Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: mnqnBmzFec+gKGsFneKl9lh06m75fmbu7zE22WdaC6Q=
Subject key identifier: 66:D0:A7:E8:A7:61:D2:4D:E9:FE:19:2E:38:07:3E:1B:51:27:B8:70
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019D26CCEC04F7F1FE7E81972CB3278165F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: y14NW0N2qRHFnZLbjKr0lgJTpnErw4DyJFnaybDjfEs=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ec:04:f7:f1:fe:7e:81:97:2c:b3:27:81:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=66d0a7e8a761d24de9fe192e38073e1b5127b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:f2:b0:38:a4:04:de:ab:62:28:14:b2:d4:
c5:58:5a:42:e0:fb:19:d1:c6:a4:c0:a1:bb:ef:9d:
45:3c:44:8e:eb:1b:e0:9a:d7:84:b7:c3:7f:ce:75:
e6:70:fa:10:58:0d:ea:6a:2f:d7:0f:ae:3c:74:3a:
fd:50:51:f8:c4:0c:5f:91:61:2a:9a:bc:40:42:ca:
db:ea:d9:de:57:fb:89:30:d3:ea:23:22:fb:31:6d:
03:9d:b7:b5:0b:82:fd:7b:6b:e7:97:47:8a:d9:7b:
0c:b3:2c:26:c8:d5:30:67:fa:95:9d:52:39:32:f7:
42:6c:32:7a:61:78:e0:f8:0b:c3:39:4d:e7:b0:fa:
66:12:6f:29:c0:3c:81:6d:81:f8:03:0a:86:ae:5b:
42:88:eb:84:29:78:21:cd:75:6e:7a:1a:7c:8c:cf:
d6:d6:db:c0:50:c2:d2:95:f6:f6:5c:b3:3f:39:7f:
ee:7e:9f:da:84:71:e5:93:c8:57:5b:e0:28:44:c5:
0e:87:01:10:e2:17:4b:64:1e:57:75:1b:fd:9b:7b:
94:00:f7:c8:17:bf:f0:5f:8b:dc:2a:7c:1d:d5:19:
c3:27:29:b2:d7:74:5b:93:6d:1f:9d:30:1a:76:34:
1b:3e:8b:98:cf:dc:51:33:f3:d5:b3:fc:52:c5:bf:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:A7:E8:A7:61:D2:4D:E9:FE:19:2E:38:07:3E:1B:51:27:B8:70
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:b5:b7:73:9f:9f:5f:0e:45:86:d8:a6:5c:ee:b6:c1:4b:
54:79:ff:3c:83:36:c1:0a:8a:fb:28:24:62:8c:be:72:f4:54:
e0:06:04:c9:d8:fb:71:c9:cf:47:7c:7d:7e:88:50:92:61:85:
ac:aa:7c:44:4c:38:5a:51:27:04:c8:7c:6f:3d:70:a4:42:27:
f3:5e:ef:7b:52:4e:57:7b:30:89:71:ad:f4:d6:5e:2c:76:35:
bc:ea:1b:ce:46:a3:d6:00:c6:77:29:78:97:09:26:6f:df:ef:
01:ea:85:f4:a5:df:86:d0:8c:89:3f:8d:d3:dd:2e:ac:3e:5c:
40:86:f8:76:9b:f2:bf:eb:ba:2d:2c:99:a2:50:94:c4:71:3c:
a3:8c:d0:08:f1:c1:2a:94:c4:81:e9:98:f7:aa:72:91:38:79:
45:b3:ae:7f:ab:c0:4d:b6:4d:de:d0:94:4d:a9:20:ec:2f:b1:
c6:14:0f:47:c2:62:c1:63:69:f5:76:11:92:dc:74:d9:50:fb:
0c:08:99:13:5a:dc:7e:d8:e7:8f:70:5e:75:a9:ae:9d:e8:02:
37:de:51:40:88:ac:af:06:ac:46:e8:72:7a:04:2c:59:a6:9f:
3e:be:ec:46:97:b8:8f:8e:e2:49:95:ac:78:d0:86:f7:de:01:
4f:6a:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:10 2026 by rpki-client