Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: DIojPind6mLBnNB2ynAv5ULct1VNyanfFzRuEoGMo8o=
Subject key identifier: BF:D5:7A:7E:B5:9A:C7:15:06:F7:11:F0:8D:A6:DB:E3:D2:29:FA:A6
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019D389C2097961780C06877F7A0D4AFBAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: aTIChkN6U7xcokks7sL972mHmi28xllWw3Hid/MeeDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:20:97:96:17:80:c0:68:77:f7:a0:d4:af:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=bfd57a7eb59ac71506f711f08da6dbe3d229faa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:67:5a:8d:3f:7f:03:e5:53:52:7b:da:0e:
6f:f5:84:14:0c:0a:29:4d:89:4f:b7:6a:e7:79:38:
df:44:34:13:40:aa:5e:92:8b:ea:0c:10:38:c1:6d:
18:97:0a:01:0b:19:57:c7:40:16:7a:84:22:a7:62:
25:a2:2d:12:6c:aa:ac:80:49:34:90:19:10:94:88:
d9:e9:b2:e8:4d:49:28:89:4f:e1:a3:74:19:83:c2:
2c:59:a2:9b:50:4b:d8:0c:34:b2:6c:46:87:e3:a7:
45:43:5b:a4:8d:4d:15:48:d0:78:14:c8:08:e2:bd:
7c:77:c6:88:da:9c:db:36:86:e3:7a:40:72:aa:1a:
f5:38:ed:42:ce:27:27:9a:94:9d:14:14:59:a2:19:
34:cc:19:09:ac:6c:32:02:e1:e6:03:65:47:08:5b:
29:4c:ca:e3:26:63:97:95:d2:96:36:36:37:92:13:
ec:25:c8:a0:54:fc:d7:0d:6f:03:2f:12:5a:36:90:
b4:1a:9d:26:f2:9c:9a:7e:3d:cb:ba:00:22:b9:7f:
cd:f7:f7:0e:0c:0f:e3:c6:85:5c:fb:1c:d6:29:a5:
54:2b:03:31:76:d7:10:ab:f8:3f:19:c5:56:a3:d7:
c8:46:b8:98:93:07:2a:28:0e:20:30:d4:73:5a:4d:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:7A:7E:B5:9A:C7:15:06:F7:11:F0:8D:A6:DB:E3:D2:29:FA:A6
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:a5:89:2d:16:81:9b:86:f9:01:f4:48:f5:d5:80:a5:cf:
6e:51:64:bf:00:9c:ff:e9:c8:ee:e0:b6:16:ec:84:4b:5a:df:
fa:78:4e:ee:c9:1f:12:f9:6c:c9:75:01:56:6b:70:66:36:a8:
a9:bf:bd:3e:a1:34:75:5f:29:2d:ad:41:f1:02:66:86:d0:89:
a9:c2:82:ed:ce:28:7f:5b:38:ca:52:29:f6:90:64:f9:37:06:
c2:30:8c:be:cf:44:d4:13:11:29:98:7e:d0:f3:29:1b:e7:97:
55:df:25:cc:ca:60:42:09:d9:92:ef:6d:61:51:9a:55:42:aa:
c0:2a:18:47:1c:17:bc:4a:1d:12:6e:a2:d5:5e:e6:ba:ac:02:
7b:4e:a4:1f:5a:e8:db:55:0e:61:e6:04:c6:50:e2:59:b9:eb:
83:68:00:48:ca:a2:8d:20:09:7b:e6:6c:0c:41:b1:5a:21:3d:
78:a8:96:da:dc:a3:1b:e3:62:c2:ff:7c:28:cd:91:c1:0f:a6:
54:66:88:fd:5c:96:be:00:5f:19:9e:6c:09:21:14:54:7a:4d:
3a:59:06:25:d0:9f:7f:df:ec:ec:ef:4d:b1:6a:66:73:4b:67:
a5:08:aa:3c:da:5b:9f:ea:6c:92:24:1d:3c:d2:2c:0f:ea:4a:
b1:df:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client