Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: fD/M0J8uwqgfbzHu0BLDs7fSr1GFrLLDLHxIy/IgzVQ=
Subject key identifier: 86:9D:CC:3B:2A:2E:F9:58:B1:BD:7A:CE:23:C7:4A:55:0D:E7:0B:11
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019D38D3106E6F7FB03B2B69E27EDD7ECF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 13B7
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: 8enBz657CEqqpcfTMsw7/MkoNL4YbtabXXPG7hBcZl8=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:10:6e:6f:7f:b0:3b:2b:69:e2:7e:dd:7e:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=869dcc3b2a2ef958b1bd7ace23c74a550de70b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:90:5d:34:0c:ae:3e:fa:ce:3b:28:0e:99:
93:f3:90:40:fe:67:f0:2a:56:d7:a8:91:fe:f3:aa:
8e:5b:a8:5d:b4:6d:1a:af:50:31:79:ec:a5:e4:cd:
ac:00:95:36:d5:45:6d:ea:bf:a5:9f:68:5e:61:38:
36:2f:b8:e4:80:0b:87:02:09:9f:2e:68:ec:9f:7e:
69:e2:70:f3:1c:59:a6:8f:29:c3:27:82:8e:be:23:
e4:9e:6f:24:36:8d:48:a2:8b:a8:1a:14:7b:42:a2:
ed:91:9d:bb:f3:40:1c:cd:fa:95:5f:83:d6:06:d1:
7a:ec:cd:ce:de:05:40:2d:f7:2b:7d:09:2f:08:11:
fe:bc:0c:19:6f:f4:96:41:c9:14:e0:58:29:7e:47:
28:1a:ad:f5:5b:cb:e3:94:ce:8a:84:ec:ac:b5:10:
59:f1:ad:94:57:6b:26:e1:6d:ed:13:95:8b:d3:78:
6d:50:22:2b:d6:8d:68:59:06:8c:12:cb:56:8d:25:
2f:54:71:e0:5b:c2:62:67:a2:39:52:de:24:b9:77:
a5:35:89:ad:c9:aa:17:22:90:56:d1:37:bf:58:15:
bc:9f:6d:6c:b6:a3:94:1d:34:d7:21:43:b4:b5:1a:
2c:9c:32:21:30:e6:db:38:dd:0c:dc:8b:08:28:f4:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:CC:3B:2A:2E:F9:58:B1:BD:7A:CE:23:C7:4A:55:0D:E7:0B:11
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:09:cf:62:ca:2c:64:0c:fb:ee:42:e7:69:ca:d5:1b:33:
5b:98:c2:b7:2f:4e:e0:11:46:6d:3e:4c:b9:9d:ec:3a:46:0c:
03:f2:28:67:1f:22:f9:9f:8f:c2:1a:e4:68:c7:6f:f9:92:0c:
d5:9c:ea:39:96:74:1b:79:4f:9b:c8:77:5c:e0:e0:2b:a4:8c:
b9:5a:21:1d:64:1b:82:c9:80:ec:8f:56:60:e0:51:a6:6d:1b:
44:65:f0:24:82:6c:60:7d:59:85:09:d7:28:7e:77:40:cb:51:
b1:e9:1b:19:80:e0:5d:9c:38:25:a0:89:65:6d:d4:e9:66:c0:
7c:80:88:45:db:65:4f:1a:f3:5e:3a:15:d4:8c:bd:5f:3e:46:
41:90:e8:e2:ba:39:86:c9:f4:c4:91:19:d3:47:d8:1a:7a:91:
8e:1d:77:98:0e:f2:3b:e3:bc:6d:c2:84:ac:25:bd:9d:ed:21:
52:5e:72:34:85:08:d6:91:a4:0b:19:f6:26:ef:da:25:73:c6:
0b:bd:7c:3d:a4:c9:37:3c:16:5d:68:6b:21:0a:d3:9f:f4:16:
21:49:8f:1e:66:97:18:38:65:5f:e1:fd:1d:f7:7b:72:c3:1d:
00:9c:99:94:ee:08:17:9a:0c:46:52:a1:51:70:29:4d:2f:85:
a0:2a:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:03 2026 by rpki-client