Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: beuSxYoEe3HkJK36ZSbWp95L9Qfs71Y+clY/bYi334I=
Subject key identifier: 32:26:29:EF:AB:DE:E2:D0:E0:C2:36:E0:7C:95:2E:FF:C0:6E:E8:15
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019D386651F2E986EF6594DFC45BB0751BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: jHx5DvElVzj5LHXtCTTj3LKNGVhZUOwxjImuuQZLdGg=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:f2:e9:86:ef:65:94:df:c4:5b:b0:75:1b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=322629efabdee2d0e0c236e07c952effc06ee815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:92:79:80:8a:c9:fa:3a:a0:69:43:34:5f:
b3:8b:d9:8f:18:07:e3:12:ed:5e:fa:e0:80:f2:ef:
9e:d5:ea:f9:c5:dc:cf:7a:1e:cf:92:41:a6:b2:61:
4c:d6:a9:e0:e0:40:8c:91:da:a4:6c:e2:a6:32:0d:
a2:f3:2e:6d:5f:07:04:d7:70:0c:80:b3:2f:31:2b:
71:95:bb:d2:b5:9e:55:3f:a2:bc:37:54:7f:7e:89:
c7:b3:4a:ba:cd:a7:2b:69:ea:d0:3a:cf:3d:be:a4:
62:a4:94:58:a2:eb:92:8c:81:e1:6f:09:bf:a5:65:
7c:a0:a6:7d:bf:2d:e8:6c:34:8b:84:2c:38:3f:04:
78:16:21:fe:b5:68:6d:8a:e2:2a:65:d3:a1:50:de:
fa:e8:88:7b:2e:0c:5b:af:4f:2b:c1:38:56:e2:e6:
77:6d:2f:0b:89:af:55:f1:29:4a:57:90:90:70:ba:
94:72:80:65:29:3c:35:33:ce:c4:67:da:49:cc:a0:
19:8d:fc:59:23:3d:40:7b:1c:17:9d:6c:97:42:28:
08:c9:50:b9:b7:4c:30:cd:3f:77:56:09:81:5f:20:
cf:e9:81:63:30:50:e6:be:82:28:b5:24:a6:eb:d6:
f9:5f:12:95:7e:b8:9d:73:2b:21:32:c7:1c:63:9d:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:29:EF:AB:DE:E2:D0:E0:C2:36:E0:7C:95:2E:FF:C0:6E:E8:15
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:87:e2:2f:9a:78:19:53:51:6a:f7:fa:af:6b:2b:11:72:
c5:dd:53:ab:5a:b8:c2:59:79:5e:2f:5f:ce:e4:c0:f6:97:58:
16:82:49:29:51:de:3f:0d:0f:d5:5a:4e:8f:9d:26:78:ac:e5:
60:1a:57:d0:2c:03:fb:b7:23:b2:db:dd:47:5f:c7:a4:30:b9:
e9:d6:1f:0e:b0:20:25:b2:95:21:5b:00:15:58:68:bc:83:56:
20:75:df:51:64:87:91:c4:2b:33:9a:17:19:97:0f:f1:83:82:
f0:3c:70:c1:a2:6b:23:e5:35:64:13:ba:43:31:f7:6e:f3:40:
d0:5a:ac:1e:6f:19:f7:56:eb:5a:12:0b:ac:06:3e:cd:cd:69:
77:8d:9e:15:21:dd:53:41:6b:dc:10:d0:20:e0:f7:35:cc:4b:
cf:d0:09:1e:94:68:d2:3c:f4:49:e3:e7:82:44:b0:ae:e1:c8:
c0:29:34:d7:22:2b:ec:0f:bb:80:7f:9b:4f:32:88:4c:62:b9:
4f:00:c7:4d:ce:40:59:c9:99:a8:57:1b:3c:29:88:c9:84:b7:
0c:39:73:fd:79:38:ce:35:d7:b4:5e:21:51:81:d9:18:4e:2b:
79:75:d9:09:e4:ec:83:18:5e:4f:e0:ab:34:f4:ad:ee:ad:4e:
61:d1:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:14 2026 by rpki-client