Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: +G9TnroKpsE9xk82FNdRUiYnSDkKFAYzf8npC8Q87V4=
Subject key identifier: 5E:0F:D9:ED:74:D3:00:4A:A5:CA:CB:57:A1:18:4C:A6:5B:F1:B7:53
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019D38D37E29E776CD37EB9049D513D11DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 1341
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: zIxSdZz0UPWTVpoUQuGU2a3tyb0O+0TiJZjGYZ70HgQ=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7e:29:e7:76:cd:37:eb:90:49:d5:13:d1:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=5e0fd9ed74d3004aa5cacb57a1184ca65bf1b753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:cb:98:74:b9:7f:51:ce:63:e2:97:72:48:
b1:7c:b5:23:f0:ea:11:ed:15:3a:d3:8e:9d:74:b1:
88:9f:d8:f6:a7:15:73:d9:e1:56:73:ec:76:58:db:
b6:35:ef:0a:24:bd:e9:c7:c0:64:8c:5a:8d:69:1e:
21:1d:87:1e:69:e1:49:da:06:a5:74:ad:29:41:6c:
ce:91:75:ed:be:4b:57:22:0c:a5:ad:00:f8:d9:40:
a6:32:d5:3b:16:ce:d5:43:4c:39:52:36:e3:ba:28:
3b:6f:03:bd:bb:b7:0f:e6:b0:12:c4:a8:7e:f5:81:
d3:9a:a8:77:56:82:54:c3:fe:6d:db:06:e2:ef:fb:
26:be:dd:f4:04:38:36:54:cf:3f:c3:12:df:ce:13:
75:df:3e:50:15:c5:dd:c8:25:6f:33:a9:04:e3:49:
ba:b7:09:e3:94:3f:d3:20:93:42:26:01:42:2c:d6:
bd:d3:f8:ff:40:1c:0f:08:93:e1:12:ec:d2:a4:4a:
50:26:17:ef:9a:a0:9b:83:e3:97:31:9f:07:02:26:
17:21:ff:bd:78:ee:cc:93:ee:2e:c6:06:d1:23:b0:
a5:05:af:73:df:c4:75:1b:b2:0e:ff:d9:46:a7:6f:
be:ef:66:46:f9:39:9f:e9:0a:2b:d8:b9:8b:43:27:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:D9:ED:74:D3:00:4A:A5:CA:CB:57:A1:18:4C:A6:5B:F1:B7:53
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:b2:7e:73:26:42:55:93:de:fe:52:80:f3:43:10:60:1f:
93:e5:59:4e:fb:ec:b6:30:23:6c:39:8b:29:98:dc:22:4c:23:
e9:79:a2:98:65:29:05:d9:e5:b5:06:25:e7:aa:d9:3a:1d:8c:
80:12:70:66:a2:9f:cc:a9:e3:6a:5c:a5:f4:c4:96:90:58:55:
2b:69:52:83:2f:ae:9a:18:9f:ef:07:14:73:c5:48:01:b5:02:
0a:ee:42:1e:b8:f5:e0:98:02:88:77:10:07:b4:00:85:97:4b:
a1:8c:59:23:b3:c9:fc:e2:16:13:ac:5c:a1:29:fb:e0:57:12:
01:68:b8:3f:4b:fa:d5:47:a3:87:c6:21:ea:df:93:30:3c:0b:
aa:76:56:49:0a:26:59:4a:97:5b:44:8e:5e:e1:79:5a:0c:fa:
a0:f9:a8:c4:61:93:c6:e9:79:e0:8e:d7:ac:c3:fc:71:de:3c:
8a:82:b5:8e:35:39:18:64:6f:82:88:7c:81:7e:af:b5:61:5e:
b3:f2:de:ed:ae:af:bd:20:93:0d:ba:35:46:57:ef:78:ca:b2:
63:95:ff:05:d0:ea:3e:4b:d6:54:24:5d:4a:10:dd:cb:cf:10:
bc:40:4a:4f:5e:6e:23:ee:1e:89:3f:07:2b:77:c3:13:f8:d1:
63:fc:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:56 2026 by rpki-client