Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: V87wbtne0FCYuIqTM4kxpg7jWn2zRb9JCXaz5ALSbAg=
Subject key identifier: 4B:F4:FE:CE:60:57:09:D2:BB:24:88:1C:53:43:C5:6A:F7:E0:C1:4E
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019D39AEA97583DA80CE14BA213AFA986B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 1156
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: HrkfxoWfmBITq/Ihavqx4aXwFaWCrmQtoWkP8DomIeI=)
2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a9:75:83:da:80:ce:14:ba:21:3a:fa:98:6b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=4bf4fece605709d2bb24881c5343c56af7e0c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:0b:9c:67:a0:14:f3:64:57:c2:9b:fe:99:
df:8d:c7:68:cc:c7:4d:39:fb:b7:00:92:1b:1c:a3:
8f:ee:c8:43:40:de:9f:b6:06:88:20:cb:20:bb:4c:
09:5d:b8:92:5a:ac:0c:36:7b:e2:61:57:4d:44:a5:
d7:9b:0b:1f:fc:30:98:14:ff:df:36:a4:fc:ae:03:
1c:98:5c:f0:63:04:7c:c3:71:b8:ec:36:89:90:3e:
95:d2:d6:74:e2:01:6e:e4:ed:8a:a1:a8:f0:9d:00:
82:0c:9a:a2:01:96:f0:98:1f:42:e3:78:fe:ba:cc:
ac:a1:b0:ee:2f:9a:87:4c:b9:89:a3:a2:e8:b5:0e:
f0:3f:e3:5d:4a:c5:9e:b6:64:5b:f4:84:3c:8f:09:
04:49:a6:7f:56:ab:b8:4d:47:65:63:72:4d:d1:be:
10:ea:7a:b4:fe:4d:aa:d6:96:24:8c:7d:54:2c:64:
62:ab:3a:9c:15:5f:7e:65:3e:02:4a:b4:26:21:cf:
b7:1f:0e:79:68:40:7e:6f:19:33:d2:1b:7c:39:08:
f8:b4:74:24:45:1d:85:3c:60:2d:44:1e:8d:66:14:
61:47:e6:f1:f2:cd:86:76:85:49:11:83:8d:66:f6:
1f:51:b6:62:73:5b:35:72:e8:17:68:dd:fd:cc:6b:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:FE:CE:60:57:09:D2:BB:24:88:1C:53:43:C5:6A:F7:E0:C1:4E
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:e3:29:31:d2:72:53:9b:2e:82:e5:b0:5f:e5:52:a8:b1:
e4:e5:c9:7b:db:a5:32:37:4d:2d:ac:41:8c:5b:db:d3:42:a6:
21:2d:29:d5:34:33:1c:b6:3f:1c:94:ad:3d:09:c5:10:c1:56:
8e:7d:bf:d3:ee:99:3e:26:eb:22:cf:87:57:4f:c6:41:60:b3:
00:b3:16:fb:36:0b:f3:5c:be:42:7e:48:54:ed:c1:71:e1:58:
da:18:a4:8a:e5:0a:32:c5:f1:89:a0:b3:29:51:4d:b2:4e:5d:
c8:10:f6:32:a4:5d:70:74:85:b8:11:2c:ed:56:11:e4:a9:fe:
7b:bb:4b:f6:42:8b:43:58:16:7b:95:a8:d0:8d:93:78:c5:2f:
c9:c6:24:f9:34:f8:44:9b:46:ac:b7:82:d6:a8:e8:d4:4b:10:
aa:7f:33:71:2b:09:06:79:1b:71:72:68:4f:6f:a7:34:8c:45:
06:cd:a7:a6:8a:96:32:e5:1b:13:5e:e4:d3:37:56:1f:68:0c:
25:21:b1:a2:78:f4:27:78:cf:16:49:14:c9:8a:c7:ba:c4:d5:
11:20:99:5b:b7:fc:1e:e3:8b:a2:c2:ed:ca:8e:a1:ad:ec:1b:
12:da:43:25:1f:f6:f2:97:ee:06:35:cb:30:c9:c7:34:83:0b:
c1:6f:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:40 2026 by rpki-client