Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier: iXCzRlvCZAG3dk1MQbzHmUcrXU7/9+w5c8k9/KGx2b8=
Subject key identifier: 01:31:CE:34:3E:32:C5:31:64:D9:D6:72:ED:16:B5:11:8E:73:77:18
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial: 019D371B494413BBA102A9D4115359758FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number: 0AF4
Signing time: Sun 29 Mar 2026 01:00:28 +0000
Manifest this update: Sun 29 Mar 2026 01:00:28 +0000
Manifest next update: Mon 30 Mar 2026 01:00:28 +0000
Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: x4AMtABl2rhj7s23X97zWWYT+1w+y/AchBkshbfDlbI=)
2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:49:44:13:bb:a1:02:a9:d4:11:53:59:75:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Validity
Not Before: Mar 29 01:00:28 2026 GMT
Not After : Mar 30 01:00:28 2026 GMT
Subject: CN=0131ce343e32c53164d9d672ed16b5118e737718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:f0:21:f5:f2:cf:11:8f:57:c3:a7:23:56:
2a:98:00:5f:15:1d:ee:0c:76:29:94:2b:00:03:ed:
73:e0:c8:2e:25:4e:47:32:46:59:90:40:31:3d:8c:
bd:d0:de:60:2e:2f:41:6b:f6:3c:79:3e:3c:01:5e:
77:3b:a8:9d:f9:66:40:6b:e2:fb:33:61:27:7a:7e:
ae:53:b3:f9:e2:61:c9:d2:c0:c0:c2:da:54:24:1c:
28:2b:df:c2:bb:91:73:aa:79:68:ce:8b:2d:5d:4f:
34:a3:80:b4:b4:a2:a5:dc:27:99:55:f3:81:21:9d:
73:c7:0a:df:63:fb:76:5e:77:6c:5e:71:80:93:64:
59:bb:f5:43:fb:5a:89:a8:42:5d:41:86:c6:8f:cd:
84:cb:b2:f2:87:70:aa:dd:c4:95:2b:9a:8e:6b:1c:
4a:01:80:60:be:00:fd:34:96:c0:7c:c7:f2:b6:54:
e5:e6:39:d1:54:13:88:0e:10:88:8f:2a:52:33:20:
0d:bb:e0:22:eb:78:06:7a:64:dd:e6:07:38:6b:55:
91:3a:dc:ad:50:e7:3f:8c:c3:98:76:3a:8b:6c:c7:
04:e5:f9:06:c6:1e:3d:9f:55:80:03:0f:d4:ad:f0:
62:21:65:f2:c8:ef:86:2c:90:bc:84:18:ff:ab:65:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:CE:34:3E:32:C5:31:64:D9:D6:72:ED:16:B5:11:8E:73:77:18
X509v3 Authority Key Identifier:
keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d0:ef:1e:12:99:e0:05:08:cd:29:04:0e:2b:5c:e1:28:49:
ec:cb:02:ee:3e:4c:33:b7:b3:1c:1d:22:fd:5b:cd:db:7e:ec:
85:95:8b:f1:09:42:bf:ae:b3:97:47:fa:74:43:26:40:52:7c:
63:bf:d0:d8:11:5e:48:7f:5f:79:e9:92:61:0b:64:67:7a:90:
5d:68:d2:e5:f0:ef:a6:28:f2:f5:89:a2:87:bc:56:3f:6a:75:
89:b0:7f:52:7a:0b:02:10:67:79:45:bd:b4:93:6b:23:b2:6e:
a2:bf:f9:97:2d:2a:6d:ef:6a:82:c4:8b:7f:fb:5e:5a:f3:73:
a2:e7:b6:6c:2f:64:0a:9d:db:a5:3e:d2:80:d9:a0:26:68:1c:
6d:25:3c:be:c4:2a:ec:03:49:3c:d1:51:29:56:57:b6:3b:80:
91:d1:95:c8:31:3b:64:f4:d2:7e:9d:59:c2:cc:86:a9:75:b1:
f6:57:cd:2e:ad:63:e1:a0:71:3c:84:94:6b:a0:3b:fe:3c:5e:
10:06:cc:39:8d:89:78:cd:ae:84:7b:34:d5:14:ec:8d:ef:7c:
bd:ba:1a:5d:fd:5a:4e:5f:ec:72:db:c7:db:b3:ee:9a:a3:b4:
ab:7c:a0:cc:ed:a0:88:ce:33:4d:36:55:36:a0:b0:0d:eb:52:
88:3f:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client