Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: I2NIk2ptezhwjF1gQG1NzvpHs2S4AE/eALiLnVgi2FI=
Subject key identifier: C5:31:2B:B9:B2:63:41:DD:42:D5:7B:E9:8B:98:DE:E3:7B:5F:78:F3
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019D3977D4AAD16BAB1ED393EED5B708AA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 1825
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: c7A6gU022MSLNSRYSCDaYheMb2v0m3qVpaTJhybdD8M=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d4:aa:d1:6b:ab:1e:d3:93:ee:d5:b7:08:aa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=c5312bb9b26341dd42d57be98b98dee37b5f78f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:30:b4:02:28:64:48:24:28:5e:37:e1:66:
e2:43:8b:30:ad:85:29:e9:f5:1b:de:07:a7:b5:6b:
8e:6e:dd:69:82:1c:4f:23:66:05:43:07:f7:fe:d2:
28:8e:1a:3c:49:f2:e7:94:0d:3f:18:47:a6:49:4d:
cb:f7:e2:19:a8:26:26:2a:94:62:02:57:5f:37:9a:
3a:34:2c:01:ec:95:92:d2:3d:a3:c7:02:a7:38:c5:
2b:62:dd:0d:d6:51:b9:91:9a:76:e2:60:67:3f:86:
df:5d:90:5f:e4:19:b3:33:44:9b:2b:8c:4d:80:22:
5e:d5:3a:91:82:57:4d:47:b4:88:d1:4e:62:1a:0b:
2d:8d:22:62:05:f3:a6:ad:fc:17:8b:ab:ef:57:c6:
8b:ab:70:2a:db:08:bf:f0:0e:a5:3a:60:b1:a0:6e:
77:25:7b:5b:15:00:9e:39:04:4d:c9:8a:00:9b:d7:
a4:ee:01:8f:b0:63:aa:3a:a7:5d:7a:39:3b:17:74:
60:2a:b9:32:d9:ac:de:ed:63:13:3c:84:fa:1c:e6:
75:07:87:0f:9d:9a:37:9a:14:50:25:78:43:eb:18:
8f:35:9e:68:74:a9:64:7f:d5:a5:8d:3a:a4:41:84:
2b:40:42:48:45:c1:92:dd:1a:93:2b:83:c4:ca:32:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:31:2B:B9:B2:63:41:DD:42:D5:7B:E9:8B:98:DE:E3:7B:5F:78:F3
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:94:93:97:09:d3:17:d0:bd:f3:b0:d4:d3:4e:ab:82:7d:
6f:55:f8:e8:b7:ec:c5:72:5e:33:cc:6c:66:6c:3c:21:0b:13:
25:41:ae:8e:44:a4:7d:61:71:2c:db:87:98:ca:25:3b:6b:18:
d4:14:82:3a:29:f5:bf:0a:af:33:ed:df:f6:18:e1:67:04:08:
89:21:1a:50:1c:a8:76:be:68:2b:e3:e7:fa:46:3a:5c:70:b5:
5d:ad:7c:3c:be:51:eb:15:43:cf:00:ae:9e:9f:ce:fd:d6:1b:
63:46:f0:54:e6:d8:7d:48:0e:d1:b0:09:66:02:00:77:aa:cb:
7e:8f:13:a7:32:f7:b9:93:63:78:9b:24:d9:49:c6:e9:ca:ae:
7c:b8:74:15:98:53:55:44:10:83:78:02:df:99:c3:5c:49:a8:
08:3c:f6:43:3e:8b:51:a6:29:7a:62:a1:b7:e6:23:4b:d5:49:
0c:e0:91:19:4f:ac:fd:0a:1c:ab:64:5a:5d:f9:81:04:49:4c:
1a:61:98:17:18:af:ba:9e:63:4a:52:fd:6b:aa:c8:d2:3d:60:
4c:3a:69:fb:b6:de:70:a7:01:36:d8:26:ee:22:af:4c:53:91:
94:24:87:0e:16:d8:91:6a:2b:2b:9b:51:d5:87:6f:05:c4:84:
cb:50:dd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:27 2026 by rpki-client