Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: Xl5z1OA3FUawYbGfUCykLkOIOGKCCEv+ssG0i6l7LcA=
Subject key identifier: 28:65:9D:4E:58:60:39:C5:0F:BC:E0:73:EB:9D:D7:A9:5E:15:B1:89
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019D2B4E58CF0D2E4D0267593703EC8BB314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 133A
Signing time: Thu 26 Mar 2026 18:00:47 +0000
Manifest this update: Thu 26 Mar 2026 18:00:47 +0000
Manifest next update: Fri 27 Mar 2026 18:00:47 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: OazQmVo4gn+laILGTro10wazKYIhwPXOE4zw7qrs1UY=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:58:cf:0d:2e:4d:02:67:59:37:03:ec:8b:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Mar 26 18:00:47 2026 GMT
Not After : Mar 27 18:00:47 2026 GMT
Subject: CN=28659d4e586039c50fbce073eb9dd7a95e15b189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:b0:c2:88:30:43:0c:25:89:ac:53:be:53:
27:ce:38:7a:f0:06:46:e3:f8:2a:79:7e:2b:a7:af:
06:4e:b2:e7:f0:e6:2b:98:b5:6e:8b:b3:41:89:e8:
10:5b:5f:b3:9e:d2:b0:14:eb:dc:5d:d9:84:56:f2:
be:70:a0:0f:b9:e4:0f:ab:90:0b:05:40:50:09:20:
f9:4d:65:a6:64:6f:00:90:6f:c4:9b:4d:52:6e:1f:
c5:aa:af:ad:6e:4f:2b:3a:51:d7:dc:1f:b0:e2:f3:
f7:b4:1c:f6:0c:6c:10:03:57:95:94:52:2b:77:3d:
06:d8:76:78:b7:1f:ba:20:d7:18:e8:b1:15:1f:fa:
5f:b6:52:c1:d8:88:f5:43:2d:03:3e:2b:e6:de:05:
e0:fc:78:f5:e2:46:d1:df:0a:09:8a:f9:27:42:8e:
bd:70:c7:25:ca:39:c4:a3:92:c7:1a:b6:2c:36:1c:
93:f4:83:0b:ed:d3:cb:06:e9:6d:80:9a:a2:96:29:
17:e5:35:c3:74:3a:91:37:48:d0:b2:ac:4b:be:e3:
b5:04:fc:5d:f8:46:70:90:4c:16:10:a2:70:f5:c6:
1d:53:4e:eb:9a:37:da:fb:10:0c:9f:6c:2e:6f:c8:
51:7e:0b:ab:93:e7:d5:b9:5f:19:77:37:13:d4:09:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:9D:4E:58:60:39:C5:0F:BC:E0:73:EB:9D:D7:A9:5E:15:B1:89
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:c8:cf:91:c5:ac:b0:24:97:84:af:17:4c:c0:9b:a9:a8:
8e:c9:ca:aa:26:79:f9:ca:a9:80:4a:2e:55:fd:c5:0a:a0:9b:
59:d9:ac:c4:4e:91:7b:7e:ed:f8:ce:2e:20:46:c0:7f:ff:27:
1d:b7:43:54:7d:e0:b8:6b:e5:c2:2d:a5:9b:98:a4:64:55:53:
fe:70:51:60:aa:70:10:c1:3c:72:41:8b:38:88:58:ba:05:a7:
73:02:5c:52:90:21:b9:d8:72:10:cf:2b:83:c5:ae:ae:1c:b3:
5c:49:0e:cc:f9:f5:ef:00:65:aa:55:31:b2:05:ef:b9:70:9d:
38:5d:67:33:37:86:f3:a1:d1:32:10:15:1f:93:77:8c:47:05:
03:96:fb:ba:83:98:f0:05:46:c2:01:40:6c:d2:5f:b4:ba:6a:
ff:7d:7d:f1:dc:04:62:0b:ad:c2:5b:21:ff:eb:0a:4e:e5:46:
e6:b0:90:32:bd:9b:e5:c0:07:11:a3:fd:b2:85:ad:a6:68:e5:
28:c6:c7:09:f2:4d:fd:f4:32:62:c0:be:de:0c:6e:7c:01:76:
9f:65:30:15:9f:59:50:59:5c:fa:59:46:72:56:a8:6f:72:08:
7b:75:d7:3b:a2:03:f1:d6:ee:b9:07:4d:5f:e6:d2:d3:43:c9:
03:c7:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:24:36 2026 by rpki-client