Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json)
Hash identifier: LjJLGuBTDxRZV7suW2ED8VV5/k3CpkN6FSbBWx/zjYA=
Subject key identifier: 05:3F:F3:E5:37:4C:C1:B9:5C:82:F5:A3:F3:8E:09:04:9C:96:93:6F
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 019D39781F62EC92CB2EB2680F8EB77A2D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
Manifest number: 0391
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: N+s0XILBscY0Tj+j/EXGFIic0JUzca8BkTZOIK1kJEY=)
2: XC4XfUnYUHL3GWJtIhpSMk_2aEg.roa (hash: nZn5ZWsX+2jr8MBM7c6IGtv9xGRydCTv/MbUPDW32YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1f:62:ec:92:cb:2e:b2:68:0f:8e:b7:7a:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=053ff3e5374cc1b95c82f5a3f38e09049c96936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:04:f8:50:7c:57:ad:35:e4:b4:0a:ec:37:
99:15:3a:70:62:29:f7:34:5a:bd:dc:56:b2:3a:45:
39:a4:8c:b5:8b:19:73:6b:25:fa:df:bc:d3:75:a0:
b5:c0:df:bb:87:a9:f1:e7:ce:b8:9b:12:b9:51:f0:
a3:2f:cf:98:65:b2:50:ef:28:b8:e9:0d:a2:1d:cb:
a5:e0:53:18:31:29:4d:43:76:56:3e:d7:8a:eb:de:
a4:77:e3:c1:c6:8f:52:61:a1:2e:dc:a6:8c:51:5b:
27:c8:84:4b:ce:e4:61:cb:17:48:4b:1f:f0:00:c6:
49:3e:19:04:a3:cc:dc:42:1c:fc:b6:b2:f8:26:21:
c5:1b:92:7b:21:56:ec:25:f9:6e:7b:39:a7:1e:bb:
32:41:6f:d0:21:6a:e8:29:d0:7a:f8:5e:7d:80:a1:
a1:81:d2:cf:f7:31:1c:57:17:30:5c:e4:77:5d:20:
71:50:50:69:29:08:cb:f0:a9:86:b1:61:e4:60:1e:
5d:c6:a4:c9:32:88:c4:23:e6:8c:c7:e6:b7:6c:16:
f4:ac:9b:26:9a:a0:cd:cc:b3:fe:85:6b:dd:ee:03:
6a:7e:97:4b:5f:55:c5:98:c5:fe:88:b6:d9:7a:68:
23:39:5f:07:a8:7b:6e:6b:d9:ca:d6:bd:30:0e:a1:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:F3:E5:37:4C:C1:B9:5C:82:F5:A3:F3:8E:09:04:9C:96:93:6F
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9e:4d:d6:42:0b:77:81:10:51:6a:ea:77:d1:9f:88:54:96:
71:31:13:73:44:ba:92:6a:b3:99:ff:a4:fc:d6:59:da:2b:a3:
38:75:cd:f0:97:d5:c3:6c:d9:8a:ff:be:d5:b1:da:7c:36:cb:
4e:50:cd:f5:9c:37:b4:61:95:7a:fb:cb:fc:1d:15:f3:e0:9f:
f6:18:73:08:f5:7f:2c:8d:60:97:c8:1f:0d:2d:57:d6:f2:b1:
36:cd:34:94:e6:f7:ff:fa:25:4c:36:d6:71:82:97:64:d9:fb:
5c:8d:d6:f4:f5:33:d8:bd:0d:a4:61:21:12:74:1f:3f:8b:b4:
ee:4d:60:1d:29:dd:59:07:36:2d:7c:f2:58:04:dd:0b:10:c1:
31:8c:8e:1e:59:32:5f:e4:e2:99:46:12:ed:8d:94:ae:9d:ab:
84:6d:5e:88:63:aa:44:0a:5c:7b:4c:7d:7d:39:d6:6c:40:57:
b6:09:d8:4f:50:fd:b0:a2:aa:56:62:20:89:0d:af:2e:44:97:
29:b4:e8:26:c9:3d:b1:eb:03:36:ab:32:80:d8:0f:8d:c7:ef:
51:7c:3c:5e:6d:41:7f:bb:66:4c:7d:a4:c5:db:d6:2c:fd:95:
6f:1a:5f:21:9d:6e:d6:ba:9b:7f:bc:3e:69:e2:5e:3e:56:68:
19:9a:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:45 2026 by rpki-client