Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: TTcdS14mrmDggt8TVL1ghdGQFhXqIsoLZhvrcNL496E=
Subject key identifier: 0A:4F:36:5A:82:D5:A3:33:10:C9:A9:31:80:34:DF:9D:15:02:CE:83
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019D39419C721D324FEBBFB7BD881B2EFDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: QZLzzx0kvO5i7AmEUB0jLpYYWLONCVyBp0Fe92V1kUE=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9c:72:1d:32:4f:eb:bf:b7:bd:88:1b:2e:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=0a4f365a82d5a33310c9a9318034df9d1502ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:d1:ca:ff:29:a1:16:39:70:78:37:4d:55:
db:b8:57:2c:93:3e:e8:98:9a:56:6d:d2:fa:cc:ef:
96:7b:0c:05:18:6b:03:aa:ee:7b:cd:69:92:0a:85:
cd:9f:91:6a:1a:98:6f:00:02:a7:1d:41:07:2c:77:
51:26:47:52:ca:18:8b:2a:c9:b2:23:4c:64:6a:c7:
1c:a1:dc:02:91:2d:ad:72:62:8a:48:bb:fb:72:70:
9f:87:da:ae:11:f9:9f:a3:e2:12:1c:d0:1a:ed:0a:
46:ba:69:b8:b4:91:de:54:7a:cd:18:09:a5:e3:2f:
14:54:2d:e8:35:88:c3:9d:e9:4e:ae:8f:18:74:ee:
0c:b4:66:68:f3:d8:3e:b4:0a:2e:9d:67:cf:a7:a7:
fc:2d:3e:af:06:f8:fa:3b:08:c2:eb:9a:a2:99:b1:
9d:25:6b:a4:1c:b4:fa:f5:58:a2:04:c7:90:ae:24:
9c:25:cf:df:69:df:b7:da:90:3b:e8:86:a9:3e:9b:
39:9c:08:65:35:a5:9c:14:4d:4b:00:a2:9b:da:2c:
89:51:87:69:05:98:3c:39:39:bf:af:72:8a:91:71:
7a:02:44:ec:42:92:4c:8e:73:87:f1:e1:f6:90:91:
ef:bc:37:e9:c5:b0:98:c2:a1:1e:9e:25:42:a1:bd:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:36:5A:82:D5:A3:33:10:C9:A9:31:80:34:DF:9D:15:02:CE:83
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c7:eb:7f:42:08:cb:2c:de:42:eb:24:51:3f:de:9c:b3:2d:
5d:a4:68:17:e4:b6:ad:53:ca:e3:9a:51:6a:0a:8a:38:ce:85:
bb:b3:f9:07:6f:78:f7:c0:7c:d3:82:fd:a5:4b:dd:c9:12:9f:
e7:17:18:95:78:aa:a6:9c:17:c9:0c:9a:33:28:da:e6:a8:21:
9b:37:9f:8e:ca:f2:1b:29:c6:73:81:b3:24:e9:7e:fb:8d:86:
b7:d8:ac:d7:1e:3a:d9:4c:7a:2c:cd:6c:8c:be:b6:79:9c:d6:
47:71:3c:a4:99:63:13:91:a2:be:27:03:cf:3e:38:1d:dc:9e:
90:31:79:ad:43:f8:ef:0a:16:03:a8:f3:0d:e2:f0:a8:4d:40:
00:4e:4f:5e:84:b7:af:b7:f8:5c:d2:db:00:51:c9:e2:56:dc:
d3:16:72:48:cb:6c:bd:5d:ad:7e:f7:fb:83:5e:75:3e:e6:28:
88:73:69:e5:2f:96:e1:cf:64:5f:95:d4:8a:d0:cc:e3:cc:c5:
49:09:21:f1:42:4d:8f:a1:96:53:0a:ec:d1:d2:e5:48:71:19:
2e:56:8c:3f:10:b5:93:83:8e:6b:3f:69:c8:be:ef:46:a1:63:
a8:ca:ae:98:2b:66:95:6c:47:b8:24:c8:b6:15:7b:80:0a:d0:
12:76:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client