Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: d3LsXn/356eGH7/qg4k6ly2E3Cr+87ny0/wAlmcTjaY=
Subject key identifier: 5A:B3:AD:CE:CB:5C:45:90:C7:E7:EC:C4:9A:24:17:F5:11:D7:70:D9
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 019D3940FC2A25B838A96D90209E8CA6730F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: x1E6DqnD6ZlnzSy+3hfMkL/WvRtM5F45NQKvtF6hlMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fc:2a:25:b8:38:a9:6d:90:20:9e:8c:a6:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=5ab3adcecb5c4590c7e7ecc49a2417f511d770d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:81:ed:8d:3b:7f:73:a2:e5:eb:2b:33:15:
8a:eb:7d:e7:19:2b:88:26:72:f2:d5:7d:2a:e9:c1:
12:78:e2:32:66:6c:67:46:24:12:4e:55:fd:e3:c7:
42:de:61:79:1a:82:ce:eb:b6:62:b8:87:75:50:af:
0c:67:3d:d3:cc:bc:63:85:94:5c:50:c5:53:32:94:
18:9c:99:24:ee:2d:46:78:03:a1:3b:26:79:13:4d:
2b:d0:47:85:a0:3f:42:51:7c:d8:35:d7:f9:c4:b1:
b5:9d:31:16:25:dc:18:51:aa:43:5b:97:9c:1f:8c:
b5:d0:b3:43:5d:e3:ec:0e:d4:bf:a4:39:61:94:6c:
22:8c:f9:3b:b9:c6:13:79:4c:d8:92:fc:bc:77:6e:
1d:c8:86:42:40:46:00:97:fc:5c:5b:2b:b9:e6:77:
d0:fa:f4:5e:99:ca:26:99:78:2c:35:ff:5a:f4:b7:
9f:00:73:0d:87:7a:c7:35:80:42:1b:aa:20:bd:f9:
b1:f7:6d:6a:1a:da:2e:52:06:9f:21:d6:f1:40:1f:
af:5e:81:5c:58:e9:44:61:b3:2d:31:03:d2:5c:d1:
0d:64:cb:96:9a:f5:7a:fc:90:ec:f4:af:4a:b0:14:
d8:8f:2f:97:2e:51:38:d7:e9:37:28:05:f9:0e:30:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:AD:CE:CB:5C:45:90:C7:E7:EC:C4:9A:24:17:F5:11:D7:70:D9
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:04:52:07:03:47:3d:53:47:67:6a:94:43:3f:45:9a:76:
17:ef:a5:b5:7e:b1:8b:b5:24:2f:46:e6:fa:cf:a2:3c:32:76:
df:5f:d8:e9:8f:a6:0b:e1:85:1d:36:e0:52:26:50:6f:f2:74:
73:f5:3e:63:e7:9b:97:62:5a:d6:ac:6a:24:1a:8a:a5:9b:a0:
e0:52:86:83:1b:48:f7:77:30:e5:b7:02:02:ef:3e:ec:4d:59:
e8:7c:31:d8:57:5c:d1:eb:1f:25:05:64:37:f5:25:f7:29:8c:
47:0d:5b:6a:9c:33:d7:68:e1:24:1c:14:fe:08:01:e7:28:74:
4f:83:55:cb:ff:e9:57:5c:6a:60:a5:fe:ae:ca:e5:7b:2c:f1:
fb:40:a8:b4:ff:93:55:76:c2:30:f6:ea:36:b5:b4:49:96:6a:
d0:db:86:69:03:c7:9a:c7:0d:6b:18:8e:05:88:28:1e:48:49:
37:0f:77:3c:94:6f:c8:cd:bf:0e:d4:a4:6f:93:56:ea:ed:66:
f2:a7:00:42:34:66:5c:09:de:9d:ef:76:89:62:5a:df:dd:e2:
5b:db:32:b0:46:17:7b:67:de:c9:16:68:4a:87:69:a5:a5:ae:
9b:e0:cd:25:71:ac:24:ad:ac:fa:79:12:93:cf:a8:f1:a1:7e:
5d:cd:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:04 2026 by rpki-client