Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: VrnlIwp2jx6uWrrF6eqrUmMFxsAEL49nBjbRMaTCiFc=
Subject key identifier: 7D:D1:E4:4A:41:84:45:A7:F8:2D:43:AB:6D:D5:45:8A:78:7C:E1:17
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019D2A7243143D91DC744084B60488B4A063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:24 +0000
Manifest this update: Thu 26 Mar 2026 14:00:24 +0000
Manifest next update: Fri 27 Mar 2026 14:00:24 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: j9gEToTB2MW+BC/tvDhKIa8asGNJBDfcgh6YKchUO1Y=)
2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:43:14:3d:91:dc:74:40:84:b6:04:88:b4:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Mar 26 14:00:24 2026 GMT
Not After : Mar 27 14:00:24 2026 GMT
Subject: CN=7dd1e44a418445a7f82d43ab6dd5458a787ce117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:1d:67:fa:77:34:91:df:63:e5:ad:66:0d:
40:b7:88:db:4c:95:ca:d9:48:85:f7:68:0e:6c:5d:
24:57:66:8c:92:ea:99:3f:8a:4d:e4:3f:66:27:4f:
f7:a0:1f:ff:32:49:ca:de:57:6f:fc:4b:30:2f:0b:
c0:e1:b1:16:ba:1d:e5:21:d2:47:c3:f0:60:17:d7:
8d:aa:80:83:dc:95:02:82:3d:f3:ae:d2:52:06:d6:
e9:ec:99:33:f9:11:08:a8:fb:76:8a:f7:6e:80:ca:
9d:d4:d8:26:83:ee:9c:10:ab:6a:9b:51:84:6c:33:
33:c2:47:8b:cc:2b:fa:57:c2:59:88:ee:75:a3:f1:
6d:20:4c:d4:a6:7f:c0:e9:d8:b3:35:1f:ec:7d:cd:
3d:43:cb:0b:d1:5b:b6:2b:de:a6:24:a0:d4:2a:44:
b9:99:7a:43:83:09:9b:07:d9:64:b8:62:c5:0e:8f:
9a:1e:c8:07:f3:81:26:d9:5f:2b:6e:f8:9a:ea:ac:
f1:3b:7f:1f:b1:73:93:ee:24:fc:72:0d:47:20:24:
82:e9:4f:d9:97:1d:81:1a:7d:8c:c2:73:6b:c1:fd:
c1:46:81:62:d9:e3:84:b4:e8:62:e2:04:9f:a7:56:
d7:1b:35:ab:83:24:40:38:c0:2f:7f:3d:71:56:a7:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:E4:4A:41:84:45:A7:F8:2D:43:AB:6D:D5:45:8A:78:7C:E1:17
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:64:e4:c5:50:7b:dd:31:eb:50:5f:6e:8d:0c:db:64:d9:
78:4b:25:ca:6e:75:d0:63:93:13:f7:34:66:90:8a:96:ad:1c:
ac:98:ef:f3:33:d4:c3:11:30:ac:6c:98:f7:22:11:b6:70:32:
52:f6:67:fb:a0:d6:99:60:eb:b1:28:16:75:a7:54:7c:b4:dc:
9f:cd:89:92:99:09:e0:9c:03:09:b3:03:05:44:eb:d6:bb:e8:
e4:bd:e3:5f:bc:e5:b4:df:d3:c8:65:56:75:78:6b:ad:5a:d3:
3e:1e:30:7e:d6:25:76:06:5c:89:96:68:3d:25:f7:0a:cf:cb:
35:44:21:f4:c1:16:21:a4:c3:c0:61:23:35:c0:26:c0:c5:0a:
d1:c8:bc:76:3b:c3:9e:69:79:81:7b:e0:98:62:4b:b3:8a:a1:
4e:af:94:34:f6:67:ef:a9:24:57:c5:80:6f:c5:ba:49:d7:bc:
7b:8a:0a:d3:a9:68:80:ef:9a:5c:0d:c3:6a:81:9d:f2:a9:1f:
f8:f0:7e:60:5c:26:ed:5f:79:1d:3e:57:cb:f2:23:7c:b3:ac:
96:c5:1e:31:c0:a4:27:6a:71:14:c8:65:63:83:5d:7d:a1:47:
a0:c5:4a:ee:1f:7d:1d:3a:1a:76:d3:ff:d7:43:37:87:63:6c:
32:1d:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:40 2026 by rpki-client