Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: R8leXxSFb2+dPfEHSX5NXdXm3Co/CEOcVwGoz6VrT58=
Subject key identifier: F3:B1:98:05:A3:2D:06:10:76:23:A3:58:DF:2E:80:E9:B0:46:21:3A
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 019D37F76082FDBD60D8515BD4CB69051336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: jn4qFvJO1FYKWwZr4mBlY4mwI9USDCxbx6g33fOCeY0=)
2: AHnNibYpBfUdvSGboILQ1teAIw4.roa (hash: 42GSIkMZbcrmZ8XMph6d+mXrtH34NIs/JYMf8WUp4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:60:82:fd:bd:60:d8:51:5b:d4:cb:69:05:13:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=f3b19805a32d06107623a358df2e80e9b046213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:02:b3:a9:c2:9b:cc:f7:99:21:77:0a:5c:
6d:c0:79:c9:fa:f3:96:3f:c6:f7:98:1a:e1:c8:9e:
74:e7:6d:f9:5f:e6:df:f1:aa:d6:df:50:cd:81:72:
3a:71:26:9a:6a:7b:c1:ae:a8:ac:4c:d7:bc:3b:6d:
1f:80:dd:0c:67:a9:d1:9e:c6:a4:22:95:7e:e7:b2:
81:cd:6e:10:6f:0c:ae:48:d7:04:3f:5b:3f:44:31:
bd:e7:a1:b8:72:8b:e1:9a:cc:b1:b1:49:a0:9f:d7:
82:d9:3e:21:49:ed:78:5f:f2:35:85:61:e4:07:16:
10:41:e7:08:57:07:7a:9b:13:33:d9:de:16:0c:b8:
ea:1e:a5:bc:46:82:dc:90:01:bd:35:68:c2:06:b5:
78:19:c9:67:cf:ce:b4:ff:04:ac:7c:43:6b:f7:c5:
68:ac:c9:7e:21:83:23:fd:57:2d:04:f8:7b:4e:71:
d6:b8:0c:9d:44:4b:b5:dc:77:6f:c7:56:d5:ae:2d:
3f:b8:83:21:ec:9b:17:01:a6:2b:a2:e2:75:45:c7:
db:e9:9a:40:f4:bc:b8:3a:2d:c2:aa:6d:7e:d6:5e:
c6:a1:04:a9:93:f2:f2:7a:75:1e:6b:bb:8e:7a:06:
0e:db:c7:88:5f:52:e6:32:d0:4f:51:0b:df:9a:af:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:98:05:A3:2D:06:10:76:23:A3:58:DF:2E:80:E9:B0:46:21:3A
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:dd:f0:5b:a8:67:bb:81:0f:74:d5:49:84:4c:49:8b:41:
f7:ee:86:04:93:ad:55:69:6c:fc:4b:cb:74:f5:dd:e3:71:24:
82:89:a6:3b:d4:db:c6:d9:4f:f6:05:d9:17:a5:75:cb:b4:89:
d9:ee:d8:e6:c4:ef:9c:53:c0:43:fa:8c:e6:b5:16:7c:6b:e2:
96:5a:f5:c4:8b:ac:6a:e1:9e:dc:d6:18:1f:92:85:46:45:98:
13:99:02:db:59:cb:0a:c3:13:68:7c:02:7d:b9:b0:8b:48:11:
86:30:33:af:f3:85:96:b0:09:f3:0a:94:e0:99:0d:f3:84:6e:
85:ee:2d:f9:4e:bc:4d:ba:b3:83:6e:29:95:16:95:9d:35:52:
ce:37:7a:df:36:e3:7b:f3:7d:f4:cf:12:45:e9:df:c7:1e:d6:
15:96:2c:3a:5d:d6:a8:70:cc:f4:49:49:1e:a2:9c:c8:8f:63:
00:17:ae:c3:6c:ed:fb:2f:af:dd:bb:55:75:99:d0:ed:99:9d:
fe:9d:fe:5a:ea:c6:39:b4:74:42:a1:57:90:1d:b7:0a:a7:a4:
42:aa:ba:df:ec:b3:de:80:c4:d2:f1:40:7f:f0:d1:a1:ff:9d:
9a:e3:5a:b8:ab:f5:96:98:93:bd:1b:06:f5:3d:2c:e2:d2:75:
55:7d:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:20 2026 by rpki-client