Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: X8muOqbCk5XWnQ+1B4K8zQTSLIIuKGFiyeK6C1sNqFw=
Subject key identifier: BA:2B:53:10:2C:71:DA:1D:4B:0D:1F:C8:E4:9C:C9:3F:D7:B2:46:7F
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019D389BE434BD73A472F96ECABA649F8AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: FdrAgIeLWIsmDQ7pr00t1/nWGZ05eHQxiUZKNRfTUM0=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e4:34:bd:73:a4:72:f9:6e:ca:ba:64:9f:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=ba2b53102c71da1d4b0d1fc8e49cc93fd7b2467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:d2:83:e2:9c:a4:da:e7:ce:5b:fb:16:f5:
37:13:71:a4:ca:19:c2:4a:89:e1:54:68:b9:25:bf:
72:ab:b2:e3:f8:43:88:d1:a2:d7:54:dc:b5:e7:06:
9f:cc:a5:3c:46:5a:cc:8e:d7:f3:00:81:58:a8:6d:
bc:f3:42:a2:0a:91:74:ed:94:57:d8:22:d0:e6:7b:
a0:f6:75:7f:9a:47:7e:74:48:cc:a2:76:96:c4:18:
96:ad:54:60:78:b3:2d:a5:8d:5d:5c:a6:67:08:94:
98:bc:9f:44:8c:95:6d:76:02:82:01:02:34:ed:f5:
03:38:c7:85:fb:e7:56:a0:91:be:69:47:bf:b2:b7:
6c:d2:ee:b0:0d:91:87:47:4b:5a:f5:33:3c:ca:f0:
a5:14:9a:c9:62:29:b7:d8:82:6f:b9:01:43:9f:1e:
90:3e:26:84:cf:d5:99:50:ee:ae:a2:03:d8:11:0f:
52:a0:f0:c5:fe:6b:18:29:57:cc:b1:0d:b7:a3:8f:
dc:23:c1:4f:bf:2f:2e:cd:e1:14:a4:b4:a2:dd:ab:
8f:d8:c5:78:3c:e4:43:e5:40:4d:74:5b:42:2c:52:
2d:05:fd:fb:ef:c3:54:5e:a3:f3:34:b8:6f:e4:82:
bb:3c:3f:8d:b1:eb:46:a1:87:31:81:fa:8d:9e:d3:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:53:10:2C:71:DA:1D:4B:0D:1F:C8:E4:9C:C9:3F:D7:B2:46:7F
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:86:66:70:3a:57:10:db:a8:cf:59:88:99:53:d1:d8:42:
47:10:18:bf:6a:af:42:95:60:d9:18:aa:38:81:45:37:d6:68:
17:e9:5c:6a:94:5e:a0:d9:bb:f2:14:c7:67:e8:92:bf:87:b5:
26:29:c1:b6:0c:e5:fb:11:81:5b:ec:93:0c:3a:12:7c:28:88:
04:77:76:d5:12:50:b8:3b:6d:89:30:50:0e:53:2b:5a:9c:40:
f3:19:30:a5:8b:c0:16:da:72:33:e2:b3:46:10:8a:20:cb:94:
cb:6c:81:df:53:8f:9e:6a:06:b8:8d:c6:26:47:2b:da:37:85:
1f:34:76:5e:dc:ab:0e:ad:96:19:0b:09:45:57:7c:7b:94:06:
8f:2e:d5:41:96:33:16:96:4b:f5:52:c1:8f:1f:f7:62:00:bf:
0f:4e:f3:aa:90:e1:20:27:d1:54:87:5d:2b:7d:f6:16:4d:f0:
21:ed:1f:c3:b9:a7:d7:17:11:3d:44:90:cb:80:1b:85:f0:53:
1b:51:4b:97:e9:ab:14:13:1c:64:92:33:d5:d6:a8:c9:ff:07:
aa:1a:22:2d:8a:c2:b7:45:1a:b8:3c:39:47:1c:90:dc:56:9c:
5b:90:03:78:93:ba:a4:f2:3f:47:08:03:6e:ff:62:83:fc:13:
36:83:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client