Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: V8lKor23hbbScX/sEE0GmVcDKC2ao6xvIC0YLHIFVQs=
Subject key identifier: 5B:38:B4:B6:50:A0:33:A6:12:2C:AC:2B:FE:0E:B1:C5:82:A5:DC:AD
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019D37C060666E5C53626BF4B656F00D1505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: 3idXga90rC3vQXW1IYbw4tfXX0176RalN5V0HsGs0K0=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:60:66:6e:5c:53:62:6b:f4:b6:56:f0:0d:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=5b38b4b650a033a6122cac2bfe0eb1c582a5dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:f8:35:d5:69:56:10:2b:76:51:0e:67:62:
ad:ec:75:5c:7d:63:f6:47:ea:a4:df:11:11:db:a8:
e3:cd:e9:31:5d:06:ae:a3:3b:c5:b0:17:15:df:2f:
71:73:8e:26:31:96:06:9b:e5:24:0b:67:42:07:e5:
a2:e4:0e:c9:83:0b:ba:35:79:3f:b8:67:1c:e9:fc:
ff:b4:af:83:ff:19:be:70:62:b1:cc:cc:a0:18:bf:
42:2a:80:26:2b:0b:34:2f:67:6e:0c:21:c1:3f:1a:
9a:18:a1:6d:d4:59:3c:c7:1d:65:74:2d:fc:09:e4:
d8:f5:ef:f5:47:29:77:a0:99:44:8d:39:11:fb:05:
cf:b6:d5:e8:cd:ef:3a:a0:ee:4a:ec:38:13:08:5e:
8c:81:91:bb:2b:ae:2e:39:ec:5e:f9:2f:1f:d1:61:
3e:a6:0b:f2:09:80:c1:87:7d:dc:47:41:c4:46:a9:
b4:bd:11:1b:21:17:3f:c9:fd:01:9d:6e:3f:97:7a:
9c:d7:bb:77:7e:18:cd:b7:99:05:73:1f:6a:fa:bb:
05:43:3f:d4:b0:52:be:59:08:b1:7c:97:d4:57:ad:
c9:37:39:57:4c:b4:1f:00:06:b4:ca:d7:fa:90:d1:
4a:0d:fa:49:cc:a8:04:18:ef:94:53:f3:40:94:93:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:B4:B6:50:A0:33:A6:12:2C:AC:2B:FE:0E:B1:C5:82:A5:DC:AD
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:cb:70:ea:ec:77:3f:94:e5:0d:9b:32:43:60:bf:13:7f:
d9:c0:9d:02:57:57:e5:64:03:a9:f1:11:77:e7:94:05:75:ff:
df:81:be:1b:b1:73:03:f7:ac:17:ee:fe:eb:e8:3a:b4:4f:2b:
bf:6e:1b:fc:15:c5:67:72:66:21:8b:26:e4:9f:27:8a:ef:51:
8a:57:4f:ec:b0:55:ca:53:f6:52:88:01:90:fb:e3:05:b9:85:
fa:46:30:1c:fd:1a:fe:cf:c8:e7:9e:0d:66:69:b5:a6:bc:41:
d3:bc:36:be:d8:e3:6e:49:ab:53:96:ae:2f:e3:48:7e:ff:04:
3f:b8:31:39:0e:3a:c8:87:3f:e7:03:e6:72:0d:34:0c:11:c8:
14:c3:db:6e:e9:b1:a1:a8:76:29:e3:d4:52:37:84:44:d1:68:
53:8f:e3:60:20:34:7e:2b:3b:b6:a9:2c:38:4f:6c:1e:c8:51:
38:f7:45:3e:12:56:9e:3c:0e:7e:b9:7d:e4:12:69:6f:c9:7c:
58:e1:cd:7b:44:fa:44:00:9e:47:85:a1:54:88:d6:c4:4a:c7:
e9:6d:0b:c8:f0:b3:b4:73:08:4e:fc:63:43:d7:47:7a:9a:dc:
3b:c0:8f:fb:5a:5f:49:2a:ba:43:28:35:ca:eb:bc:f6:50:d2:
32:72:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:39 2026 by rpki-client