Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: URPQts/CWISzkrEo6vjWWrICSeCFuruftYhb/Yt27Ws=
Subject key identifier: 57:6D:3F:D8:9C:24:01:D0:50:24:C1:56:8F:64:3A:D5:32:88:92:DD
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019D39AE8D665345746019CEF48CBA7B2C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 13:00:33 +0000
Manifest this update: Sun 29 Mar 2026 13:00:33 +0000
Manifest next update: Mon 30 Mar 2026 13:00:33 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: MiJ+ZdQDlFWwR0UNMgF2yDxsE7TE4C8VK4H49W54gBY=)
2: 2Bdi4XnLFiihlMAX_gDRRlR7QGM.roa (hash: VjiQO9aLNwn7skSw+PzxXhanmj53IG3y+tedhX+Sjas=)
3: 6-xQbUlUaR82Mjs6L91ilC6T9zk.roa (hash: 3yF/4C6JYKybBw99BMZ6GkxatUw24XNyWwCB72QH0u0=)
4: INUpirlxyhCbq85VbAW6ztdQs4k.roa (hash: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0=)
5: OroJQKCq7I4yVcFTm6lWNUxxqrw.roa (hash: nDA5smDMOF4n6Nj5rxqPI/iYhWZmpnNfYaYuSp7sOUs=)
6: ZhkHANnwp0wI55F5kUZAa2xMrE0.roa (hash: UMOnz6djXz4C+wt70K102Br84XLLMdwFlF/5hZkaKPg=)
7: qFql76UYRJ7MqINcpO2JRQNjZJk.roa (hash: b3XQyMMRxs2maOmxKWw8Mo7+dtT/HrPvRDYI0jww5Lg=)
8: toBgBy-wXt9ztACvTMgMCKihycU.roa (hash: yb1GpybJZ+YI1CnQBecKiIQImUYJAW98skB9t8+FlLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8d:66:53:45:74:60:19:ce:f4:8c:ba:7b:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Mar 29 13:00:33 2026 GMT
Not After : Mar 30 13:00:33 2026 GMT
Subject: CN=576d3fd89c2401d05024c1568f643ad5328892dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:91:93:ee:87:0d:a3:da:49:38:b4:39:cb:99:
46:e0:ac:0d:ee:68:6e:c3:60:1a:a0:ef:f0:0c:03:
e8:c4:8a:af:ca:cb:6f:ee:bd:4f:43:94:31:15:09:
72:74:b6:17:f0:4d:98:5a:14:88:0c:2b:99:e4:0c:
a9:32:43:4d:77:86:a2:fd:6b:a3:c7:ef:ba:9c:15:
78:fe:b0:30:50:6a:e8:24:9b:91:62:70:74:1e:9d:
ce:b0:fe:c2:a4:59:90:eb:c3:6b:02:c5:f6:84:eb:
d6:5b:3b:42:be:10:b0:7d:90:b2:a9:52:6a:de:05:
06:c5:ad:f0:35:50:33:af:47:58:d2:a7:ed:70:2f:
b3:d9:5d:da:fc:64:03:24:88:f3:cb:18:dc:3c:57:
2c:5b:bc:82:a6:63:bb:b9:0d:f0:3a:b7:4e:07:7f:
d7:87:bf:fc:bc:34:4a:5c:b9:16:b1:06:b5:62:88:
00:3d:4f:17:ed:61:18:2d:d8:cd:94:72:1e:9c:db:
ef:cc:50:90:cf:24:81:f9:43:7b:8e:1f:00:11:5b:
37:8e:93:b6:1c:ed:ea:d2:10:ac:cc:af:0e:c3:ae:
a2:05:95:fd:d2:b9:8c:f3:7e:ae:ae:2d:78:e0:c7:
b1:94:bf:99:2b:62:c6:90:48:c8:7d:76:b6:95:ca:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:3F:D8:9C:24:01:D0:50:24:C1:56:8F:64:3A:D5:32:88:92:DD
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:b5:0e:f5:68:41:71:73:f8:4a:61:0d:dd:0c:9b:74:9a:
cb:6c:48:46:e2:7b:0f:37:ba:d6:db:23:9b:bb:ff:96:a8:b7:
b4:35:c0:b1:2a:9d:83:20:3a:39:24:b9:0a:0d:1d:98:a4:d3:
e8:9a:80:ec:10:ad:40:4b:67:d6:11:1b:15:cf:9b:f4:b7:1d:
12:ba:9b:5e:16:c7:38:df:67:6a:ff:c7:8f:03:7c:7a:78:42:
0f:d2:60:a1:39:5f:2a:7c:c8:cb:f4:86:67:4d:7c:7e:09:7c:
28:bf:b6:56:ae:1b:a1:1c:a2:f4:73:7f:46:32:84:a7:c4:ee:
cf:a0:85:14:68:b6:73:a8:07:ab:6c:2b:66:cf:fa:22:54:23:
c7:41:c5:98:87:a8:80:cf:1d:41:71:10:20:20:cd:6a:a6:94:
b7:b2:05:f1:de:a6:c1:2a:33:9d:62:09:a0:99:ab:bf:02:35:
8c:0c:f0:63:56:d2:c7:fc:0b:00:cf:90:33:c0:45:59:dc:c6:
e0:49:6b:31:e1:12:06:45:92:de:97:90:98:23:2b:4a:4b:86:
0a:9d:fa:cf:3d:9e:f8:fa:c4:cf:56:36:2c:8b:17:2d:9e:59:
4c:45:c6:f5:0f:82:3f:9b:a5:9f:87:83:b9:70:b6:f6:92:65:
8d:66:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:14 2026 by rpki-client