Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: PxCF4+eKX26wxpB/vf8SrD/yeBqgjyyyIKe1ZM1dNOk=
Subject key identifier: FF:C3:35:E8:54:67:00:54:2D:1C:97:B3:76:7E:E8:DB:55:62:67:CC
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019D382E0A1F9371F55AD80221B06BBE4BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 1116
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: AtDZtYz9SSJD5hQ9PzMIttohbYIooiFxudEXC0wlo+w=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0a:1f:93:71:f5:5a:d8:02:21:b0:6b:be:4b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=ffc335e8546700542d1c97b3767ee8db556267cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:48:8e:de:78:a1:8b:55:a1:3e:05:bd:07:
42:72:a6:d7:97:1a:30:21:68:47:e0:5c:d1:77:3c:
80:a7:4c:4c:48:f1:55:0b:85:b2:61:21:9c:e1:92:
e9:4e:fa:ae:98:e4:b8:c6:b7:43:b7:87:32:2e:8a:
92:33:32:b1:d3:fd:df:e6:6e:fb:dc:a2:55:88:64:
a2:62:dc:78:b3:a3:c5:b8:09:6c:25:e4:76:de:2f:
ad:41:43:a5:2e:04:d6:9b:c4:93:17:ae:ab:5f:7a:
f6:25:9a:db:db:52:40:bf:d4:27:03:9c:ba:f4:2b:
ce:5f:e4:4c:48:c3:de:a7:ee:cf:a3:fa:02:0b:e4:
58:1f:f8:7d:1f:2b:a3:cf:c0:d1:09:de:bf:04:17:
7a:c2:62:ee:a9:81:85:75:ad:65:40:2a:25:f6:8e:
2f:25:98:d8:28:6e:c7:66:9e:b4:e4:9a:9c:67:97:
49:cc:06:37:c3:e9:82:3c:2e:1c:94:77:e6:5f:57:
ae:c0:12:bb:37:2c:f5:ec:5d:b9:80:28:79:43:65:
ac:86:e9:62:fa:f0:99:c5:b9:fd:77:30:4e:01:32:
06:31:89:93:1e:8c:d3:d5:41:de:48:9a:ce:e7:1b:
3a:d2:42:4b:31:24:3f:ae:5b:d2:21:ed:e6:c7:70:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:35:E8:54:67:00:54:2D:1C:97:B3:76:7E:E8:DB:55:62:67:CC
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:7c:fa:20:08:5a:13:86:75:2b:bd:79:2e:5c:ea:cc:1a:
de:ef:0b:99:d6:08:9f:79:c4:7a:d4:30:f3:bb:47:af:62:4f:
8c:10:30:45:d0:87:43:84:4c:96:de:4f:6a:d5:13:f6:20:bd:
b3:3b:5f:da:83:7c:b3:15:95:24:7c:2c:53:2d:e2:7b:9f:f4:
99:d1:fa:ae:3f:41:ad:89:95:f1:f7:9a:b0:6f:9e:67:a7:1f:
21:43:1d:da:ab:f4:fa:95:29:3c:65:33:d9:08:72:39:d3:dc:
7c:38:ae:2e:21:0a:2e:74:09:38:a3:c2:08:7c:e5:48:05:93:
ea:40:40:5d:46:cc:3c:af:72:8d:03:de:1f:85:51:c0:e6:0e:
57:29:cc:5c:58:77:7b:0e:8e:f2:41:40:84:eb:19:43:d0:fc:
41:7e:2f:ae:80:1d:51:df:75:f4:ed:ef:6b:41:54:6c:0f:2e:
2f:a5:97:13:36:3d:b5:46:d8:3a:56:a5:1a:9c:a5:71:e0:9d:
a7:a1:6b:85:d7:5b:a6:3b:c2:c7:c0:81:42:cd:c6:fa:09:63:
ca:ca:da:ee:c5:bb:8d:0d:ab:7f:f4:8e:64:fc:51:f4:a0:e5:
69:df:6a:ef:4d:b9:aa:80:db:c0:8a:fb:dd:e8:5e:94:b6:d2:
92:e2:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:47 2026 by rpki-client