Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: b8tq/kM4sHC+5DWHMahr1bGWQmuH8AaAp5B9tFxlwNc=
Subject key identifier: BE:A2:AC:13:4B:DD:AF:D4:9A:B4:6C:3F:02:38:D6:E1:42:9A:0A:AF
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019D37898DDA2BB9DF355AB853D32B2C0F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0978
Signing time: Sun 29 Mar 2026 03:00:54 +0000
Manifest this update: Sun 29 Mar 2026 03:00:54 +0000
Manifest next update: Mon 30 Mar 2026 03:00:54 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: P56LNpSJSwg84VTqY19T663nBecy8CSZzUgwriWg3MI=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8d:da:2b:b9:df:35:5a:b8:53:d3:2b:2c:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Mar 29 03:00:54 2026 GMT
Not After : Mar 30 03:00:54 2026 GMT
Subject: CN=bea2ac134bddafd49ab46c3f0238d6e1429a0aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:49:14:c0:cb:57:a3:4f:dc:38:ea:a2:71:
5a:d7:b6:a7:ec:ed:c5:3d:1f:d9:16:9a:2c:08:3b:
3f:62:f8:0e:8a:79:94:0c:eb:9e:d2:ad:4c:e8:50:
3a:dd:1a:58:7c:58:18:77:22:46:1c:b9:fd:43:ce:
76:f5:60:bc:81:85:37:22:0d:e9:81:36:74:d8:a9:
23:6b:7a:e9:a1:18:5a:8c:4f:98:d2:be:2f:14:b0:
0d:bd:63:58:30:ea:9f:23:ad:cd:38:85:7e:86:ec:
ff:09:bc:09:f6:1d:42:97:91:53:65:b9:e7:f5:40:
cc:c7:f5:17:7e:37:56:0f:1a:45:fa:eb:5f:5a:77:
d0:4d:6e:5e:09:90:98:1d:66:aa:42:84:e6:19:cb:
2a:dd:ea:42:3e:7d:04:4c:b8:b9:45:d6:39:1f:10:
66:95:96:76:5a:a3:94:47:ff:1b:23:0b:34:ce:87:
6e:f6:fb:4c:d3:ec:37:c3:2d:a1:51:d1:1b:fd:f6:
f0:45:dc:be:17:80:55:6d:7c:80:8c:cf:10:13:c4:
62:b9:5f:b9:c7:f2:10:fd:cf:57:3e:b9:56:5d:bb:
18:88:86:00:6f:38:15:2a:d7:73:9d:61:5c:e1:be:
82:0c:8f:c6:81:4e:ac:14:68:20:34:bd:1e:d3:c0:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:AC:13:4B:DD:AF:D4:9A:B4:6C:3F:02:38:D6:E1:42:9A:0A:AF
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:53:f0:da:22:ed:f0:ee:09:20:67:25:eb:7e:81:9d:f0:6b:
8f:b8:71:02:83:cd:d6:f7:c5:32:13:52:97:42:ac:39:74:e9:
c1:56:64:14:40:cd:b1:2a:7d:2c:a1:08:86:83:f3:57:78:23:
78:32:d2:f3:59:20:02:80:a1:b7:f4:dd:3a:5e:0e:b7:01:50:
2e:e9:98:eb:46:89:d0:ed:92:4a:3e:aa:72:15:e1:20:65:62:
11:bd:f1:0b:98:52:1c:78:38:f0:39:a3:68:73:51:c2:fe:42:
07:7e:b0:a1:c2:37:41:2f:2a:58:0c:6e:9d:7f:d6:ab:62:16:
9b:79:20:16:6b:85:cd:51:d2:73:ae:e0:cf:38:c1:10:47:f0:
b9:b8:f2:9e:27:62:e9:22:d5:67:9a:31:ee:91:58:fc:6a:42:
63:3b:f5:73:29:ff:6c:e2:fc:8d:e1:ae:b6:35:cb:0f:9e:e6:
79:ea:3f:9d:39:9b:49:6b:b7:64:4e:e2:98:09:21:f2:bb:94:
89:4f:44:c5:20:b4:ad:e9:41:f9:ca:48:22:a0:fe:34:c9:c6:
f2:3e:7a:c2:dd:20:e0:b1:64:6c:7c:7a:7c:47:73:47:b1:b1:
19:f7:05:e9:1c:5b:3a:92:d8:99:9c:ad:bc:0c:c5:ba:aa:2f:
b3:27:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:11 2026 by rpki-client