Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: 6NmunWxuCqdCldSKasOjAVSD/6cksSpcLSlTKKDkFXA=
Subject key identifier: E0:08:B8:DF:1E:21:61:29:25:DF:7A:5A:79:CB:C5:61:69:8B:B5:C4
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019D39409539D1733C96C0F7EA9AAA3B1020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: s7nEAHbKx/mc0nwVcIW7LkT2F4kMZkyj2LojTahfKdU=)
2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:95:39:d1:73:3c:96:c0:f7:ea:9a:aa:3b:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=e008b8df1e21612925df7a5a79cbc561698bb5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:04:cc:a1:66:b0:1b:c1:33:72:f1:73:15:
ab:b3:37:c9:c5:51:7f:28:10:8e:6e:c7:df:8f:e6:
54:df:f7:af:f0:26:2b:c9:14:09:67:b2:b7:31:b9:
8c:70:53:7b:49:09:44:f6:47:6d:31:66:74:36:60:
6d:c5:37:bf:12:dd:f8:11:d9:05:0b:50:53:aa:88:
2b:4d:b9:12:39:f1:e1:04:6c:4f:2f:5a:67:2a:27:
92:29:fd:e5:93:a5:ec:83:bf:9b:16:2a:3c:1c:86:
98:16:7e:26:71:20:21:a0:ee:1c:01:4f:1e:e9:0f:
01:f5:62:28:42:d3:30:ec:1b:16:f3:1d:64:e0:f9:
87:64:88:ed:cb:f1:7f:d8:48:5c:ac:b8:ad:d6:2a:
4d:d8:ed:22:7e:fd:0f:6d:29:b5:9e:1a:91:fa:f8:
fe:2a:29:76:c4:88:2c:48:31:03:f0:00:f3:20:7a:
ee:53:1a:af:62:82:fd:3c:c1:5e:c9:b7:f9:68:77:
21:6f:10:15:1d:28:56:52:fd:cf:d1:79:8f:e4:d8:
fb:1c:13:68:2c:71:d8:ad:76:a3:59:89:79:0f:10:
6e:06:ec:a9:e1:72:4e:cf:08:b5:1d:39:38:25:f1:
bc:34:3c:18:4c:2c:25:19:b4:a5:1a:85:c8:66:26:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:B8:DF:1E:21:61:29:25:DF:7A:5A:79:CB:C5:61:69:8B:B5:C4
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:ac:7d:3a:e1:fb:a5:68:a7:3e:03:7f:f7:0d:18:73:90:
40:07:5b:48:aa:e5:2c:0e:84:d8:ea:a9:ff:b5:45:9a:31:27:
8b:fe:4d:ae:2f:01:41:9c:2a:de:e0:e4:ac:88:ad:86:c8:98:
84:87:82:f7:37:15:44:16:d9:83:c2:7e:4c:1c:67:65:06:92:
20:11:46:ad:b8:33:e6:4d:f4:0d:bf:09:36:7c:fe:c2:66:ab:
f1:33:88:c3:dd:d0:13:0a:66:09:83:a7:2a:44:58:cd:97:dc:
8a:e8:e5:fa:71:56:c2:26:dc:2b:0c:be:2b:ee:3d:4b:58:d3:
1f:38:a2:50:8f:b8:86:32:f4:1d:5f:3d:21:42:b8:46:9b:58:
74:a6:6a:13:a2:e4:3c:8d:ee:85:e8:ff:97:49:14:01:13:5f:
77:5c:5a:95:72:52:4b:32:7a:a6:bc:28:0b:6d:cd:e8:d3:a8:
58:0c:02:ee:b7:a7:87:60:12:ab:49:fd:21:58:7f:62:64:08:
e7:b2:aa:32:b4:d3:92:e2:83:41:63:45:73:73:72:78:8b:13:
52:69:0b:a9:3d:ee:96:2b:ce:43:e7:98:80:79:b5:f2:31:8c:
91:0b:60:6b:53:ea:b0:46:7c:e4:4a:f2:22:a2:e4:5d:17:f8:
11:7d:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:41 2026 by rpki-client