Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: O13h1rg06qkePSxdY2Jq0f5alzbQl6jHubPNZYObEYA=
Subject key identifier: 04:FE:93:F9:CF:71:80:2E:94:5C:0B:08:1B:4B:11:5C:97:AE:4C:0D
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019D2884807CECDA48090D42A57586C3FAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0ACF
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: U6Swfn2bxbwRBAyiiZXZoyy8Udg/53ivjvbHdbj7SYg=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: iM_ZBvtG32QBlHfVIn2ttPitF3A.roa (hash: n0U6ZQ9IjEu52Acx8IHWzTTmN0Tm9iyKYJwGHBgAhus=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:80:7c:ec:da:48:09:0d:42:a5:75:86:c3:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=04fe93f9cf71802e945c0b081b4b115c97ae4c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:7f:f5:fd:7b:f4:1e:c7:63:53:b1:b8:32:
1a:22:0e:e7:6d:ce:e7:54:80:b7:96:f2:7b:4d:ab:
80:ef:d3:73:ff:5f:14:f3:2c:30:70:05:ea:25:2b:
f1:8c:9a:4b:35:8f:e1:96:a6:96:68:8f:cd:c2:e1:
82:c9:06:da:90:e0:c9:17:85:00:8e:c0:98:4e:17:
44:8d:e6:1d:c2:25:3a:3a:1f:77:4c:78:22:80:00:
ce:77:90:fd:33:3e:37:f4:c5:66:17:71:cf:50:49:
5f:59:d0:29:44:cb:d3:6a:92:23:b0:98:55:68:6c:
e2:29:e9:1f:b1:2c:cd:f1:67:fe:da:f9:5a:83:d2:
5b:da:a8:f2:49:a0:45:45:36:44:76:79:4c:b5:b5:
1d:51:ea:b7:9e:7a:43:2f:d4:02:95:f4:69:21:b1:
01:91:bb:ef:85:be:3c:27:f0:38:91:6d:d8:25:a1:
cb:a8:d0:8c:8b:6c:e8:bd:66:8e:29:7b:d4:65:ea:
68:88:8e:cc:e0:df:3b:ca:ce:4d:79:d5:75:17:63:
ce:30:df:5b:62:33:4a:b9:b9:2a:47:25:4e:1b:43:
04:5c:47:84:d4:f6:f9:e5:4a:21:b4:03:1c:cc:e1:
75:69:ba:cc:a8:a0:17:e4:69:ed:4b:22:4c:16:1d:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:93:F9:CF:71:80:2E:94:5C:0B:08:1B:4B:11:5C:97:AE:4C:0D
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:f1:59:ee:00:8f:75:99:02:dc:b6:2b:a2:c6:55:4f:d9:
5c:e4:d4:65:71:28:38:2b:f8:75:b0:45:30:5f:79:e1:4a:7e:
db:51:2e:eb:ef:16:e5:2b:0c:c5:c6:ce:8e:ba:8a:48:97:8b:
3e:94:45:2b:b8:91:1d:2a:c9:d8:37:2e:bc:69:16:bc:6e:05:
14:c2:60:36:db:19:04:6b:97:f7:25:72:57:59:76:4d:13:ad:
80:9b:e2:d8:34:53:a1:fe:d0:53:fb:42:36:44:53:14:6d:2a:
a2:a7:c1:b8:00:92:c0:a7:4f:3f:b7:71:66:20:c8:d5:bf:b3:
b3:7f:68:e0:06:61:c7:b6:3e:f1:ce:c5:f2:6e:d6:d6:37:fc:
91:14:2e:33:ac:82:e5:6e:6e:0d:70:98:44:d9:79:77:d8:be:
e5:02:a4:cc:14:43:8c:1d:ea:48:57:08:ea:2e:09:3d:f8:93:
ae:38:39:e1:65:57:16:88:5b:0d:ce:93:88:85:0b:c7:3e:0f:
10:83:be:a1:35:e5:40:f3:22:46:d1:75:7b:e1:cc:d7:7a:f7:
34:7c:12:a2:7b:c8:07:da:79:ca:4c:bb:3d:69:2d:00:47:2a:
5d:28:13:13:d4:93:6a:79:45:bf:bb:9d:5e:c7:8a:75:56:e5:
8c:b2:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:16 2026 by rpki-client