Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: lMa2tCv3vWJUQTL5YKVkpMimvszcBBh/vU32P8x95xg=
Subject key identifier: 85:8D:B3:11:AF:5A:33:4E:EA:AA:F7:47:6B:67:E1:84:F9:8C:C9:05
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 019D371BB839DEA6236C91D6B29F53E0E328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: LmoHOmoFkiu7MBS9Z6xU46xmlwprOJTinr3uhlQgtVY=)
2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b8:39:de:a6:23:6c:91:d6:b2:9f:53:e0:e3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=858db311af5a334eeaaaf7476b67e184f98cc905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:e2:66:b0:e8:32:9b:b8:8f:56:2e:fd:a5:
f9:ce:02:af:3a:41:55:75:d7:9e:8f:27:55:f7:7e:
01:a9:6b:b6:2d:85:97:c8:ef:57:5f:eb:0d:51:33:
96:63:67:b0:ea:92:33:78:eb:6d:d7:fc:c9:d9:03:
fd:6c:6a:8d:e5:c7:40:0d:d1:a0:e1:37:25:c3:e5:
b0:13:41:6a:ef:37:02:82:ea:ef:79:ac:59:45:17:
c0:46:f7:c3:26:fa:9e:34:c3:ce:fd:85:a3:ab:a4:
e5:34:19:f5:f6:14:c5:46:58:fd:89:c7:06:cb:0a:
08:f6:44:cf:66:cd:5f:ca:eb:68:b9:b6:b1:d1:9c:
04:38:2f:aa:c4:7d:14:dd:d5:75:d3:6a:08:61:e8:
ff:84:cf:6d:e8:9d:c9:2b:f5:98:59:ec:9c:50:fb:
b5:29:42:10:2c:d8:c1:9b:69:82:47:3d:68:12:e1:
28:64:f2:b9:9e:ba:de:6e:0c:28:7e:29:d8:96:a0:
0a:49:f2:bc:4e:2f:37:ae:9d:70:c2:b4:0f:8e:83:
7d:04:76:66:6b:2c:5c:16:fe:2e:e5:42:29:8d:48:
5c:0d:26:e6:6f:de:31:13:c9:45:5c:0b:9b:94:91:
21:11:c7:5d:bc:51:18:d4:e4:76:06:d5:10:fc:d9:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:B3:11:AF:5A:33:4E:EA:AA:F7:47:6B:67:E1:84:F9:8C:C9:05
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3f:ac:6b:50:90:fa:bb:47:ce:6a:78:7f:e1:74:11:6e:e3:
d9:f2:6f:87:a3:b5:b8:60:f4:b7:d2:cb:e2:b7:5f:55:68:19:
21:a0:9c:39:f2:fb:d9:47:3d:92:34:1e:9a:1d:26:0e:76:29:
94:57:d1:03:58:65:47:70:03:9e:52:16:7a:e6:a0:01:53:32:
70:4c:0f:7d:cd:13:37:4c:99:e0:25:5c:89:96:87:b3:d1:ba:
1b:fc:70:e7:05:81:36:de:22:b5:b6:05:37:ee:dd:88:e5:2c:
19:8c:52:24:cf:0b:86:45:59:40:4e:98:0e:2d:9c:0a:8c:e3:
14:b9:fc:99:75:9e:95:eb:d3:68:3c:bf:6c:fa:69:71:b8:c1:
80:b7:88:e2:7b:99:2a:04:a1:93:30:d5:0a:dd:b1:39:14:53:
4a:8b:92:8e:a9:22:33:bc:aa:6c:87:a8:78:0d:52:be:98:66:
48:32:3c:d6:6b:de:87:d4:bb:8d:b3:c1:64:00:aa:15:70:44:
b4:44:c2:d4:3a:08:08:8c:5e:00:89:54:ad:2c:c9:01:55:1c:
3a:ec:ea:0c:0e:26:9f:73:aa:3a:c9:e8:35:f8:4d:6e:7a:77:
30:1c:43:93:83:ab:64:de:6b:2b:bc:5c:44:1f:1f:4b:78:47:
0f:db:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:01 2026 by rpki-client