Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
File: 1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft (raw, json)
Hash identifier: UcRek5I+gyy2Y3LoGJL9Q3meRfSFREL0KiQfngCCrCg=
Subject key identifier: FF:3F:2D:CD:23:08:A5:B4:D4:4C:81:FC:38:D5:61:61:A3:9B:4A:48
Authority key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
Certificate issuer: /CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Certificate serial: 019D3941145BDAC069E888E2CD339FFA4259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
Manifest number: 13AF
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: 1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl (hash: gj4W22yqEcZAxydPSVsLxAviX2ABLEniLhGF0w01J/8=)
2: WgzAJAAGedZo9H1Bb6mxo-sFWPc.asa (hash: mkn1GsOBT5OSMsMij4ef4UJYeUFgZ0WvqFnb1FTHsnY=)
3: nZQmpTW1Fls0q8EqX6yioqYSKxU.roa (hash: FRx2NpybFX5hfjHhUBAeZ2BzMaS2NWWrtqLCiKcD1MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:14:5b:da:c0:69:e8:88:e2:cd:33:9f:fa:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=ff3f2dcd2308a5b4d44c81fc38d56161a39b4a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:a8:38:bc:6a:9c:a0:33:c7:b3:d5:9d:e4:
16:ce:81:3c:d4:78:7c:70:73:da:b5:7f:0c:1b:2d:
99:75:76:8d:fe:ff:e1:89:b0:69:7d:7c:18:86:81:
0d:11:ea:3f:f7:12:6d:22:40:79:f1:e1:ec:54:74:
88:4c:30:7f:65:ae:c3:4f:02:4b:8c:a1:29:4b:6e:
c3:10:5e:dd:70:8f:3e:fb:ee:f5:98:fc:9f:c3:6f:
49:81:f4:db:09:62:8a:be:42:1b:75:a3:cd:9d:2c:
88:f2:74:89:96:76:08:eb:0e:75:66:0a:91:c9:de:
67:76:2e:cf:c5:5c:79:e2:55:82:69:ee:fe:cd:db:
74:a3:88:fc:c9:fa:c4:83:8c:05:4b:0a:ce:da:07:
86:03:d5:e5:a2:30:e3:8f:66:6e:6a:59:79:4d:54:
5b:5d:a5:f6:87:9c:d9:c7:b1:a3:f6:b3:30:e2:97:
12:0b:5e:ce:8d:7d:d3:c5:1b:ab:9c:6a:60:6a:72:
2c:3a:e0:12:29:c8:c5:eb:8a:f2:96:30:bb:03:cd:
42:d6:5d:6c:bb:06:db:de:a4:16:79:ba:b6:b1:a4:
b3:ae:00:c8:ee:f3:76:c5:b4:a3:58:4e:b7:75:67:
a4:97:46:fa:c2:7e:76:a4:fe:73:48:ad:b1:ad:0e:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:2D:CD:23:08:A5:B4:D4:4C:81:FC:38:D5:61:61:A3:9B:4A:48
X509v3 Authority Key Identifier:
keyid:FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a0:bb:7a:8a:20:6b:4b:f3:cd:67:14:8a:33:31:01:21:40:
13:c2:8a:1a:68:2c:ec:79:31:f1:0d:89:c6:e1:27:8e:e6:52:
cd:e1:c3:f9:ad:ae:75:ab:5b:28:bb:74:23:0b:4f:01:9a:ea:
6c:8f:41:8e:fa:d1:bd:f8:f5:ca:dc:b7:76:41:53:b7:28:56:
7b:29:11:fd:ef:90:36:5b:59:b4:8c:b9:d5:7e:eb:1c:fe:e3:
e0:5b:fe:af:64:e8:16:ce:d9:23:86:c2:ac:ed:9e:51:17:5b:
93:b4:d3:04:4f:6a:71:5e:1c:01:4c:01:db:4e:30:c5:6a:72:
cc:76:67:40:ff:2f:df:12:24:06:7c:9a:6f:ce:39:ce:3f:d4:
22:59:28:7d:dd:4e:2c:d0:14:01:5a:89:a1:fa:a8:f8:ad:fb:
70:7c:c7:2b:40:69:65:3d:33:43:b5:0f:c9:25:3f:e5:e7:32:
3e:d5:a3:9e:ad:3d:a3:e5:b5:3d:96:13:81:05:16:7d:9b:94:
f5:c3:22:f6:2c:13:e3:8d:84:52:fb:5d:3f:13:44:b7:5d:28:
49:d5:d4:d2:82:e1:eb:f7:47:e6:d0:39:15:80:2c:00:7e:e9:
52:9a:a8:4b:fd:be:56:2c:c3:30:45:5b:49:9b:44:c9:96:f8:
79:3f:96:93
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05QRRb2sBp6IjizTOf+kJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjAzMDFlZjZmZjU4OTdiNWJlMmM5NDFkZGI1MTk3OGZk
NDg5ZmYwHhcNMjYwMzI5MTEwMDU5WhcNMjYwMzMwMTEwMDU5WjAzMTEwLwYDVQQD
EyhmZjNmMmRjZDIzMDhhNWI0ZDQ0YzgxZmMzOGQ1NjE2MWEzOWI0YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZOoOLxqnKAzx7PVneQWzoE81Hh8
cHPatX8MGy2ZdXaN/v/hibBpfXwYhoENEeo/9xJtIkB58eHsVHSITDB/Za7DTwJL
jKEpS27DEF7dcI8+++71mPyfw29JgfTbCWKKvkIbdaPNnSyI8nSJlnYI6w51ZgqR
yd5ndi7PxVx54lWCae7+zdt0o4j8yfrEg4wFSwrO2geGA9XlojDjj2Zuall5TVRb
XaX2h5zZx7Gj9rMw4pcSC17OjX3TxRurnGpganIsOuASKcjF64ryljC7A81C1l1s
uwbb3qQWebq2saSzrgDI7vN2xbSjWE63dWekl0b6wn52pP5zSK2xrQ791QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP8/Lc0jCKW01EyB/DjVYWGjm0pIMB8GA1UdIwQY
MBaAFPuwMB72/1iXtb4slB3bUZeP1In/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03QXdIdmJfV0plMXZpeVVIZHRSbDRfVWlmOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNDA1ZDliLTEwNzMtNGNkNy05MGVi
LWU4ZjYwY2FiMTg2Ni8xLzEtN0F3SHZiX1dKZTF2aXlVSGR0Umw0X1VpZjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUwLzQwNWQ5Yi0xMDczLTRjZDctOTBlYi1lOGY2MGNhYjE4
NjYvMS8xLTdBd0h2Yl9XSmUxdml5VUhkdFJsNF9VaWY4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqC7
eooga0vzzWcUijMxASFAE8KKGmgs7Hkx8Q2JxuEnjuZSzeHD+a2udatbKLt0IwtP
AZrqbI9BjvrRvfj1yty3dkFTtyhWeykR/e+QNltZtIy51X7rHP7j4Fv+r2ToFs7Z
I4bCrO2eURdbk7TTBE9qcV4cAUwB204wxWpyzHZnQP8v3xIkBnyab845zj/UIlko
fd1OLNAUAVqJofqo+K37cHzHK0BpZT0zQ7UPySU/5ecyPtWjnq09o+W1PZYTgQUW
fZuU9cMi9iwT442EUvtdPxNEt10oSdXU0oLh6/dH5tA5FYAsAH7pUpqoS/2+VizD
MEVbSZtEyZb4eT+Wkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:05 2026 by rpki-client