Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: uWFJGLRR4An+A+NJq/bLyGkkrhjJbQ/XjA3/c1qd5Ks=
Subject key identifier: FA:E4:E2:03:C6:C1:3C:FC:D2:CB:2C:67:8B:28:97:63:2D:E8:EE:9D
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019D273B0533FB83913C9620EA381979AC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1528
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: ndw1YZ7RuSixDSK0xElR4Q5ehaV/eaMN+zp3+EnDuaA=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:05:33:fb:83:91:3c:96:20:ea:38:19:79:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=fae4e203c6c13cfcd2cb2c678b2897632de8ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:bf:d5:39:24:c2:c3:bf:7c:a6:bc:bc:ad:
94:27:b8:a6:01:d9:d9:9c:18:33:31:1f:0d:a5:d9:
9c:0f:ae:6e:4e:5b:83:86:b7:a9:ff:34:03:cc:34:
f5:f1:b4:2d:95:d1:c2:03:06:0d:56:7a:28:d2:6c:
c0:36:2e:72:a7:32:a4:43:dc:4a:63:53:90:10:f0:
fa:7a:6a:88:70:2a:8e:e1:9e:0b:b3:db:96:38:14:
78:53:0f:7e:db:19:f1:0b:55:38:37:de:ba:ec:cb:
8d:82:7e:3d:c3:ae:df:28:fb:d6:dd:f4:2c:01:05:
dc:32:ce:37:7d:14:25:bd:97:3b:64:43:78:ce:62:
08:e6:21:23:9d:ba:92:ae:9d:e2:3a:f6:f1:ea:74:
6e:57:97:39:f8:5b:b3:48:a9:c4:17:d2:5d:2a:0a:
14:01:ff:49:89:c4:4b:f5:62:73:d9:51:d3:ec:c1:
5b:50:30:59:41:b8:f2:e1:8b:82:fe:4c:83:0a:9b:
20:1c:3a:d0:71:72:1d:b1:1a:f2:d4:da:a6:bb:53:
03:88:08:9a:45:3e:fd:5d:84:bf:cd:64:9a:31:68:
3a:19:2d:44:82:3a:60:53:eb:2a:a0:f0:9b:b4:c7:
46:95:b5:ff:2c:25:28:01:01:9a:25:07:28:14:61:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:E2:03:C6:C1:3C:FC:D2:CB:2C:67:8B:28:97:63:2D:E8:EE:9D
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:45:6f:0a:0f:07:88:d4:c5:b7:54:f6:07:63:2e:84:6d:c9:
2e:20:fc:a0:51:e8:fb:ab:92:f3:51:ef:7e:8f:f0:70:31:a8:
c5:3c:a0:c9:26:8b:32:d2:f0:8c:ff:ae:bc:40:fe:84:f7:d4:
c1:1d:d0:aa:81:3f:e1:9e:b5:c6:08:9c:fa:4a:4a:10:ca:e7:
74:26:56:a6:ff:59:1d:b0:64:74:8c:23:3c:6f:75:c3:82:56:
64:d1:d2:ab:f1:5d:aa:b4:9c:e9:59:47:b7:2d:bb:5b:5b:d6:
ba:20:b6:4b:67:45:19:0b:98:95:f5:22:eb:fe:67:94:39:e5:
57:ee:cc:c7:80:cc:15:f2:c6:53:3b:79:21:1f:99:9c:e1:b3:
d7:0c:91:be:48:ce:bb:ee:ef:77:81:0b:97:29:77:13:a7:e9:
72:23:82:60:67:23:ae:0f:1f:1a:0b:f8:e4:5a:1f:6b:4c:79:
fe:b2:c9:b0:3c:c2:05:32:52:9a:70:dc:55:af:d7:20:28:a3:
a7:e2:90:6a:62:b6:4b:06:11:be:05:b3:74:87:c7:b9:af:0e:
87:c1:47:90:3e:b8:35:c7:60:b0:dd:04:b5:00:48:fa:d5:73:
7d:62:47:8a:c7:1e:8a:6b:5f:bd:db:0e:1e:ba:1e:84:98:08:
66:5c:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:12 2026 by rpki-client