Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: /BUaOPetE5KD8yNii53HFWo4R5d+x5s6Ht5KeKm+Zdg=
Subject key identifier: F6:68:65:DF:3C:52:6A:59:12:83:30:E9:F9:99:A8:28:F2:FA:5F:01
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 019D37F703DD68219D4C72BA1B21DAF7FE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: zW3X4vz6rpkHHBbmLwdB3DNQX3WETOJS/qRq+vgRdD0=)
2: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (hash: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:03:dd:68:21:9d:4c:72:ba:1b:21:da:f7:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=f66865df3c526a59128330e9f999a828f2fa5f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:47:94:74:b5:b4:53:5e:d9:f2:3c:c8:a3:
1b:d4:a8:11:75:8b:7c:be:78:b7:e6:0f:ac:59:50:
94:66:8b:3b:c0:33:d4:8a:3a:22:80:68:c6:f9:40:
b4:b2:b4:58:6e:b3:59:53:f2:a7:fe:eb:93:fc:f2:
53:13:56:d4:94:2e:62:71:91:33:81:d0:32:88:53:
7d:63:4a:97:22:39:09:42:e9:c2:bf:2a:7f:44:2b:
ca:61:42:10:d9:95:45:12:1a:b3:a5:4c:fd:f8:c3:
66:26:97:8d:5b:d6:47:21:d8:0f:ca:e7:ee:fa:64:
20:5d:3c:4c:26:6d:3c:ef:32:be:b8:47:2d:40:8f:
3b:ec:b8:01:f6:53:8a:01:18:16:09:5a:a8:69:c0:
12:40:0b:bd:53:e1:55:70:eb:c6:4e:40:02:d6:3f:
89:82:ce:e7:c0:ed:8d:1f:b9:8f:70:61:1b:4b:22:
9c:2d:cd:c8:96:ac:d2:05:4b:c1:5c:dd:0a:84:fe:
d1:64:07:01:ba:c9:3d:6e:bf:e6:d9:dc:45:1c:f8:
34:a0:13:7e:ba:5e:18:5a:08:26:d9:cf:76:7e:c6:
45:a1:c1:20:a2:a4:f1:b4:74:4a:ac:0d:ce:26:6d:
4c:c8:b1:3b:4c:f3:56:80:12:a5:7e:86:0c:79:ef:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:65:DF:3C:52:6A:59:12:83:30:E9:F9:99:A8:28:F2:FA:5F:01
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:9a:51:b4:9a:ac:76:f0:a0:d7:42:92:0f:98:7b:a3:4e:62:
5d:11:a8:54:7d:54:28:37:1c:6d:9f:ae:cb:04:d9:06:74:24:
ed:b0:83:24:02:a9:24:ac:5b:3c:36:8d:c6:a4:24:a2:97:98:
30:a6:6c:80:7f:b2:99:f2:9c:dc:9b:9e:5b:5c:26:e8:a2:fc:
af:8c:53:f6:80:5e:47:80:4a:25:65:32:f4:d1:46:79:53:e9:
26:2d:76:bb:e5:b3:3e:c8:d2:28:1c:43:5d:95:0e:2a:99:0c:
c9:11:47:71:35:43:5d:5a:d4:aa:36:54:c7:99:75:c7:fe:a8:
aa:3d:4d:f9:37:10:3a:7a:aa:81:e4:17:92:a5:85:f9:f9:ab:
78:d3:be:09:ea:93:bb:89:8e:62:d9:fc:58:32:e8:ba:1b:41:
ad:38:3b:d2:09:e4:57:df:88:6b:d0:96:fd:22:1b:65:f3:08:
d8:f9:c0:84:8c:34:40:c1:ba:1e:fb:12:ac:ac:7f:3e:a1:26:
6d:fc:4f:97:03:ae:de:5c:89:c4:41:54:a5:2b:4d:52:e4:d5:
52:59:a3:21:12:a0:c7:1e:4b:8b:a0:b7:00:e2:3c:00:f9:4d:
a5:95:ee:9b:01:70:b6:5b:bf:ce:a9:1f:f0:c6:da:c8:7d:35:
85:6f:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client