Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: ygMkmFa3yNM9Us8gRGsqu7RPNqsRf9kWol/yd8cqsRo=
Subject key identifier: 43:43:E9:7B:D5:1E:9D:CA:F4:CF:A1:05:AC:27:EA:F4:39:A7:D7:8F
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019D3752F4F1C4528711CB5A88AAC92831B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0CBA
Signing time: Sun 29 Mar 2026 02:01:16 +0000
Manifest this update: Sun 29 Mar 2026 02:01:16 +0000
Manifest next update: Mon 30 Mar 2026 02:01:16 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: BkzRurauIs4BRFDJFxt7PugTEQKxXaoDF2qCrGi5GiE=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f4:f1:c4:52:87:11:cb:5a:88:aa:c9:28:31:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Mar 29 02:01:16 2026 GMT
Not After : Mar 30 02:01:16 2026 GMT
Subject: CN=4343e97bd51e9dcaf4cfa105ac27eaf439a7d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:aa:83:89:87:fb:1e:8e:c7:ef:ae:6f:8b:
ce:14:a3:83:60:67:8f:4c:ea:77:0a:d9:6c:a7:f2:
d6:cf:98:7c:eb:f7:87:e7:5b:8b:55:b0:47:1b:f4:
70:d4:77:1f:04:d5:39:20:48:db:e0:a4:3e:8c:9c:
7a:72:36:1f:e8:61:3d:fa:c2:65:94:83:82:54:f8:
00:44:ce:f3:30:21:d6:42:d5:3e:d5:51:f7:63:f1:
7c:40:0d:e6:30:41:94:50:c1:29:37:40:dc:7e:13:
7b:f6:bb:49:05:21:2d:ac:40:56:0b:b2:30:f2:f4:
69:29:66:ca:3b:3e:2d:1a:5a:8b:f8:de:ea:11:4b:
c5:67:6a:d5:d5:91:00:f1:37:8e:a0:07:e0:17:29:
83:69:e5:f1:c9:e7:f2:2a:ad:67:dc:d3:0e:cc:1a:
40:82:37:11:6a:1d:25:f1:3f:36:6e:3f:a7:e4:c4:
ae:b0:5b:63:26:80:f8:a6:ed:c5:83:bc:e0:0a:43:
16:c7:dc:1e:19:31:df:9d:55:ea:1d:8b:4e:5e:54:
c9:41:25:61:a7:80:22:b7:fd:45:20:4e:0e:6e:b6:
91:06:5d:64:e5:03:4a:a0:f9:0e:3e:ab:a5:50:8c:
0e:67:f7:1e:b7:40:57:5c:7f:6f:6d:f5:2a:ce:c2:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:E9:7B:D5:1E:9D:CA:F4:CF:A1:05:AC:27:EA:F4:39:A7:D7:8F
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:8f:fe:66:cb:db:da:04:73:e2:c9:75:84:c1:5e:07:98:
ff:1e:e4:23:fd:21:2d:c2:f4:3e:d2:17:41:5d:7f:b3:17:8e:
21:49:c9:a9:c8:bc:43:a7:29:15:e9:41:20:1c:f5:16:12:c7:
90:f5:5a:dc:f4:58:85:ba:41:9e:c5:89:42:1f:64:75:ee:da:
5a:04:b3:14:92:3f:4e:97:4c:7b:ef:4b:4f:f6:31:40:a4:98:
64:c2:8e:2e:b7:55:cb:73:01:33:0d:33:d8:52:ab:76:84:22:
7f:4e:00:41:81:ed:ac:e8:fb:87:03:82:cc:ed:75:d3:d4:4d:
c1:cb:31:e3:e2:fa:d9:8c:1d:8a:53:5e:06:52:4c:ad:73:38:
5c:14:d7:2e:40:b4:ec:2d:6b:38:e6:12:de:84:f0:53:7c:9f:
8e:07:cd:f1:42:10:7f:a3:be:14:88:ba:1b:1a:a4:4e:77:68:
b0:db:8e:29:0a:3f:e7:fb:7f:96:4a:1d:74:fd:01:d3:73:05:
c6:64:30:11:1c:ce:16:ed:f6:3d:28:2b:32:7e:84:2b:c2:38:
9e:9a:44:4b:ab:6f:8e:b9:c5:25:ad:15:bf:c2:6a:12:ee:d9:
d6:b7:bd:83:58:8e:24:3e:18:e3:d4:70:09:fd:16:0b:a0:c5:
74:0a:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client