Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: jMA8IAA4mddzxY/VDF4ssu1J/432L7LCztrdwxYoYls=
Subject key identifier: 29:56:CD:D8:FE:D4:E8:3B:FC:23:77:E6:A5:5B:8C:67:4C:D5:49:75
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 019E29277A6864674E96FCC8B41F891E0021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 190A
Signing time: Fri 15 May 2026 01:01:53 +0000
Manifest this update: Fri 15 May 2026 01:01:53 +0000
Manifest next update: Sat 16 May 2026 01:01:53 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: XncMVejOo8mjuG62JHpblCKPfsNIZ714gT1c+U2QoJg=)
2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=)
3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=)
4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:7a:68:64:67:4e:96:fc:c8:b4:1f:89:1e:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: May 15 01:01:53 2026 GMT
Not After : May 16 01:01:53 2026 GMT
Subject: CN=2956cdd8fed4e83bfc2377e6a55b8c674cd54975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:80:c5:25:b6:ef:69:f1:f3:75:9c:92:ca:
44:22:88:63:67:f2:89:63:93:c3:2d:07:25:9e:18:
52:35:cc:f1:db:76:aa:81:43:1a:25:3b:fb:28:2a:
56:54:1e:7a:69:e3:a5:f0:34:30:d3:e9:12:19:c1:
d3:72:72:99:67:ba:ed:cd:ab:30:ac:8f:5a:76:9e:
23:97:f5:28:4c:34:c0:0b:1d:a7:55:f3:9c:96:28:
fb:39:0d:b8:12:51:3b:fd:a6:b8:35:89:b0:9f:7d:
de:69:cc:15:6a:fe:5a:74:af:8b:34:5b:ba:2e:d1:
d3:a6:bb:a7:21:7f:1b:fc:e3:3d:60:55:47:df:b9:
b9:22:91:f8:1d:6b:23:e7:40:c9:84:5c:b9:a5:32:
bb:5e:3d:ad:6c:79:ef:da:64:02:6e:64:55:a9:c8:
d3:30:e9:ff:c7:3a:2e:b0:0e:2a:85:e2:e0:ca:ed:
b0:21:42:71:dc:62:5d:ff:7f:e6:7e:04:b9:5e:03:
78:53:97:01:95:3e:f1:5a:17:29:6a:91:77:c9:b1:
03:e5:be:08:fa:bf:24:69:bb:4f:5e:41:d6:c7:a5:
8d:cb:a0:42:cb:fe:b4:87:21:d2:c8:24:c0:3b:b8:
17:9c:31:cb:4a:f0:42:b5:fa:d4:c6:b1:61:2d:e2:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:CD:D8:FE:D4:E8:3B:FC:23:77:E6:A5:5B:8C:67:4C:D5:49:75
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9a:82:e0:b3:d4:54:4b:9a:98:17:e6:9d:14:b5:f2:f5:0f:
1c:c0:2f:8c:35:85:18:9c:88:18:22:7e:a8:15:94:bf:b6:79:
ec:a6:13:4f:57:88:30:ef:e9:cc:6d:fd:f0:af:be:b0:48:b3:
04:13:bf:8b:8d:fb:29:11:7f:74:f0:57:73:57:a9:ca:fe:e5:
b7:df:53:93:eb:a7:b2:ac:6d:e7:61:36:15:db:a8:6c:be:b9:
06:9e:72:1c:6a:a6:a6:cd:b2:a3:2c:d1:01:41:24:94:4f:cc:
4f:90:2a:a3:27:11:f1:96:1e:61:84:b1:c4:dd:61:67:78:93:
27:a1:0e:14:33:77:be:5f:24:0a:e3:cc:82:b4:11:3c:09:b0:
2b:fe:ad:98:7e:a2:fe:06:56:1a:6d:40:d9:12:53:53:ad:80:
20:0a:31:0c:f8:d5:7b:d8:c5:b6:3b:2a:a0:cb:9e:dc:65:71:
a6:31:83:f6:f7:40:4f:3c:13:c9:c3:98:6d:5a:e1:f0:d6:ee:
62:72:0b:87:9d:75:c9:74:fc:a1:5e:d5:73:72:d2:59:43:aa:
bc:8c:be:5f:1f:12:95:69:6a:36:0c:f0:27:7f:00:09:ce:51:
45:8b:97:64:30:ac:d4:6c:f0:54:b8:e1:e7:0f:71:f1:1e:b2:
28:47:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:42:53 2026 by rpki-client