Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: 3QqtR9HGQbtvMemzFJWvOK1FWPSvJ+eormU3suPXRvk=
Subject key identifier: A7:CE:8D:CC:A9:8C:98:27:4A:CC:7E:5C:07:FC:9B:DE:93:EC:70:65
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019D27A87A725C3E617B5C770A958E742882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1805
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: CAIom2qZJHcVWpsyRR5KoxH+4YNwtg+9rJkPSpo88TQ=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7a:72:5c:3e:61:7b:5c:77:0a:95:8e:74:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=a7ce8dcca98c98274acc7e5c07fc9bde93ec7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:e9:01:fc:d6:fa:a3:ff:97:d5:1f:52:7e:
de:47:15:a4:e4:bd:c0:9e:73:30:b9:cf:d0:b0:19:
e7:09:27:eb:86:e1:b2:5e:e8:cb:36:f4:d9:d6:8c:
1b:c4:cc:fe:ca:58:21:b9:56:a9:30:d8:83:c3:02:
ce:23:85:6b:a3:30:5e:c3:2d:ca:28:1c:ca:9c:5a:
d5:3a:54:74:9c:29:be:2c:af:47:d4:96:3f:35:02:
ff:85:05:bc:f4:52:2d:d7:b1:42:8c:b1:ee:71:b3:
b1:d1:3d:04:35:ac:ea:b1:5a:b3:eb:b0:cc:fb:42:
0d:a9:94:f3:a1:a0:e6:b4:43:93:ea:6f:71:fa:e7:
36:ce:d5:ef:e9:07:05:75:70:b9:ba:2d:f9:3e:36:
9e:4b:58:80:1a:d4:fa:45:85:33:37:9e:f9:b6:1d:
2b:2d:0e:91:ec:c2:27:2e:01:33:72:f4:0f:ba:6b:
33:4c:04:48:3c:53:a2:dd:ee:f9:d0:15:7a:de:2e:
a1:c3:62:bf:e4:d5:81:e7:da:29:ea:c8:28:75:1c:
5b:f1:8e:68:22:c8:1a:cb:d1:9e:f2:47:02:d9:17:
e8:e8:ef:ad:31:4e:84:ea:49:4f:58:95:5f:1d:fb:
a4:8b:f9:59:18:40:9d:fc:2b:6d:88:4e:56:e6:55:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:8D:CC:A9:8C:98:27:4A:CC:7E:5C:07:FC:9B:DE:93:EC:70:65
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:2e:49:1e:14:97:ce:9b:0a:33:82:a4:ab:04:b6:da:48:
cd:30:e7:2c:51:43:7d:94:54:ca:44:33:57:65:c7:36:e6:18:
67:5a:c4:16:8d:28:ff:6d:f6:e8:74:f5:ee:ae:7c:65:d1:74:
f6:a1:75:78:c4:ea:49:8d:ac:3e:f3:f0:8d:43:c1:c1:07:15:
c8:67:86:90:27:b4:0b:2d:64:51:7f:4b:38:a6:9d:ec:a4:91:
85:1b:d1:9f:0e:6d:61:54:15:d8:f0:16:bd:cb:d2:5f:b0:53:
72:ae:33:ca:f0:92:50:ae:17:3c:82:f3:6d:90:ca:29:6a:a1:
3f:f0:ca:d8:79:6a:ed:40:55:48:10:59:99:37:0c:11:6d:93:
32:f0:3e:8f:c8:24:1f:f4:85:8e:aa:ce:6f:30:55:92:01:4b:
85:d4:f2:5f:a5:9c:e5:d3:1f:53:6b:f1:a8:22:94:0c:5b:95:
1b:bd:8f:5b:be:d3:a8:81:bb:1c:28:cc:ef:ae:5a:41:98:57:
ff:65:6b:6d:ea:eb:51:a6:f3:bd:f7:e9:d7:18:a9:ab:ca:c8:
b7:ce:a9:55:0a:9f:22:d7:39:5c:81:a7:a4:45:f5:12:db:f0:
a6:d8:61:0d:52:5a:a4:49:db:4f:a8:d6:a5:95:ea:a9:ef:4f:
b6:10:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:04 2026 by rpki-client