Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: q85WQdyspdF00AqIWHvbfRdfDRUeizvUgCxlcckShD8=
Subject key identifier: E5:4C:DD:65:3F:AD:87:F3:03:1F:A7:A9:1F:4D:EE:B0:66:5D:87:FB
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 019D3909F9E096F52A092E026A43A5FDA187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: tw3MOeFDlqKhCib8okiZXyDnaq6lj/xcodTeGtFl8hU=)
2: 3OShaLp1tgG0w6F8SnVFUGGGJJU.roa (hash: 6F9cP81CAB2z6kxGDavpoTqFUUII+JeGSAu6vLBGSQA=)
3: aSq4kwpisiyPqp-dHXzcfCq_VbE.roa (hash: W/mYGGv/Jtea8oXyonioU+JGGz0ezZ8tWqj2IvUsfjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f9:e0:96:f5:2a:09:2e:02:6a:43:a5:fd:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=e54cdd653fad87f3031fa7a91f4deeb0665d87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:8e:9e:ca:15:aa:3f:64:b8:5e:3a:15:13:
77:74:45:e7:7b:79:81:66:c3:70:fa:08:e0:c6:b6:
58:80:96:9a:0e:62:76:7d:98:68:c9:4b:41:14:06:
8c:69:2e:38:0f:2c:87:53:28:d4:82:15:69:f3:51:
a0:d0:b9:73:3d:6e:b0:12:b4:e9:85:ab:e8:9b:59:
de:f2:b5:43:c1:3c:32:d8:73:80:c6:94:6a:7d:97:
9f:55:9f:f7:02:80:fa:6c:d8:d6:c7:d0:d6:b4:2c:
ae:b5:22:4f:b9:cb:90:58:df:b7:a4:da:b4:72:f4:
d5:ee:72:1a:8a:25:67:36:ed:f9:9e:ab:85:f4:0d:
a0:e6:bf:f5:01:2a:cd:b1:4e:44:5d:be:3b:7a:ea:
77:e0:7e:6f:51:6d:02:b3:4b:df:04:8e:0d:8b:f4:
59:ec:f0:71:3a:c3:35:b7:51:4a:99:82:0d:6f:b1:
00:1d:8f:db:36:ed:b4:2b:ff:d7:af:f1:c1:d4:06:
f4:a9:e7:66:02:03:89:b7:34:c1:c4:71:6c:f1:e7:
65:54:bc:5a:8c:3b:2c:5a:56:fc:5c:12:7f:da:c1:
84:fd:e5:17:e8:60:e9:df:36:2f:82:ae:a9:f9:cf:
a0:4d:14:56:72:3f:4e:23:03:64:a7:75:d3:b4:b9:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:DD:65:3F:AD:87:F3:03:1F:A7:A9:1F:4D:EE:B0:66:5D:87:FB
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:0d:23:bc:b0:3b:95:5d:04:5a:b9:5c:2a:d9:f0:95:eb:
9d:5f:df:5e:95:f3:d4:76:54:43:f7:e6:b4:04:f9:68:86:1b:
0d:61:8f:40:b5:6e:c1:9f:e4:69:99:ec:cf:21:71:50:3d:c7:
33:a6:11:38:5c:31:f3:e5:ab:e6:cd:19:07:2f:2b:ec:6e:70:
a0:1b:b6:1c:15:07:0c:dc:54:32:29:80:8c:e7:e7:4b:db:c7:
17:a1:85:61:66:73:88:de:44:fb:06:13:da:f8:5c:7e:60:86:
b6:08:9e:7a:b4:81:4b:d4:75:67:a2:eb:ed:64:53:9a:81:3f:
a3:cd:d9:f5:cd:69:c3:50:4b:8f:7b:92:f9:8b:4b:2b:61:3c:
f8:a0:6f:09:75:f7:09:b2:a3:8a:83:3d:50:41:43:6f:08:fc:
96:c8:34:75:f5:0e:13:12:d6:25:b9:4f:ba:c6:13:da:15:71:
7e:be:54:5a:69:f9:c9:27:bb:43:23:61:95:3e:d9:c2:1b:ce:
ae:2e:fd:79:77:52:23:85:68:93:08:7c:2c:ce:83:4d:0e:cf:
be:32:16:7e:6a:a0:27:83:a9:d4:11:05:39:d7:ea:cb:b1:5e:
1b:2f:cd:b4:7b:c8:d5:d9:9e:42:a3:b7:87:d9:a2:bf:2a:eb:
5a:ae:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:28 2026 by rpki-client