Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: hvwLmoC1fsUQD+APyne0+WUrypX4reQSg+AhyakyVOE=
Subject key identifier: 21:DB:91:00:C7:E2:EE:7C:E0:2E:B2:66:26:3B:3B:9A:AA:8B:33:6A
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019D27DF61EB2447EF3DD05402754197BF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0CB2
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: iNlWdtAuy/tMCtPjU8UQmbWYa4xs0Qpk1AcJmwrAaOA=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:61:eb:24:47:ef:3d:d0:54:02:75:41:97:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=21db9100c7e2ee7ce02eb266263b3b9aaa8b336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:58:2e:08:01:a7:bb:d2:28:cb:28:c4:a9:
0f:f0:cb:0a:de:6b:94:48:22:91:2f:d0:b6:d7:26:
30:7c:1b:df:24:b8:dd:1b:6e:45:5b:f6:cf:f8:f1:
6d:18:92:06:05:67:51:30:99:48:30:cd:e2:fb:a3:
63:a2:6f:ff:e9:71:e9:9a:64:fd:92:8a:b9:20:ef:
30:1a:79:fd:ee:10:77:4d:dd:b4:aa:87:aa:00:a6:
22:df:6a:a5:6e:45:83:62:81:5e:68:e1:de:ab:83:
7f:78:60:ca:cd:6d:bc:d3:93:1e:31:33:35:ef:f0:
a3:62:3d:ba:b8:d4:e5:f4:08:c7:de:df:e2:cc:c6:
f0:86:3e:cd:27:aa:ea:5c:9f:a3:83:ed:87:a2:ee:
ac:5e:9e:c4:19:b6:0b:20:46:f7:31:02:f3:c6:d8:
17:c2:b8:92:8a:07:54:b8:51:55:a2:40:5e:9d:12:
2d:43:ca:48:74:ae:9f:f1:ef:7d:cc:5c:41:63:03:
f4:d1:ed:ea:17:a0:f0:bd:9c:ab:24:1d:f6:79:bb:
26:30:d4:49:14:b3:77:7e:60:60:51:a3:8d:bc:8b:
0f:ac:a9:d4:aa:63:8d:4f:00:b4:ad:10:85:ea:4e:
32:5a:6f:4b:9e:27:02:44:2b:9a:d1:ba:56:cf:35:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:91:00:C7:E2:EE:7C:E0:2E:B2:66:26:3B:3B:9A:AA:8B:33:6A
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2d:45:a1:06:05:1b:b7:ac:7f:12:0d:99:71:a8:16:96:1a:
19:c6:22:d0:a9:98:25:f8:95:89:6f:ca:92:bc:d4:e9:84:e8:
d3:6e:2a:37:30:23:a0:98:b0:f5:bf:46:5a:8f:39:f0:3a:dd:
ea:3f:20:8d:d7:b9:58:a7:75:ed:49:d3:85:1a:d0:c6:3e:2c:
45:df:d6:b0:2a:8e:d2:d3:ea:9a:03:fe:c2:ce:a6:85:f7:30:
4a:d6:91:09:c6:90:39:a7:65:ee:ef:15:16:b4:04:c9:e7:4e:
03:2b:48:b9:34:4f:73:b8:8a:8a:97:3f:e3:3c:51:41:55:24:
05:11:61:71:9c:14:53:34:8a:1b:c2:53:72:8c:6c:99:a0:d7:
38:2a:80:8d:ad:b7:01:7f:a8:bd:14:c2:13:21:25:0f:76:a5:
9e:3a:e1:70:4d:f6:32:32:78:26:0a:99:4c:03:c4:41:d1:f3:
76:c7:aa:2a:4e:63:c7:f1:37:84:b5:71:8d:05:68:b0:87:4f:
ac:88:ce:22:b1:89:df:01:9f:cd:ff:8d:5e:6d:83:63:85:59:
60:11:6f:c2:ba:75:3a:53:17:bb:c3:c4:d8:fc:a5:42:19:05:
fc:2d:1a:18:10:60:8e:f6:9b:42:78:f6:4a:71:b2:4a:c4:a0:
e5:c1:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:55 2026 by rpki-client