
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: Iwk/XA2XDZzFHJwyxYjIRBsKrLYrMlxsa7DXg7gEvfE=
Subject key identifier: 91:2F:53:03:F5:1E:E2:26:DA:CC:06:E9:6D:F0:0C:04:F3:C2:59:5B
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019E303B719AA43DCC229A0C270416590722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0971
Signing time: Sat 16 May 2026 10:01:02 +0000
Manifest this update: Sat 16 May 2026 10:01:02 +0000
Manifest next update: Sun 17 May 2026 10:01:02 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: SSUp2hQAEP8rzZFbZJRVsmLIhk4OyRLZXuKEkf5QEX4=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:71:9a:a4:3d:cc:22:9a:0c:27:04:16:59:07:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: May 16 10:01:02 2026 GMT
Not After : May 17 10:01:02 2026 GMT
Subject: CN=912f5303f51ee226dacc06e96df00c04f3c2595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:61:99:45:ed:ab:61:9e:12:be:c2:9a:84:
e9:45:02:20:6c:5e:eb:2e:2e:f9:a7:7b:92:42:3b:
9d:5c:7d:65:c1:2f:7a:96:94:39:70:6b:65:11:71:
f7:30:65:9d:dc:2d:ff:6f:58:7e:6d:3c:2f:cf:ce:
ec:1b:c1:4f:85:55:a3:d8:23:7e:df:2b:f1:dd:59:
12:ec:47:cb:ea:9f:0f:74:f6:41:b6:50:8f:5f:98:
52:55:05:85:3d:06:ba:fa:50:3d:4f:ea:1d:10:97:
44:d5:92:0e:20:40:a9:ef:a2:44:24:8d:31:9c:4c:
22:52:f3:79:52:f6:d0:5d:55:4f:51:1d:37:53:47:
d9:82:6e:10:4b:a8:c4:9b:e2:0d:0e:84:ec:47:c1:
49:da:90:bf:b9:45:0b:84:80:d2:b2:e6:98:90:f9:
c5:01:70:b7:c7:f1:9e:d1:ad:52:6c:45:e4:20:01:
f1:d1:eb:76:5d:dc:ac:be:49:54:84:ac:ee:92:70:
79:00:85:f2:75:7a:41:d6:cd:da:fb:17:2b:34:b6:
05:ed:7a:ef:4c:94:cb:85:c3:79:c3:20:08:83:df:
19:81:e9:31:4f:34:80:7e:4b:13:27:a2:a7:54:0b:
71:fa:54:18:8b:2f:e4:df:5b:f7:f2:29:6d:d8:0a:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:53:03:F5:1E:E2:26:DA:CC:06:E9:6D:F0:0C:04:F3:C2:59:5B
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:d2:0f:cb:e0:2b:b1:16:54:df:3f:cf:fb:a3:f3:c4:27:
5f:1c:48:60:00:4d:46:c1:6f:f3:4c:22:ce:d7:fb:e6:30:64:
67:59:62:31:61:37:e5:fd:22:97:f3:81:69:b1:c2:35:91:d8:
f3:e6:b9:d2:76:fb:e5:77:cb:54:0f:e5:fd:cd:3f:3f:55:81:
6e:00:3b:e0:8b:f1:ff:32:d5:55:e8:8a:e3:d4:6e:f3:75:0d:
a4:bf:02:f4:90:44:e9:be:51:8b:f1:dd:b4:9b:3f:58:f8:0e:
4b:45:33:d3:51:46:78:51:85:23:16:d4:3e:38:77:3e:c8:ea:
51:7d:27:68:97:5e:d0:91:ad:a6:74:b3:ea:af:0e:8f:68:05:
75:13:d5:d2:8e:a4:60:8a:84:3c:bf:f4:3f:65:3a:eb:ce:6e:
43:d9:61:65:68:42:48:53:cc:ad:8b:09:1e:61:3f:ad:3f:9d:
29:91:49:cf:56:1e:01:26:60:d0:90:50:dc:85:df:0e:1d:73:
6a:e6:50:5e:21:cf:ed:30:0b:b0:33:c0:e1:50:af:65:af:b3:
b1:cd:da:81:fe:94:a9:e2:6c:30:ff:de:74:06:4f:67:e1:e8:
01:7f:43:a5:94:6d:7c:2e:09:93:47:8a:be:c8:ad:26:bb:49:
ee:c6:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:41 2026 by rpki-client