Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: QmX/kiIsekq8FOJxGubhDnvqdcxUGLTtsIGiHUAWL4k=
Subject key identifier: 76:DE:C0:F0:81:FE:99:5F:97:39:1E:87:F1:7D:8A:93:53:1A:72:FC
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019D386624AD0FF136D275058CE0E4FF5A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0515
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: ePqMaFwC3FKS/WgKkRxJ4PoDmwVnTqeWWxBOrJfPIrY=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:24:ad:0f:f1:36:d2:75:05:8c:e0:e4:ff:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=76dec0f081fe995f97391e87f17d8a93531a72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:5d:50:0a:bc:6e:4a:d9:26:11:6e:b6:71:
99:6a:7d:df:a7:32:97:8a:6a:db:67:31:39:ba:65:
44:c3:92:85:37:9f:d9:09:0c:e8:3a:78:c1:6d:a6:
5a:c7:2b:14:c9:01:12:2d:57:90:0c:a1:39:4b:e8:
49:04:d8:e7:bc:27:b3:51:d5:4f:7d:89:a6:f9:9c:
18:e9:1c:ab:23:da:b2:5a:ad:e4:64:e1:ae:2b:35:
c1:de:0d:d3:76:9d:3d:26:60:92:f7:a7:ce:d7:5a:
b4:19:13:a0:30:38:b7:7d:a2:7f:26:b3:d9:f1:67:
2b:13:87:a7:a8:5d:c7:e7:d6:1c:b0:67:44:d3:53:
cd:69:ca:eb:df:20:35:26:3b:60:13:e1:9a:83:6c:
f0:df:33:ad:05:10:07:e5:70:cf:e3:3e:ca:5f:75:
39:d6:48:a8:6b:50:0d:91:0f:25:40:cf:64:17:e8:
d2:8b:d2:8a:d6:62:bf:99:5a:b3:e9:85:bf:ba:68:
ca:14:40:14:5a:cc:2d:a1:94:7e:2b:d2:69:28:68:
0c:c2:0d:a9:32:a3:36:17:94:5e:60:95:52:73:3e:
e2:5d:f3:41:11:6e:be:24:a0:91:dc:26:9a:b1:b8:
28:0c:71:09:8b:09:49:ee:0a:ad:07:6d:58:60:24:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:C0:F0:81:FE:99:5F:97:39:1E:87:F1:7D:8A:93:53:1A:72:FC
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5b:ac:8b:bc:05:c1:62:e3:0c:fd:91:a4:fc:77:58:0f:d9:
43:3a:71:4c:14:dc:c0:b0:69:bf:c8:25:1a:e8:2b:8b:06:0d:
14:e3:45:e0:39:f2:82:26:13:4e:05:9f:48:6d:9d:49:15:b6:
bf:2f:bd:03:b1:99:a3:65:a2:88:e3:ec:d8:c2:b5:37:c5:15:
af:e9:e0:72:44:1a:23:c9:27:98:6a:d7:46:f2:0b:6f:ad:43:
0d:95:8f:4f:8d:ce:d9:40:df:45:02:e3:cd:6d:5b:c8:71:1a:
d9:90:ad:3d:cd:22:24:65:ea:8a:df:a7:66:6e:64:cb:9f:53:
fb:b6:bd:8c:e8:8a:81:60:02:0e:fb:07:cf:ce:d2:52:c7:b3:
c6:3c:ce:ca:5b:25:0f:5f:93:a4:98:b7:71:54:3f:c7:08:04:
c0:7a:13:34:d6:eb:49:c6:f5:c1:80:f5:7e:63:a4:d4:3e:14:
21:91:bf:c5:d2:52:81:ea:d7:f0:50:8d:e2:c8:66:ca:2c:72:
9f:96:f8:c4:3b:7b:26:de:6e:97:42:fe:1f:10:d1:ab:49:74:
e4:6f:86:af:f2:b0:d0:25:22:3e:b9:02:c5:6d:a0:22:2b:ef:
fb:41:8d:f8:4c:32:f1:8c:75:37:5e:5d:cf:5e:d8:d4:45:5f:
b8:1f:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:54 2026 by rpki-client