Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: E+8d4OW2IEvdBg6RPi1oPQA1aDn41fnPvMvC/mpqN6Y=
Subject key identifier: 16:80:19:A1:CB:9E:C9:8D:D3:B4:F7:76:1A:7F:0B:56:DB:10:4C:29
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 019D37C1255BCE93506233253817461686A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0FD6
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: cbvsNVVPAf9bv7o2q8FPDDwShy8lexqndg/2+Xvu/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:25:5b:ce:93:50:62:33:25:38:17:46:16:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=168019a1cb9ec98dd3b4f7761a7f0b56db104c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:ad:bb:a1:9a:4e:77:05:49:1e:8c:53:de:
d8:26:d2:84:de:6c:c7:86:39:14:e8:50:dc:38:01:
ad:f0:e9:79:71:f6:60:22:ab:92:51:40:62:a5:4b:
7f:3c:51:4d:b0:86:41:ef:49:2d:a1:89:87:be:a5:
2f:c4:a1:2b:9b:34:c2:7b:a5:24:c6:db:53:19:00:
3b:54:25:12:4e:7a:56:7f:fc:78:92:0a:c7:83:f6:
36:9b:fb:2b:46:22:cf:cf:36:39:36:6b:7b:58:a0:
03:cc:c1:57:31:c0:5f:ec:4e:83:19:20:7c:88:fd:
41:28:61:a2:15:a5:f0:96:33:81:81:cc:9b:49:6c:
a3:e0:15:4c:77:5b:dd:72:fe:13:ce:5d:23:11:d4:
0d:4e:3f:d9:5b:30:dc:20:1b:9a:db:11:80:31:7d:
45:cf:a5:bd:8f:3d:47:ca:ab:fa:6f:b9:28:eb:dc:
f5:62:f5:be:82:55:2d:57:06:a7:df:3c:b6:e0:1a:
5f:53:f9:28:0b:27:16:85:b3:28:34:a3:6b:8d:bc:
83:c3:b6:7e:9e:cc:fa:30:c4:a3:cc:f2:a8:98:0f:
cd:bf:47:69:51:67:40:89:c7:da:07:44:c3:15:6d:
5c:1a:f5:e6:66:23:ef:37:17:10:24:91:94:8d:8a:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:19:A1:CB:9E:C9:8D:D3:B4:F7:76:1A:7F:0B:56:DB:10:4C:29
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:e7:3b:3e:a7:eb:44:66:44:25:5a:a9:fd:ff:1c:40:8b:
40:d3:54:75:ff:16:2c:9f:7c:70:4d:f0:ad:de:6a:41:2b:ef:
bf:20:58:fe:ab:4e:a6:63:89:88:62:6a:82:99:28:52:38:6b:
42:eb:2e:20:ce:30:12:82:18:62:4b:5c:2a:80:b7:c6:dd:8f:
fd:56:ce:e6:d7:f1:5f:0a:3e:26:4d:a3:3a:e5:2e:a5:89:af:
a8:61:48:0f:48:13:a0:6e:34:bd:60:36:68:fd:6b:66:23:8e:
17:f2:d9:f0:97:e6:83:4e:8e:c2:48:13:fb:f4:32:03:68:48:
ac:a7:c8:da:a1:dc:92:9a:73:56:a1:1b:7f:fa:d4:f7:a2:b4:
94:18:88:16:63:b2:09:43:63:ed:b6:71:58:61:ca:e4:b6:7e:
5b:77:0b:ed:d3:0d:c2:1f:ee:95:0f:f4:11:0b:b1:9f:49:6a:
13:f5:cb:ae:8b:25:cd:64:f3:0b:c4:01:b3:c0:d2:32:be:4e:
a4:5e:5f:d1:96:8e:b9:c0:b6:4f:5a:c2:0b:5e:9f:03:83:33:
2e:4d:cc:b6:29:8a:53:48:12:16:f4:06:d1:74:b7:c7:ab:c4:
d5:70:d6:be:82:fe:61:32:a4:2e:82:df:6d:b3:7e:86:5d:21:
6b:a5:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client