Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: ABcB1nuclsIrorMqmMBv0VQdKbfv/cmmTqzt+c9ab6A=
Subject key identifier: DA:A8:65:87:B4:49:8A:8A:F1:8F:B1:A2:BD:75:C0:55:3F:0F:25:BE
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 019D277260C131E8D289A8FACD67C91C016D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 13B4
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: 3plIdDt1PV+y1e+82DCXCPjioXct/EEXiuv1FVRwoqY=)
2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:60:c1:31:e8:d2:89:a8:fa:cd:67:c9:1c:01:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=daa86587b4498a8af18fb1a2bd75c0553f0f25be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:09:80:ac:89:84:8f:6f:30:6b:75:7e:af:
69:cc:3f:fe:96:b1:a2:dd:39:a5:6d:f9:7e:4d:2d:
e3:7f:21:aa:bb:74:6b:37:45:38:c6:4b:71:a7:ac:
88:44:db:3d:62:87:a9:70:c1:cf:d5:c9:c4:9b:17:
93:13:7a:d4:a1:c6:b8:72:90:2e:37:bc:69:31:bf:
42:97:4c:fc:8e:b7:76:b5:a1:82:84:f7:d5:85:a4:
33:bf:1f:c2:39:dd:4e:18:6a:b6:42:ec:f5:b3:0b:
bf:9c:bb:2c:40:07:a6:e6:dc:b7:b4:98:ae:8b:39:
95:c2:0d:36:ae:7e:6a:b8:86:0f:4e:7f:58:90:02:
7c:21:66:88:ec:75:e8:a9:ea:89:b7:d8:00:84:87:
71:14:a5:ae:42:f5:69:6a:2d:52:ea:81:78:f4:a0:
8f:3e:e0:b7:e0:7e:f3:a9:74:5a:9c:bf:ee:f3:c7:
59:71:58:fc:59:c6:8c:25:da:9e:c5:c6:60:d2:13:
8d:6a:26:73:d2:c7:46:d1:93:7b:30:8e:d6:a7:7e:
a5:21:39:d7:c0:f6:65:73:f8:b8:02:58:14:aa:9c:
c6:85:db:f3:f0:53:5c:77:0a:bc:5a:43:48:a4:5d:
dd:80:dc:0b:f3:09:53:09:a1:56:18:bf:06:42:a3:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:65:87:B4:49:8A:8A:F1:8F:B1:A2:BD:75:C0:55:3F:0F:25:BE
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:74:e4:5b:8f:00:b9:49:e7:2a:c3:5a:61:77:19:0c:51:4f:
ec:f5:10:13:5d:98:22:ed:21:d4:2c:bc:92:74:3d:9f:bb:5a:
f0:4d:dd:41:db:30:35:97:6c:41:2b:49:7f:e6:cb:bb:4b:2f:
7a:2d:09:84:c3:6b:4c:42:30:69:e5:8d:75:a6:27:c8:f2:39:
8e:49:2c:09:3a:80:eb:f1:d6:e0:0b:b9:68:23:91:95:02:03:
22:86:cc:ce:69:3f:e8:e1:6b:e9:54:5d:72:f3:ce:b3:9f:b9:
7b:1e:35:39:ab:c0:4e:31:d9:df:02:fa:03:39:0b:91:22:e5:
e5:50:7e:36:b3:16:cd:b3:13:f5:51:42:47:94:06:69:a2:11:
d0:72:b1:67:d9:f8:e0:41:2c:52:cc:3a:7e:dd:aa:4e:9e:e9:
08:4b:5c:c5:ca:4a:20:54:dc:fa:a9:54:58:43:6f:e9:85:70:
3d:3f:13:d0:51:fc:75:7e:9f:70:0c:49:df:b6:b0:2e:f1:38:
b3:6b:a5:1f:da:38:51:42:64:b8:fd:8c:58:70:56:26:6b:d4:
a7:a6:fb:15:22:d2:16:ca:62:f6:12:db:f6:67:8b:21:bf:96:
9c:45:f9:07:58:d6:20:1f:8e:4f:78:34:50:0c:f0:17:79:ee:
61:23:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:07 2026 by rpki-client