Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: ifa1hTFXYzJ+fEA3AjmeqC6+xsZbjl3mPcMSQ1j/ouA=
Subject key identifier: A0:08:EC:0D:2E:75:80:0D:B5:11:CD:44:E2:38:C4:97:82:CB:4E:9B
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 019D382E01776CE64411D81E1D72B144ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: YHh7rteDdT3bVeeet+cFcwvLWo6kGHykt7KoJy+21rM=)
2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:01:77:6c:e6:44:11:d8:1e:1d:72:b1:44:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=a008ec0d2e75800db511cd44e238c49782cb4e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:ed:a2:74:77:bd:73:d4:a2:1b:65:8a:39:
53:4b:e2:4e:f2:f0:a4:a2:36:d6:2e:5d:a8:09:c2:
a2:76:0f:a0:8e:61:c7:a1:68:ef:ec:28:c2:ec:01:
3d:58:bc:fc:e6:0c:59:b3:68:5e:59:9d:30:d5:a7:
13:29:82:2a:d8:a9:d5:95:01:37:24:45:e5:c4:3c:
89:2a:0c:9b:0d:91:fb:56:72:f1:67:28:2d:a8:91:
01:40:52:27:3e:d5:ba:a2:a3:46:aa:b2:09:9c:39:
dc:f7:ed:fb:13:3d:f2:ba:fd:0c:6f:8f:72:2c:db:
4a:98:a9:65:7d:fd:56:7a:cd:e1:c5:41:6a:49:f8:
47:28:c2:91:49:e6:09:d4:f6:14:5a:89:b4:ff:6b:
dc:8f:4d:d6:39:71:a2:0f:97:1b:58:43:4c:f9:2b:
70:83:2b:ff:6c:4c:2c:37:ac:98:ba:cc:b6:b1:8a:
85:b8:54:42:5c:fc:07:30:7c:1f:6a:be:69:12:b7:
cb:79:4b:c5:fa:f6:d5:bd:b0:6f:18:4a:4a:b2:54:
7f:2a:14:e8:bb:d4:54:b0:21:95:05:9d:1c:21:d6:
63:68:88:00:88:d0:aa:4e:b0:f0:76:a6:71:28:39:
24:5e:da:c0:7e:ef:14:95:0c:af:53:72:ca:b5:14:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:EC:0D:2E:75:80:0D:B5:11:CD:44:E2:38:C4:97:82:CB:4E:9B
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:92:1d:85:78:ca:8b:0e:da:14:21:68:a3:39:02:34:2b:34:
ac:84:22:8f:5c:67:14:2d:eb:72:a7:3a:96:86:8a:13:cd:9c:
05:96:fe:d5:48:b3:da:47:70:79:7a:f2:9a:51:2d:fa:a4:b2:
36:6f:05:2b:ec:c8:fe:53:b8:a2:76:ca:dd:dc:41:21:37:d5:
0d:0e:25:74:24:9b:3f:21:dd:e5:0c:a6:cd:c7:6f:75:99:db:
4c:07:db:d3:4f:a3:1b:6b:7e:86:ac:ad:fa:b1:64:dc:6f:22:
e8:4f:fa:94:70:2f:10:5d:20:b4:c0:a1:5c:3a:45:1d:09:78:
db:fb:70:c7:7f:d9:5b:60:d6:ac:6d:71:62:94:90:b9:64:6e:
d1:0c:65:65:50:aa:b8:e5:b8:e5:35:2d:01:a3:6a:c3:43:8b:
e8:db:6a:2a:1e:77:bb:ce:63:cb:2b:0d:94:55:5b:65:a7:a8:
99:55:6e:a1:84:d5:c1:d3:b7:be:9c:32:5f:02:6f:67:22:54:
25:b8:64:53:bf:45:b0:39:fa:f5:1c:2e:65:f8:84:78:06:fc:
4a:fe:ac:8f:4f:81:8a:c8:28:40:d4:95:7b:0a:a5:e2:54:81:
79:b6:d9:49:31:9a:77:ed:8a:fc:4a:72:af:18:66:fb:cd:55:
74:d9:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:40 2026 by rpki-client