Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
File: 1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft (raw, json)
Hash identifier: juIsZ/3VQoa7rRSb+rQZIjBvh8WfGO6aZH8c3haveTA=
Subject key identifier: 76:AE:E1:49:F7:3A:DA:9E:87:C9:6D:6E:E6:92:22:DB:71:CA:57:0F
Authority key identifier: D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D
Certificate issuer: /CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
Certificate serial: 019D33AC85105D21B2A934229D3F12B9E897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
Manifest number: 53
Signing time: Sat 28 Mar 2026 09:00:37 +0000
Manifest this update: Sat 28 Mar 2026 09:00:37 +0000
Manifest next update: Sun 29 Mar 2026 09:00:37 +0000
Files and hashes: 1: 1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl (hash: 55UKzuioQKXnaF9YxlX2zMB2YjP1bD7l9Iuw/1RtL4w=)
2: 9nPlOHYAHfyq6nvNreDs-Z27tqM.roa (hash: lVEwvYAKVlQiegB9BUjPpXT5BRTtW+2GQKgK1DFVwe0=)
3: M0nXoemZM80cs7-wgz7LynloKRU.roa (hash: Ml2fWT6fJ60kgFf8AT9u9ZFbZB2Z3iBFnyjQVhvjjO4=)
4: ZPcVr_99m8S8MN4KS8E89rzHdiU.roa (hash: 4ghNNSiKjSYzIHSnF3XQIcioMv7lGSMklZ8MTORFbKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:85:10:5d:21:b2:a9:34:22:9d:3f:12:b9:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
Validity
Not Before: Mar 28 09:00:37 2026 GMT
Not After : Mar 29 09:00:37 2026 GMT
Subject: CN=76aee149f73ada9e87c96d6ee69222db71ca570f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:f8:f2:2e:4e:7a:04:6f:b9:13:6f:88:eb:
70:f5:26:f3:be:8b:d1:a7:e6:af:fd:9c:ed:d6:da:
b3:00:1b:e4:00:d8:68:c1:a0:e0:9b:f2:84:d5:09:
a4:d6:0d:63:1c:5c:04:19:6b:40:6b:36:b0:ff:d7:
19:57:5c:ed:62:1d:97:d4:98:9b:25:6a:87:95:f2:
92:b9:f9:8f:04:66:90:bf:3d:ed:a8:7b:be:32:5a:
fa:3f:98:f4:ff:82:0d:4c:d0:8a:b0:10:9b:c9:29:
af:64:14:dc:bf:24:cf:1b:d5:0c:eb:9b:e6:3b:bb:
19:0a:54:91:f0:d6:84:a1:f2:3d:46:ba:49:76:47:
23:6e:cf:13:0d:41:8d:cc:8a:2b:5f:88:db:e2:d5:
dc:d9:4a:02:94:60:34:1e:e0:43:8f:f8:44:af:43:
7b:9c:88:02:de:59:d7:fd:aa:12:6b:35:cb:2a:02:
50:87:86:f2:bb:df:5b:0b:e2:b8:b9:46:26:0d:26:
61:12:26:09:d2:83:58:71:df:06:0d:2e:f0:55:6e:
c3:b6:58:9f:9a:4f:c0:96:08:80:c2:8a:ec:6b:c5:
53:dc:84:02:01:82:c2:0b:d0:5a:2f:37:b3:8a:96:
fa:d4:f1:41:d3:0e:22:26:e2:96:69:c1:ec:cd:8c:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AE:E1:49:F7:3A:DA:9E:87:C9:6D:6E:E6:92:22:DB:71:CA:57:0F
X509v3 Authority Key Identifier:
keyid:D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:09:12:45:1a:ec:66:a2:3c:d1:2c:cc:16:e7:27:6f:0a:
a3:b2:2b:77:60:d4:14:2d:88:b6:3d:2e:4b:87:46:16:eb:09:
a7:75:a6:94:8a:cc:ac:05:cc:64:98:4a:58:da:8e:f8:5b:ed:
81:5d:18:50:b7:f0:ab:d4:a1:b6:f3:0e:7d:6a:00:a6:12:10:
0a:9e:fa:74:f9:45:a6:c6:ea:f6:38:54:45:7e:26:f1:91:59:
2b:fa:2a:92:fa:2a:3b:78:a3:cd:c1:f8:23:b2:70:28:5e:7d:
51:6f:fe:38:4e:1f:15:e7:63:c1:8b:62:78:41:9f:ea:a0:02:
d2:14:dc:78:9f:fa:f9:e4:bf:13:29:92:dc:f3:f1:dc:b9:4a:
36:74:c5:a0:43:74:e5:65:6f:c2:ef:83:ef:42:b6:71:12:60:
62:48:d7:e9:f1:ca:3c:56:d3:68:b7:41:cf:2c:b8:77:85:db:
3d:aa:8b:04:56:67:39:d3:21:9d:23:19:1c:53:75:41:90:4d:
f8:1c:c7:3c:b2:03:55:39:a0:54:c8:77:e2:8f:d5:b9:d9:41:
6c:56:c8:4b:af:21:ac:18:f6:95:12:0d:e5:26:7f:99:2b:47:
04:08:53:e7:13:ba:d0:38:10:e3:9c:89:2f:8c:66:0a:a3:cf:
1e:41:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:50 2026 by rpki-client