Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: qunYyxKFMeCS6anf3Vgwf3uOApfLTE/TAKhn+rtqdAA=
Subject key identifier: 94:1E:22:CE:62:06:80:46:FE:51:F5:43:11:DF:EE:48:7C:DD:9A:B5
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019D25838611EFCFFA71807AC00FF129FD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0BB5
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: Sg3Ms+SgAqqpPS6z0qICzBBmAUzaPk4wDgiLSSB/Lu8=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:86:11:ef:cf:fa:71:80:7a:c0:0f:f1:29:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=941e22ce62068046fe51f54311dfee487cdd9ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:f4:35:6e:fd:c9:93:96:7c:a6:89:5c:15:
25:93:4b:17:55:83:6c:c8:76:b4:a5:c7:e9:30:cb:
d2:b9:2b:d6:eb:61:fc:4f:bf:dd:9c:9c:5a:4d:d9:
9a:d0:09:31:3b:1c:99:18:a9:17:73:a9:57:cc:44:
6f:84:90:76:e3:8d:e7:67:58:d6:d2:ce:52:54:68:
a7:21:87:f7:28:c5:6c:24:36:60:e6:d4:a7:ca:5c:
06:e0:e2:38:80:2b:c2:9e:84:6f:3d:71:88:62:20:
4b:41:26:58:94:df:c2:c6:62:bf:f8:0f:81:d8:bd:
f2:d4:68:5e:ed:59:f6:ea:88:56:6e:70:ae:26:6a:
c1:83:1e:12:00:95:7a:a0:db:d5:23:29:7b:8a:36:
88:74:a2:a2:99:08:65:b2:96:1e:32:27:c6:c4:6d:
30:e1:97:5e:f2:a1:72:e9:64:71:c1:1c:73:a0:14:
fc:84:2c:39:09:83:e2:00:29:d0:16:7e:35:99:9d:
53:1a:cf:b1:4b:51:5f:13:53:81:d9:37:44:33:32:
f2:ae:c9:96:03:b2:bf:22:58:a3:4b:f7:1d:cd:8c:
88:cd:1b:b2:22:c9:02:36:94:16:11:cf:8c:97:11:
33:33:5e:a4:b3:a0:c9:fb:b3:74:72:82:11:0f:88:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:22:CE:62:06:80:46:FE:51:F5:43:11:DF:EE:48:7C:DD:9A:B5
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:cc:aa:17:51:63:36:61:46:18:d2:6e:14:bd:fe:e1:9c:
64:0c:b9:06:03:ca:d6:48:ce:30:0f:fd:23:ea:8a:53:fe:dd:
aa:f3:15:61:33:0a:cb:23:14:4e:96:b8:9c:c5:c1:20:5d:e8:
b0:86:65:89:c5:ff:9f:ab:a1:a7:5e:1b:71:d2:8a:cd:bc:08:
de:07:71:fb:e4:4e:8f:c9:54:78:cd:c4:38:46:df:4d:71:ad:
98:ba:f5:2e:19:89:18:8f:f4:d2:69:ef:01:6b:5d:c1:94:ab:
1f:67:9e:7b:6a:8e:03:aa:b9:df:26:40:9b:b4:f2:5e:09:0c:
ce:54:23:58:49:f4:97:3a:2f:2f:10:0a:37:79:07:76:e1:c1:
a5:c8:f6:70:92:65:c3:dd:61:cf:5f:48:33:b3:39:c4:cd:be:
78:b2:ae:d6:72:8b:57:44:1b:42:75:5d:34:b7:76:b3:f1:8d:
19:be:86:98:99:29:ec:44:8e:e6:f5:bd:46:7e:0f:56:80:fe:
14:c2:e4:6c:a0:08:85:3f:25:fc:79:63:c0:3b:07:bc:29:37:
a1:eb:99:27:33:dc:6f:0e:0b:83:e1:f7:7f:78:3c:cd:14:c3:
fe:bb:5e:cf:79:ac:e7:b8:09:9b:5a:e7:fd:2c:65:42:0e:61:
21:17:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:31 2026 by rpki-client