Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
File: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft (raw, json)
Hash identifier: s26fdv00Aj7Vn0Yp5fUh5PXyuFAWp3hJuSHtyNBjMmw=
Subject key identifier: 6E:33:A6:66:71:38:70:57:62:D8:70:94:16:8F:45:88:99:CD:50:42
Authority key identifier: FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
Certificate issuer: /CN=fac020f12091a4eba81e4c0466de771db7561650
Certificate serial: 019D3A5400E89DD460D77DCAF3CBB8012973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 16:01:16 +0000
Manifest this update: Sun 29 Mar 2026 16:01:16 +0000
Manifest next update: Mon 30 Mar 2026 16:01:16 +0000
Files and hashes: 1: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl (hash: NPEHIy6lBf9uEgno1HQobbvmIra0JkxwIhz7oEZTK2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:00:e8:9d:d4:60:d7:7d:ca:f3:cb:b8:01:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac020f12091a4eba81e4c0466de771db7561650
Validity
Not Before: Mar 29 16:01:16 2026 GMT
Not After : Mar 30 16:01:16 2026 GMT
Subject: CN=6e33a6667138705762d87094168f458899cd5042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:47:33:d8:23:95:6c:67:74:d2:62:66:0f:
09:dd:75:1f:40:26:b2:a2:18:75:ca:be:ef:53:ae:
76:30:60:f1:0d:f4:a7:3d:f5:34:87:16:e3:66:36:
ee:7e:5f:39:86:76:bc:02:35:ed:48:8b:11:de:5e:
65:4e:b8:de:3a:8d:7b:66:0b:2b:e1:0b:70:78:d5:
58:ca:e1:2f:df:5c:6b:fd:60:7f:a7:b0:0a:5d:cb:
df:a8:d6:f0:d0:b8:7d:14:9b:8e:72:23:12:d7:f8:
62:82:91:3e:ea:65:3e:2b:98:49:73:ef:9d:38:cf:
40:6b:9b:ce:d8:55:f0:b1:33:af:3d:1b:d1:88:5f:
82:97:0b:f8:8e:d4:0f:82:84:96:ab:a3:53:9a:a1:
dc:76:7c:eb:dd:a9:80:f0:14:c0:b7:f4:a9:1f:5b:
f5:98:51:73:d0:a8:86:47:7c:ee:97:42:77:e7:8a:
6c:f4:08:8d:fe:8f:14:db:73:28:c5:ed:2b:4a:fb:
cf:f7:c7:e2:7e:63:3b:b2:6c:1a:59:41:3a:4c:f1:
9b:86:88:26:5e:56:cd:e2:b0:72:96:b2:d8:02:a1:
ff:60:e1:2c:ea:a1:46:85:c8:02:da:0f:db:1e:63:
51:88:7e:25:46:ee:4f:fe:1e:0c:a1:65:70:28:3f:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:A6:66:71:38:70:57:62:D8:70:94:16:8F:45:88:99:CD:50:42
X509v3 Authority Key Identifier:
keyid:FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:aa:29:1f:aa:0f:57:a5:3d:f3:94:e2:53:08:2c:c0:ef:b8:
34:14:5d:86:45:7a:8f:03:f9:43:19:0c:c8:6f:9a:45:c2:5d:
74:ae:63:c6:7e:89:d3:63:9b:f7:5c:b0:13:1c:f1:92:9f:29:
e2:1a:ac:40:a9:e9:b7:66:71:99:ff:b6:18:c8:c3:a6:0d:c8:
d4:cd:28:3a:19:72:d4:61:61:a0:0c:a3:98:be:20:ef:49:b1:
17:d2:68:af:ca:48:2f:0b:f5:bf:c1:5e:75:83:46:0a:a6:80:
26:41:c0:94:79:70:66:85:eb:40:21:60:3d:a8:18:3e:f6:23:
a6:39:7e:7c:d5:cd:87:d9:6e:04:dd:6a:3b:9a:00:9b:8c:b7:
12:d4:9a:a6:9a:c5:be:6e:e4:78:31:a0:9a:65:f3:9c:db:21:
b8:07:8f:60:bc:9a:d3:a7:2e:64:6f:01:1f:33:11:55:77:c9:
a0:83:a6:24:3b:c4:ec:dc:8b:b2:13:63:5d:e5:c9:bf:29:58:
96:fe:c9:25:a0:c0:16:96:7e:84:bb:00:e7:fa:9e:a1:e3:f9:
8c:7a:bf:e8:47:fc:9e:a7:67:12:df:78:e4:23:55:fc:9d:fb:
c3:e0:c6:2c:5f:a7:80:b1:c7:b7:da:25:7c:a5:5c:41:02:77:
7a:67:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:36 2026 by rpki-client