Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier: +j+ftGYxcYnygbFMvO0nNUFgTcDZ+jI7wdjlkwAEj50=
Subject key identifier: 16:A8:9A:BF:60:B8:E4:C9:A2:8A:A5:67:FC:34:E1:AA:AF:74:10:32
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 019D3752E9CDBFB4312F6CBD3CFE702FC864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number: 0FAB
Signing time: Sun 29 Mar 2026 02:01:13 +0000
Manifest this update: Sun 29 Mar 2026 02:01:13 +0000
Manifest next update: Mon 30 Mar 2026 02:01:13 +0000
Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: Kn3WdtvKfIRnUv36K+DpY/tTTbFt7OCug1Y1A4FIPmk=)
2: CdSvxh-qsouaR9D0nMWLFmlP_7c.roa (hash: w2S9yeJgNzOTOHLkky2uOaSMYllBxEErLoohZYBuiDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e9:cd:bf:b4:31:2f:6c:bd:3c:fe:70:2f:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Mar 29 02:01:13 2026 GMT
Not After : Mar 30 02:01:13 2026 GMT
Subject: CN=16a89abf60b8e4c9a28aa567fc34e1aaaf741032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:33:68:2a:b6:44:47:c4:16:4e:00:d2:72:
5a:61:f4:ef:fe:ae:18:81:ad:44:cf:2d:de:d1:0d:
38:32:15:d4:e1:67:76:24:44:50:f9:d7:ea:ce:39:
3a:d8:b2:23:31:13:8a:ac:d7:08:59:11:1c:a1:39:
0a:50:29:5e:7b:ab:12:87:8d:a9:7d:ee:53:c4:18:
d1:49:4a:b4:54:07:14:1a:08:61:48:a8:ba:7a:fe:
57:6a:4a:be:14:ce:d0:2c:1d:66:91:37:62:21:74:
f3:2a:d4:bf:61:32:b5:38:58:fd:27:aa:76:0c:7c:
a4:98:c1:cc:4c:14:bf:38:5a:b1:5f:b6:6c:18:06:
a4:e4:5d:a9:42:b2:54:9b:75:53:84:b7:ff:b1:c0:
46:c1:49:10:e7:b9:0d:29:99:0c:c5:17:c7:54:cb:
b9:fe:cd:5f:56:f0:73:f6:fd:d1:02:16:33:e9:ea:
bc:a2:0d:65:e7:6a:72:d8:0a:4e:ad:3d:c9:b6:2c:
3a:0d:79:44:cc:0c:b3:b6:64:46:05:50:97:5c:48:
e9:71:12:2d:29:17:71:85:d4:99:8d:d3:f4:8b:ea:
d1:fa:b5:09:ea:6f:b1:5d:dd:13:f0:91:50:52:ff:
df:de:80:80:7e:c3:2f:46:5b:7a:f2:73:89:ca:80:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:9A:BF:60:B8:E4:C9:A2:8A:A5:67:FC:34:E1:AA:AF:74:10:32
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:77:d6:10:10:1e:38:d4:32:f8:fb:7c:f2:b5:40:b4:d6:dc:
bd:1b:60:46:a3:4c:c7:77:63:a6:89:ff:15:de:be:4f:c5:bd:
45:4d:90:b8:fb:5a:2b:b8:9f:f7:43:bf:a5:f3:8b:9a:9d:b4:
74:91:45:de:66:03:c0:c7:b3:b6:f2:a2:00:c0:a5:76:5b:fc:
f3:3b:37:23:f0:61:f9:4c:50:0d:33:bc:bb:73:18:f1:9e:d1:
1c:71:00:4d:8f:f3:d4:06:e9:b9:c3:17:af:20:5d:7f:df:50:
e5:6f:6f:d4:f5:8e:37:64:c7:48:ad:1a:1d:e1:14:31:66:1e:
c1:f7:b3:ca:13:89:7c:5e:45:83:fa:b5:92:e3:53:f2:bd:82:
54:3b:e5:4e:ca:ef:6f:79:f1:a8:26:7e:47:20:ac:1e:2a:37:
84:f4:80:00:26:9e:a2:ba:54:66:a7:45:aa:be:9a:7f:5c:7a:
74:62:da:11:97:91:64:ee:5e:c7:dc:d5:22:79:99:a5:af:43:
62:06:87:b6:55:33:15:c7:de:5f:97:34:d3:5a:06:e0:1b:0c:
15:d3:31:33:8c:58:f1:cf:22:27:52:fa:74:34:7e:bb:35:c9:
fc:51:da:4c:09:db:f1:bd:ca:a2:62:75:8e:2a:31:29:80:39:
5f:97:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client