Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: fQ7zbBDpUq2a5S34fEcgwEy/Er78gKe6IBqN6KtVuMk=
Subject key identifier: D9:0B:77:E5:8B:91:9A:1F:94:61:7E:5D:9B:03:A1:7C:66:73:40:AD
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019CAB3485D4AC7DF1602007FE2774AE1A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 156D
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: D/VX3tFsRtz90vRbXXb8GPttTQaE2AkRJamI96KjqRk=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:85:d4:ac:7d:f1:60:20:07:fe:27:74:ae:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=d90b77e58b919a1f94617e5d9b03a17c667340ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:5a:38:30:6b:3b:d2:0a:79:68:a6:90:96:
5d:8a:5d:7e:28:80:7d:1b:8e:1d:cd:6e:fe:59:d5:
78:df:40:fe:6c:7b:b8:69:c9:5e:92:5e:99:9a:4f:
2e:63:93:5f:81:6f:ae:66:da:ec:25:1a:d6:62:7a:
23:c7:53:3f:43:15:9f:cb:68:01:7f:ee:47:44:e9:
49:56:38:cc:33:a1:1f:cd:5d:4b:91:3b:c0:91:b0:
83:0d:2f:13:7d:c5:0d:61:1a:91:a1:1a:f4:7e:eb:
e1:30:59:c5:74:ef:12:5c:27:95:3f:ae:a3:a8:93:
33:5d:73:dd:c2:21:df:6b:2f:d8:16:8e:53:d6:23:
97:6d:dc:3f:22:09:1a:81:47:c3:c5:a4:87:f6:2a:
ed:27:b2:64:93:97:56:be:6d:07:06:14:1d:a2:d3:
88:c6:ea:c3:7f:6a:32:11:bb:4d:f0:b9:2f:cb:93:
35:d7:ad:3e:fb:10:5e:f0:a6:69:60:61:2f:ef:81:
96:79:01:44:14:57:a8:5f:af:cb:66:a4:fb:b3:1d:
a7:d9:99:10:d4:f0:36:1e:2d:98:17:62:0d:d0:dc:
ba:9a:ec:05:09:7b:40:fa:da:1b:b3:26:6b:49:98:
93:5b:b2:b7:dc:8d:44:a7:52:be:c5:00:60:7b:90:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:77:E5:8B:91:9A:1F:94:61:7E:5D:9B:03:A1:7C:66:73:40:AD
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:a9:85:6b:3c:6e:f9:8a:4e:4d:2d:e0:b9:27:00:1d:3f:
93:93:5b:cb:bf:cb:4d:d0:9e:a1:84:6e:aa:7c:a6:a3:54:5c:
8c:e2:fa:4b:65:a0:bd:8b:66:7a:97:e7:1a:32:c2:27:9c:e4:
eb:45:db:3a:1d:43:7e:2f:95:78:37:0c:26:54:4f:7e:c8:26:
ad:03:f7:08:7b:0c:97:3e:9f:bd:f2:8b:61:89:d7:cc:95:f0:
16:dd:10:51:c6:01:62:63:36:c2:f7:42:09:23:ad:36:96:8a:
2c:37:aa:9a:96:6c:f0:6d:22:7e:b4:f8:66:44:80:c0:69:83:
7d:44:f6:28:eb:d0:d6:d3:88:34:f5:c4:e6:7a:11:fe:c2:dd:
bf:ac:78:a6:83:15:65:bb:37:02:cb:9e:86:c7:c0:62:0a:55:
6c:2b:4a:e8:e7:93:ec:d9:64:df:2a:06:57:a6:fa:b1:a8:33:
da:a8:59:2a:eb:55:03:4a:7b:8b:24:27:ce:28:43:78:90:9c:
d8:81:1e:8a:24:5a:17:0d:63:89:cf:2b:7a:a1:7a:65:11:f7:
87:8b:1a:b7:5d:1c:25:8f:6e:c1:bb:f3:40:4f:08:bc:c1:0b:
ef:90:12:12:be:2f:44:47:03:3e:e5:e9:07:c7:1f:5f:4b:ed:
de:52:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:09 2026 by rpki-client