:c1:06:
5d:fb:e7:ac:e2:80:72:b4:de:4a:52:d3:46:20:7e:82:85:e8:
8a:2e:c7:fa:35:04:10:90:fc:40:42:60:db:b2:f3:1a:68:87:
34:42:db:fa:c4:16:25:a2:52:3d:08:12:75:11:f4:96:ab:db:
56:b2:ab:a3:35:a5:02:b5:0b:cd:a3:e8:71:28:22:70:19:33:
3a:82:81:3d:f5:31:ee:0f:f9:f2:ae:27:ad:25:5d:41:65:cb:
23:94:80:90:cc:dc:27:ce:51:27:e1:5e:0f:ae:c1:97:67:55:
ae:97:f1:6a:6e:4b:10:91:44:5b:ab:67:c1:8a:ce:ed:b3:f7:
a5:4b:d3:ec:6c:2e:db:a8:a9:88:a7:1b:dc:39:9a:17:0e:bd:
97:19:36:e0:a6:5e:50:94:9b:21:58:b4:6a:21:32:a5:93:8a:
6c:4e:50:da:92:6a:94:24:90:c1:48:ff:a7:93:9c:90:c0:af:
7e:bb:f3:77:11:ae:08:b3:9a:64:07:1a:e6:66:14:63:4b:69:
3a:52:07:50:19:2a:6e:7f:de:93:b0:d0:d9:89:c7:68:95:75:
b0:90:df:70:d3:d3:4e:a1:4b:af:d9:63:d3:0d:06:6c:0d:0b:
0b:f2:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:06 2026 by rpki-client