Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: CXT28S8H3TxPSybORaxGBmq4Bm4kOVJKBRI/bggztr8=
Subject key identifier: 1B:2E:38:9A:30:8E:B1:A6:AC:7F:98:80:C0:36:AA:68:5B:E0:49:2C
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 019D284D31BC26928702D426094C497EA09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 01CD
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: SAL1yq0reJMCwFimnCrvD9pGSt4FC3+P/8aKjYw4LP0=)
2: 2798bsS-ftRBFC8OmYwDYZazwYQ.roa (hash: YEsqHt1g8/MDYthWrn0j31l+d4G+HJ7yjiXjTwZ5WJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:31:bc:26:92:87:02:d4:26:09:4c:49:7e:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=1b2e389a308eb1a6ac7f9880c036aa685be0492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:40:c8:7e:f2:c3:cb:a4:54:17:c4:56:35:
11:57:78:d8:f2:f3:aa:8d:e6:e1:7d:9b:8e:af:78:
28:4d:38:c8:ed:2b:54:3c:15:e3:33:64:a4:0a:85:
00:97:38:ae:31:2c:be:26:03:2b:f6:3f:86:5b:1a:
bf:05:85:a8:0d:36:60:f9:d1:24:11:82:30:69:82:
50:f9:c0:27:a3:35:54:1b:b3:0a:c0:3e:6b:3c:86:
c9:a4:59:6a:c1:6c:b5:c6:71:28:45:e2:00:f3:37:
71:11:aa:93:3e:9e:3c:08:d5:06:f1:84:02:3d:09:
33:34:fe:05:2a:d6:da:e9:b3:fb:1f:af:54:67:d5:
81:37:b7:6c:25:7c:18:0b:80:15:c1:60:1c:fd:d3:
a4:d4:83:0f:63:20:a5:69:30:2c:8c:c7:bf:c5:b9:
7d:93:60:a5:47:8a:1f:e4:6f:3c:b6:dd:6f:ef:83:
fb:10:01:64:c3:c8:1d:a6:d7:b6:5d:c6:5b:c5:ff:
d8:b1:ed:0d:24:17:29:68:5e:cb:5f:d1:a2:57:99:
53:1d:55:6a:f1:6e:06:ea:3e:20:59:dd:93:d8:f1:
83:79:9c:3a:c1:c7:8b:8e:28:c2:66:cb:ff:3f:9c:
99:7e:62:ed:f5:e3:f1:42:cf:a8:89:12:a1:bf:ac:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:38:9A:30:8E:B1:A6:AC:7F:98:80:C0:36:AA:68:5B:E0:49:2C
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:8a:b2:8a:04:4c:e7:44:7e:27:85:e5:71:1f:ac:ae:80:
e4:d7:b6:7c:1e:b9:f9:27:df:f2:c4:7c:af:d6:c1:49:31:16:
d0:56:4d:42:b3:22:95:b0:65:8a:43:f9:c3:fc:29:62:fd:06:
4e:06:02:9c:0f:ed:4f:78:68:db:67:69:38:cf:5c:a8:bd:8a:
c4:84:17:43:a7:d7:6e:ec:08:c4:a3:4a:e4:4e:81:fc:05:86:
72:b3:a7:76:be:4d:bc:8a:8e:8d:7f:5d:5b:16:d2:f1:0a:39:
5a:59:71:8e:1e:4c:f3:16:d0:69:2a:83:0d:4c:78:e4:3f:74:
fc:ed:bb:03:10:1c:50:07:de:15:00:04:70:d3:c9:73:92:9e:
3d:d4:8c:a7:fe:ba:17:68:ae:71:79:c0:52:13:24:53:5d:03:
e2:d8:f2:56:d8:7b:12:2b:16:38:4f:8f:90:33:85:9f:5e:c8:
77:94:49:71:36:ac:8a:ad:a1:8e:fa:91:37:aa:d6:e8:95:02:
ce:96:3c:a8:1e:90:3e:2d:4d:ce:d8:75:4f:e6:66:28:be:3a:
f5:73:7d:a3:c1:a9:ac:29:1a:34:4d:a6:80:b6:4a:1b:4a:31:
a7:53:cb:26:13:2f:48:a2:50:a7:97:25:b2:8c:11:23:9e:e5:
d3:46:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:58 2026 by rpki-client