Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: qPmbaNihmYIMv4QU4oMW2cMHVMl/QjqimbdP0iFexXY=
Subject key identifier: BA:B2:60:BB:48:1E:D4:69:2F:A8:B9:AF:B0:B6:C2:2F:30:7C:61:EC
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 019D37F6F1E426FA76D4A859C010338B406A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0AA3
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: qUXyUDhaYHaEOvcywRG2DAvacxkfXD5tinKRS/TVWYw=)
2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f1:e4:26:fa:76:d4:a8:59:c0:10:33:8b:40:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=bab260bb481ed4692fa8b9afb0b6c22f307c61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:d9:7b:7d:90:e0:e2:20:db:85:c5:c8:0a:
db:d2:98:ef:d3:4a:85:fe:27:13:ad:15:10:fa:5e:
36:52:5e:7f:35:9b:6d:fe:9c:ec:27:0f:28:0e:79:
27:ee:e1:af:3a:12:91:76:0e:cb:af:45:a6:3a:99:
77:55:b5:9d:e6:74:79:00:e2:ce:66:e0:69:7c:0f:
7b:47:8a:60:ac:f5:79:71:a5:69:27:ad:36:7d:fb:
c1:a8:03:39:a9:4a:9c:ed:f5:89:c1:33:70:b6:5b:
36:c1:31:be:2e:e9:de:98:0b:f1:9e:c1:b1:e5:13:
ee:44:b7:44:78:ea:70:a8:fd:e2:88:ae:8f:0e:6e:
18:67:f0:5e:f6:d9:9b:f6:b9:73:76:a2:bc:5a:10:
e4:53:02:ac:2a:11:3c:6a:c1:69:be:ff:b7:9c:4e:
36:2d:48:e8:a6:4e:af:4b:b0:a1:4a:fa:a9:96:b0:
d1:ba:0b:b8:04:7f:a5:b9:d9:6a:0f:5c:8d:ea:cf:
78:77:09:3f:fc:33:ea:77:8f:15:2d:de:6d:f5:c2:
cd:6a:9b:8f:f9:8e:93:5e:ff:c3:87:ee:37:09:90:
a8:e9:ec:4e:3a:95:82:19:39:38:e9:8d:c4:16:77:
0c:8a:da:09:bc:75:84:33:92:a6:1f:fc:2d:3e:05:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B2:60:BB:48:1E:D4:69:2F:A8:B9:AF:B0:B6:C2:2F:30:7C:61:EC
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5a:43:e4:1b:22:86:a2:75:91:29:2c:6b:94:a2:11:8f:f4:
68:a4:09:15:09:cc:97:09:e4:89:80:ef:55:a2:93:f5:0a:b7:
13:32:23:c2:95:5a:83:53:f3:22:4d:3f:b6:a7:02:5d:c4:24:
bf:33:b3:85:bc:43:a6:19:af:cc:5f:24:1d:fd:0d:08:54:81:
b0:e2:ee:9d:05:e9:de:a4:3b:06:ac:36:8d:8a:71:95:bf:b5:
32:dc:f9:10:fa:d6:2f:93:39:ec:40:a9:1e:df:60:7e:5e:08:
41:8b:44:f2:54:24:53:35:86:73:53:bc:31:23:2b:bf:b1:ef:
73:9a:22:3f:e0:a8:99:15:6f:98:69:38:63:42:01:b2:b4:56:
e5:20:2e:f2:c0:45:ea:6d:67:28:cf:af:16:79:75:d2:51:3b:
54:e5:0d:a3:61:52:ba:77:ff:a0:c8:2c:04:36:96:ba:2d:29:
97:a2:91:ca:05:4e:24:31:0e:d6:df:85:5f:61:51:d0:54:03:
7e:65:df:28:ab:45:ad:58:39:ab:27:83:37:e4:c6:e8:b1:b0:
57:5d:76:43:32:73:ad:4b:da:26:3b:a0:f6:ef:21:a4:17:30:
90:f2:af:59:89:a2:6b:3d:1e:41:53:6d:fb:4e:b1:0e:6a:c7:
a7:bd:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:27 2026 by rpki-client