Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: jf6zOP9QrfL9iItHK0INHCboIWRvZseCTsqegPE43Zg=
Subject key identifier: A2:25:2C:32:45:0B:BD:4F:F2:B4:AD:67:03:4E:A8:E3:10:1B:40:31
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 019D371BF33C8AC3FF581114CA1EE53F2C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0F65
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: ttiyaKyKP4HxDn26JOawj7Uha5KcYpFXw59YmNGXxWk=)
2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f3:3c:8a:c3:ff:58:11:14:ca:1e:e5:3f:2c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=a2252c32450bbd4ff2b4ad67034ea8e3101b4031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:5c:14:6b:45:99:dc:5d:c2:85:d5:63:16:
cc:25:8b:82:a3:9f:1f:a6:f2:9f:a5:aa:61:55:a4:
bf:42:03:cb:99:51:66:51:13:20:3d:e8:73:a2:bb:
0e:a1:f1:d8:8a:72:ef:29:50:a7:bd:ed:2c:6e:fa:
30:c9:56:43:c9:a3:cb:e6:44:5a:62:b1:ce:7f:45:
e7:3a:a1:85:f7:10:85:b3:50:96:02:34:9c:6e:65:
b8:f8:1c:39:54:8e:38:e0:9c:0b:65:00:d3:7d:af:
31:09:70:06:33:60:b5:c9:28:df:ad:cd:e7:0f:09:
3e:cf:dd:9d:b8:05:4b:a1:4e:33:14:3f:d4:d9:f7:
2f:d2:60:23:68:d7:75:7c:2b:69:b7:21:3c:f1:9f:
1b:ab:1e:c0:0f:51:06:9d:9c:fe:af:91:c9:33:53:
e8:6b:7a:ec:8f:df:fe:9d:1f:64:23:4b:1b:cc:95:
d9:4d:e4:e6:51:85:5d:f4:cf:e2:a7:ca:d3:e0:03:
a8:64:7a:cd:78:fc:9d:8e:d3:e0:80:af:e2:0a:67:
b6:9d:2c:d6:d6:b9:42:a3:48:9e:91:83:51:8c:92:
73:07:5e:80:be:02:97:cb:a0:44:70:7a:4d:01:bc:
ad:c9:0c:39:6f:c9:e2:49:fa:4e:8b:fa:76:56:a4:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:2C:32:45:0B:BD:4F:F2:B4:AD:67:03:4E:A8:E3:10:1B:40:31
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:8f:ae:21:41:02:74:c1:0b:ff:5c:2b:d1:c4:8f:9d:a3:
ef:09:49:f2:04:74:ae:7e:fb:f4:3d:55:1f:17:f9:e3:31:95:
c0:ad:b6:0a:ed:de:d7:92:51:63:29:48:78:ec:bd:78:a5:59:
75:58:1f:2e:85:e8:ff:f7:a9:1b:f9:54:ff:c7:a3:f1:08:f0:
10:c9:eb:51:a0:ab:02:53:2c:2f:01:84:87:9d:e1:d3:13:ab:
e5:82:9f:6f:22:88:d8:33:ab:16:b4:27:ff:45:28:74:5d:7b:
a0:29:9d:72:dd:2f:93:0f:5e:7a:c5:72:13:6c:94:76:9f:c7:
62:00:c5:bb:c3:ce:92:01:6f:95:78:78:81:d9:ea:a9:0a:eb:
31:7f:1e:b1:57:e5:84:6b:a6:5b:88:14:99:be:3b:55:c2:32:
68:24:08:38:00:cd:66:89:fd:10:38:ec:c4:17:64:50:92:d6:
df:a6:fa:83:c4:81:1b:dd:d3:5d:8d:db:70:58:a1:76:53:01:
4f:d8:1b:88:0a:3e:6a:2b:c6:0b:64:ff:9d:f8:c5:2a:e6:10:
c5:68:d1:4a:3b:c3:86:df:f5:5a:58:c0:ab:28:d3:fd:76:78:
86:ff:46:3b:50:0e:f2:d8:e1:04:c4:9c:57:43:1d:f1:38:e8:
21:d4:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:45 2026 by rpki-client