Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: gLgnmowiwGlLPHQ5GqVhq+Ha3lKg0wqImwpeeEXI/Pg=
Subject key identifier: 91:0E:4C:A5:1D:4D:C7:40:54:4C:60:D0:9D:89:1A:43:41:C9:0E:BF
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 019D39AE856F6986B3E49CB0098AC7B28694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 13:00:31 +0000
Manifest this update: Sun 29 Mar 2026 13:00:31 +0000
Manifest next update: Mon 30 Mar 2026 13:00:31 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: nj+gH/WKns1Gsnx2wlCdpX6LiWiWBiTxvkqjiq+RTYY=)
2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=)
3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=)
4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:85:6f:69:86:b3:e4:9c:b0:09:8a:c7:b2:86:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Mar 29 13:00:31 2026 GMT
Not After : Mar 30 13:00:31 2026 GMT
Subject: CN=910e4ca51d4dc740544c60d09d891a4341c90ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:4d:e8:47:46:14:54:56:4e:af:9c:33:04:
5b:8c:3d:04:1e:ae:30:23:bc:d8:88:a5:1c:08:d0:
e8:72:88:90:de:53:e3:02:a8:54:88:3c:2c:5f:6a:
c7:dc:ef:e1:ab:eb:d7:18:42:12:d1:f9:ae:98:fe:
85:28:80:2f:2d:01:4b:6c:60:39:46:8f:fb:1a:d8:
d4:db:74:3e:ee:56:6e:d6:65:d2:21:74:54:7c:36:
de:9c:4d:b1:8e:06:77:7a:98:ee:2d:ea:8e:83:1d:
30:c4:00:4e:d6:25:e2:8f:c0:ad:6c:d7:51:01:93:
63:ab:b6:3e:ae:3a:df:d1:14:01:cf:6c:c7:f2:38:
10:b0:b0:63:97:f1:89:3f:cb:0e:3e:72:82:34:38:
3e:5a:f7:d6:eb:b0:dc:7b:32:3f:d8:30:37:01:6d:
57:4e:a8:ce:65:93:20:91:8f:1a:11:c1:92:71:49:
90:14:7d:d3:f9:ad:16:93:df:95:2d:e1:92:27:f5:
53:26:7c:57:f6:df:e8:65:3f:d2:82:b0:27:db:98:
1a:6b:b9:4d:ef:a7:b3:7f:ca:da:be:15:18:67:76:
3a:47:49:d4:f5:84:0c:67:cf:d5:6a:c4:ea:e9:2e:
0c:c7:d0:ba:1b:cb:29:7f:da:d4:c2:6e:a3:85:cf:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:4C:A5:1D:4D:C7:40:54:4C:60:D0:9D:89:1A:43:41:C9:0E:BF
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:72:78:2b:23:ff:8d:be:38:c1:84:bc:65:cf:14:58:26:62:
64:5d:9a:6f:ab:55:76:8b:52:f9:f3:18:09:5e:49:fc:59:e3:
ff:3a:28:2b:b7:8c:98:53:4d:bd:45:0e:85:fb:1d:18:cd:46:
99:88:0a:7a:e5:b5:19:66:db:13:dc:8d:14:a1:3e:6a:82:d1:
44:4d:fc:a8:4d:4b:ef:7f:85:ff:b7:97:f6:20:07:9b:6c:2a:
75:5c:a9:77:be:92:52:a8:4c:e8:6d:aa:1e:47:55:14:db:b9:
2c:d1:ec:99:ca:c7:53:92:63:a5:0e:4f:81:92:39:02:04:1b:
1e:67:35:ca:9f:43:88:67:01:6f:82:9a:56:46:19:67:f4:15:
f6:9b:b9:dc:47:c0:a4:74:a7:7b:6b:87:87:99:01:c1:b9:63:
59:b6:e9:23:08:be:4e:1c:6d:7d:c0:31:df:71:d4:f2:f6:cc:
9e:96:bb:c7:03:bc:15:7a:02:63:ec:74:12:86:f0:df:5a:a6:
12:d4:f7:33:2f:db:8b:ea:f2:a3:be:92:48:c8:44:f1:d2:87:
32:a2:1a:95:04:05:af:ed:b9:85:10:26:d3:ad:94:c2:80:02:
9f:61:2b:4f:c1:f8:ab:02:63:ba:03:a3:47:bb:3d:bd:21:b4:
0c:fd:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:18 2026 by rpki-client