Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: o2S1kPfJG0I1EULOGe61UsXEYb/4UhWH1aBbmAoh3ZA=
Subject key identifier: 15:14:F7:14:6E:B4:C3:69:87:C2:23:2F:3F:ED:2A:65:35:AB:99:BD
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019D29CED6E7D57B970EC8DD53C6F23680C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0AD6
Signing time: Thu 26 Mar 2026 11:01:54 +0000
Manifest this update: Thu 26 Mar 2026 11:01:54 +0000
Manifest next update: Fri 27 Mar 2026 11:01:54 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: bEzuw/rBnJxe8aFV1sGnIoWUNgnt6nug1PV0nUOghcA=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d6:e7:d5:7b:97:0e:c8:dd:53:c6:f2:36:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Mar 26 11:01:54 2026 GMT
Not After : Mar 27 11:01:54 2026 GMT
Subject: CN=1514f7146eb4c36987c2232f3fed2a6535ab99bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:56:14:13:f2:9b:74:af:f4:4a:53:3d:de:
36:c4:ca:b6:f3:e0:2d:9c:a7:65:c1:0c:82:dc:3e:
69:b3:32:af:6a:d2:af:19:8b:9c:b3:af:aa:44:fe:
d4:86:af:e5:85:57:ec:5e:84:59:8c:86:19:e5:35:
ba:57:d5:38:c0:f1:a3:04:47:ce:a0:73:68:50:f0:
11:bd:f3:e3:5e:dd:5f:36:6b:26:f3:eb:ab:ab:ae:
22:55:e5:1c:b3:9e:e1:a4:03:3d:b3:4e:6c:00:51:
56:f4:53:4b:d7:56:fe:e0:bb:73:48:0d:62:bf:70:
76:42:42:43:f1:87:1c:fd:cd:c4:c9:2a:4e:54:c2:
99:0e:af:81:35:ec:34:e3:d3:ab:93:b1:fa:7a:3e:
47:fa:4b:81:b0:54:15:1d:3c:a3:98:78:54:dd:b2:
4f:28:2c:21:37:f7:cf:d8:7c:f2:b4:44:92:8a:97:
d4:66:0a:5f:2d:5c:bc:02:d7:24:95:e1:da:5a:1c:
50:85:b9:64:b7:0d:d7:6e:15:e3:39:fe:52:66:78:
10:62:c9:b0:a1:39:c4:41:53:8e:14:14:6a:8a:26:
85:f5:34:88:0c:e8:20:aa:fb:fd:c8:7f:05:a2:2e:
5a:79:b0:06:db:bb:d2:2e:44:98:15:e7:26:39:b5:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:14:F7:14:6E:B4:C3:69:87:C2:23:2F:3F:ED:2A:65:35:AB:99:BD
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ed:44:70:6a:fe:7d:49:2b:b0:c2:80:c9:49:d6:c0:9d:4b:
e3:cb:09:5c:ec:76:2a:48:60:69:27:f1:d3:95:6f:88:ed:77:
73:12:22:52:06:30:c8:58:9f:03:6f:29:7c:b1:2d:cb:b1:90:
5a:91:10:9f:eb:80:31:74:fe:68:68:9a:da:f8:79:8a:d8:5c:
ec:23:07:ac:b7:18:a9:c1:1b:80:43:a9:3a:24:03:0c:f2:46:
a5:b1:66:6e:59:a8:cb:ae:03:68:49:64:f5:af:cb:1f:77:59:
43:ff:85:f5:46:db:56:63:ba:d1:e3:7b:59:51:83:f3:5a:bb:
60:f2:29:85:b6:5a:a1:61:58:69:60:11:d4:29:97:ce:7f:e8:
46:39:ce:fd:9d:4e:f9:fc:c9:c8:1b:0d:6d:56:f9:83:bc:27:
5a:c6:c0:fc:0f:4b:2f:13:ba:fa:70:de:f4:04:a2:36:a2:1d:
f3:71:ec:35:44:df:d9:cc:05:9b:e7:12:d1:2c:eb:b5:5a:93:
70:e9:3e:0b:3a:62:1b:1b:fc:94:1e:c9:b8:53:93:08:59:8a:
8d:c0:58:63:97:76:13:9a:8c:b5:f2:52:94:03:ed:d9:9b:9f:
5b:47:c7:f1:3c:46:2b:f3:3e:85:e3:88:29:04:72:fd:71:b9:
91:d7:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:16 2026 by rpki-client