Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: E1s5K+gVMhrh2mnDsZ4p5CypUgbWsvZPLi7yysfFphA=
Subject key identifier: 21:89:21:A6:5E:DA:75:68:6D:2A:4B:FA:6F:74:A1:98:94:E3:4D:6B
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 019D37BFF084321FAEEC0DB910A54BBC3942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 01D5
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: C/Oup+94KZLZU5Ypm7BzroyaLvrcOJgnpDYy4/4VOIY=)
2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f0:84:32:1f:ae:ec:0d:b9:10:a5:4b:bc:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=218921a65eda75686d2a4bfa6f74a19894e34d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:88:a7:df:52:6d:cb:a3:d6:22:1b:5e:18:
17:f6:62:df:18:29:01:1b:10:6c:67:ad:03:4a:6a:
07:41:d8:ed:2b:ae:8a:67:5d:9a:40:55:aa:ab:d1:
45:78:f9:7d:1b:31:e8:30:bf:fb:b4:bb:be:4e:95:
56:27:a4:a8:ce:c6:3e:d3:a0:ab:83:fd:79:92:57:
72:aa:68:73:56:4a:89:52:02:fb:05:32:a2:fa:18:
00:fa:a8:af:d4:4b:2b:19:39:81:7a:2e:3c:ec:1b:
dc:cf:05:76:01:5f:4d:00:66:87:aa:2d:4c:e3:e4:
10:53:81:98:8b:df:98:01:5d:3b:e8:bc:3e:7f:e5:
cc:74:17:3f:8c:ab:bc:2c:fc:b9:6f:f4:07:a7:d9:
18:95:e1:24:0f:7f:4c:df:41:08:a5:0a:94:05:1a:
75:b9:03:ee:10:15:09:fc:6d:d0:53:77:83:70:74:
4f:0a:e0:08:2f:2a:b0:1c:36:60:be:12:f5:ec:80:
19:ce:94:4a:08:7c:eb:99:df:80:00:7a:97:b2:59:
9d:ae:e5:bb:0d:cb:78:d5:1d:34:e4:f2:27:6d:99:
d3:97:03:7e:f2:7f:60:e6:22:d7:49:fa:ab:0d:ed:
5b:43:72:a5:18:04:c3:6a:15:96:aa:ff:e5:9b:e8:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:21:A6:5E:DA:75:68:6D:2A:4B:FA:6F:74:A1:98:94:E3:4D:6B
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7f:6b:17:58:1d:31:52:f0:95:c2:63:82:9f:1b:fd:86:5c:
5e:99:90:48:11:8f:ad:95:1e:07:ee:6d:ce:00:0b:a8:62:2a:
4e:42:d7:a4:69:b5:0e:9d:69:cc:bc:ba:60:c5:94:44:3c:bd:
f8:11:90:d1:a1:d9:c7:cd:00:ab:00:90:7e:57:c6:91:ee:72:
14:d6:b2:e0:6d:05:0f:46:ba:eb:a2:b0:dc:95:99:b2:65:99:
b6:22:0f:4a:7a:dd:db:17:f4:0e:0c:c9:39:03:4c:a5:27:6a:
22:d5:2c:8b:b5:f0:88:86:8f:3b:d7:c5:f0:fb:c2:93:9f:a5:
26:dd:e7:ed:4b:01:9c:6e:75:af:59:32:b7:77:69:c6:ce:90:
37:4a:2b:dc:41:f8:6f:99:b5:48:55:4f:d3:af:79:68:ee:5b:
b8:0e:0c:3a:b2:22:60:95:76:51:ba:10:fc:f1:99:2f:98:1b:
23:09:70:b8:59:04:da:65:17:09:c5:46:a0:ec:b0:4a:a3:cb:
90:86:d8:fe:1c:29:7a:2e:9b:f0:ab:1f:82:ee:8e:e3:fe:12:
cd:b7:f7:8e:7f:85:9f:0c:61:ed:c1:14:de:50:e7:c1:07:7c:
1b:26:5b:38:7f:49:79:5d:b4:e6:a6:eb:c3:05:e8:35:af:de:
6b:91:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:17 2026 by rpki-client