Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: juIKB/bDz7wPG2POZJixrtMkJDVS5CKGPiWOaBUCKEc=
Subject key identifier: 3E:A1:AE:A4:0F:8B:E0:AC:DE:26:23:3A:24:B6:CC:70:55:A9:9A:E5
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019D382E12119600775DCB115A4B5F86633B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 1631
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: KZMU/6bMklyVzHZjB9HWajfrgpieHcX6Z+sUmNpHOE8=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:12:11:96:00:77:5d:cb:11:5a:4b:5f:86:63:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=3ea1aea40f8be0acde26233a24b6cc7055a99ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:07:26:f2:76:18:ab:55:0b:b1:fb:42:e6:
bd:bf:dc:56:68:bb:b8:d8:65:15:1b:a5:eb:2e:d1:
3d:2a:77:b9:cc:43:7f:37:fd:24:87:94:79:15:91:
a4:40:56:85:0a:25:01:44:b2:03:c6:70:c8:3f:ad:
18:3d:c9:3d:3f:de:5f:b6:fd:bb:13:a5:54:91:5e:
9f:70:2f:88:9b:6f:63:8a:af:25:79:4a:4c:bb:c5:
b8:ef:56:27:ab:43:91:66:c3:dd:2b:3d:ff:99:e9:
b6:37:5b:5a:f4:8a:1a:17:e9:70:cc:6b:d0:c1:a6:
c5:0d:57:1c:03:71:98:6a:e6:35:4e:b6:c3:5c:5a:
f8:ef:3d:ff:43:0d:2b:62:de:13:b7:f8:c1:aa:91:
53:a9:21:e4:d1:8c:5a:c7:de:43:5b:37:2c:37:18:
05:4a:a1:6b:e6:ec:69:dd:00:24:c0:85:0c:c0:ae:
3f:b8:50:16:46:22:72:28:06:ae:7c:99:ab:fb:c8:
a8:c8:ba:36:46:cc:38:ac:fa:1b:33:75:09:2c:72:
21:40:73:81:72:de:c5:ba:fa:24:96:e4:66:74:2b:
dd:3c:73:6f:64:f1:1a:a7:e5:51:1b:72:37:38:5e:
82:d7:f5:ea:b4:ac:fa:82:c0:02:78:f9:60:d2:31:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:AE:A4:0F:8B:E0:AC:DE:26:23:3A:24:B6:CC:70:55:A9:9A:E5
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:96:99:86:49:90:67:49:e7:a1:d4:50:f6:df:f3:ba:29:
81:49:91:c0:0d:b3:b7:35:aa:ce:1a:59:1d:2b:e1:33:5e:ff:
bd:6d:bb:7c:19:f6:35:91:a0:8b:f8:4e:0f:a6:a8:98:fc:5b:
56:2c:90:8f:f9:dc:85:d7:6a:29:34:cc:f4:da:69:7f:80:c0:
39:81:5a:7f:ab:6b:3a:71:08:d9:fa:d0:a3:79:7b:bf:22:b6:
af:02:c3:e2:37:e7:aa:a1:c3:ac:9e:e5:de:c4:6e:c9:91:69:
25:1c:ff:ec:cd:af:81:31:85:6a:e2:43:c4:bf:40:7c:c3:0c:
03:fd:5d:da:b6:01:ab:5f:c0:8c:1b:84:84:9e:c7:9c:77:74:
19:df:6d:e9:bf:70:da:df:f7:b2:cd:ed:4a:68:8a:11:64:30:
37:84:51:70:59:04:dd:c1:84:98:a5:52:63:91:a4:4c:82:32:
93:d0:3b:a3:04:01:c2:4d:da:16:87:18:4b:53:78:8a:bb:9f:
52:7a:51:82:7c:f5:38:31:a5:49:b7:ac:0a:79:a9:4e:db:5d:
79:22:ef:55:6d:6b:fb:83:39:b3:a0:47:a3:b3:d9:72:2f:b0:
98:9b:b3:f1:c7:8c:7e:bd:a8:a9:5b:f8:cb:94:25:bd:cb:73:
9e:e3:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:48 2026 by rpki-client