Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: 2v6b49VrPi+vIeXD4jE7C5Jfb+yxsqRsJ3nmo1jit+8=
Subject key identifier: 8C:6C:67:26:60:F9:63:9A:45:C6:C0:1B:73:21:C1:BC:47:63:1C:B3
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019D37C10A6A2AA1E17593C799A6B4B138A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: 4e68u3WowOL1/QhDjDOWmfCVsYTz33SUnyqajh362X8=)
2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0a:6a:2a:a1:e1:75:93:c7:99:a6:b4:b1:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=8c6c672660f9639a45c6c01b7321c1bc47631cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:92:33:f5:10:04:75:34:7c:37:77:bf:c9:
00:7c:66:cb:52:d7:3b:b0:f7:c8:f2:d7:c1:2c:a1:
01:83:89:21:b6:d2:fa:3a:9f:cd:52:63:30:95:d5:
91:b3:d6:cd:88:21:aa:4d:22:6b:d3:e8:62:e8:7e:
20:15:f2:61:24:9a:0c:cd:77:ed:71:15:a1:32:c7:
db:96:df:af:67:5b:6d:c1:ac:12:70:f0:d1:b0:42:
bc:63:33:07:e4:81:d3:3b:1f:08:af:3c:4f:a4:96:
c2:9c:a5:8f:60:2b:2f:3c:cb:84:da:8c:29:b2:a3:
fe:fb:57:fa:65:74:cc:56:4a:d3:35:6a:e9:0a:dd:
78:0c:e9:ae:38:d1:79:f4:09:71:01:db:01:0e:e1:
91:11:3f:38:29:80:3b:de:e6:fa:b8:98:ea:19:17:
e7:2c:5f:6e:36:33:21:a0:e0:7f:c1:b5:08:b8:d8:
7a:53:53:06:74:c7:e1:99:9d:f5:78:08:85:3b:e2:
82:c6:35:b6:fd:a7:c4:d8:c9:9b:18:10:0e:1d:fc:
02:67:5d:0a:61:3f:88:47:53:0d:90:33:d4:86:2c:
88:1d:12:4f:d7:e1:86:f3:1f:fc:57:1f:c0:4a:db:
df:9d:74:2a:5b:da:12:54:e6:e0:41:5e:24:6e:40:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:67:26:60:F9:63:9A:45:C6:C0:1B:73:21:C1:BC:47:63:1C:B3
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:80:5d:7e:bd:29:f2:b3:29:18:a2:e0:d9:f0:42:24:4d:
c1:45:60:50:7c:52:ef:a4:6d:1f:50:16:0b:55:b0:59:98:37:
5e:c2:e3:fe:89:87:8b:24:1a:e0:ca:45:ce:7b:9a:d1:8e:86:
1f:72:a6:d2:35:3e:a5:08:c8:fe:23:93:04:c9:8b:f3:e1:8e:
de:e1:e0:78:31:8e:64:cd:90:54:af:76:39:cc:66:ba:a3:36:
9d:09:21:92:26:6c:dd:2a:97:e8:fd:4e:15:8b:c6:29:c8:03:
bc:db:5e:bc:22:ff:c6:d9:40:bb:4f:84:90:79:29:0a:8a:8a:
a0:dd:5f:78:2d:ed:9e:70:42:69:c3:71:fd:8a:10:c0:60:d6:
59:92:da:d8:1e:8b:b3:e5:8d:8f:5d:43:3a:3b:cf:aa:d7:04:
93:e6:ed:f5:57:4c:25:45:63:f1:d3:04:5d:1c:0c:d2:fc:66:
52:60:5b:15:cc:07:86:6e:c7:4b:a6:90:10:90:eb:be:b3:e8:
8b:2a:ef:24:19:92:7e:d1:d5:24:f3:66:ff:b8:da:a9:c5:42:
1a:0b:13:2e:b9:c9:0f:47:a0:12:d4:ea:4a:f4:27:61:b0:91:
d5:27:9b:55:52:e6:71:a2:c0:17:57:59:af:c5:a2:21:a3:39:
b6:7f:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client