Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: zEjwOUjugzoGpwGicvPQId/N6x8ynegDr+9EWnRgDGs=
Subject key identifier: C6:28:F8:69:10:49:3D:D7:3B:43:56:41:20:5B:41:B0:88:EC:82:34
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 019D389BC7F1B4DBFCAD20A831B805BFE060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0BA5
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: OhaUCijQCaO7x8v2geljqMW8SWk1YIMuzjjMk8d+xwY=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c7:f1:b4:db:fc:ad:20:a8:31:b8:05:bf:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=c628f86910493dd73b435641205b41b088ec8234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:ad:df:a3:f8:bc:20:44:6b:c4:4c:9e:bf:
aa:19:26:2b:20:f7:b7:18:64:80:2b:1f:24:3b:4e:
bf:bd:10:d2:97:e1:48:17:73:3b:9f:83:88:26:50:
99:06:bb:64:4a:42:c8:1a:09:89:41:93:bc:d6:19:
ad:5d:8d:80:a1:d9:e3:9f:ef:ae:ef:37:bd:1d:52:
eb:26:dd:84:f0:e3:6e:4f:d8:a2:22:3a:c1:9a:e4:
49:5d:23:d3:34:a8:d3:5f:66:53:fd:98:a7:d1:03:
5b:5d:ba:45:64:df:95:82:c7:77:11:67:94:11:7e:
f7:bc:27:e2:b9:99:2c:be:38:37:e7:59:a3:ea:41:
26:26:9d:1f:f1:a7:fd:70:3c:f4:77:67:cf:2d:a8:
15:b3:41:64:4e:ba:a7:0d:d7:a7:16:c9:07:1f:b4:
d8:49:40:a3:b0:f4:dd:07:ca:a0:bd:19:89:25:b5:
cd:a8:10:79:95:b1:4b:a1:10:af:a1:09:bd:cb:d4:
c6:1f:3c:7e:22:44:99:a5:b1:8a:0a:66:cc:9b:54:
da:d1:2c:b3:e2:08:b8:28:13:b1:49:2a:7e:43:a3:
2b:54:f1:bb:52:e4:15:0f:82:fb:89:0c:70:8f:85:
ea:f0:a3:6e:bd:06:6f:6c:07:80:cd:da:46:5b:9a:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:F8:69:10:49:3D:D7:3B:43:56:41:20:5B:41:B0:88:EC:82:34
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:45:2f:fd:35:60:ae:b6:94:ce:25:5a:96:10:f5:a2:30:ee:
4a:84:14:ea:a9:0e:14:9a:f2:48:13:dd:58:88:97:c9:c7:54:
b5:69:41:a1:64:48:6d:ae:8b:70:b4:53:3c:88:67:b6:35:7d:
e0:a6:b9:91:da:71:53:8a:3c:2f:14:bb:5d:b7:5e:09:8b:94:
34:2c:05:8f:b2:e2:70:44:9a:07:ca:e0:12:87:f5:04:7b:e6:
5e:73:7f:92:0c:04:d4:42:5e:b3:b6:1c:98:03:e5:8a:8e:e4:
8b:57:4e:e9:37:83:63:71:2a:a5:56:b4:59:1c:fd:be:3b:f0:
8e:09:03:aa:13:e1:5f:3e:5f:b9:dd:21:a1:c5:d1:b4:45:62:
61:1f:49:af:43:56:5e:93:5a:79:25:a6:1a:2b:0d:cd:80:22:
83:5e:68:d6:26:09:d4:15:a3:b2:07:bc:7e:54:f2:a6:c0:15:
bf:46:79:68:67:b1:f3:b9:7a:60:b6:34:d1:dc:10:bc:8a:f2:
39:c9:7f:0e:51:ce:03:5d:cb:89:aa:ab:16:1f:7a:7a:e8:88:
76:e2:ff:26:32:33:95:a8:4e:dc:93:44:99:84:f8:02:00:fd:
73:fe:36:74:6d:24:52:f0:c2:f2:16:b2:86:ff:87:22:66:55:
2a:13:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:06 2026 by rpki-client