Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: Qv8orwiEtk8RoAjRwWkRdakRF83hZuFFQYggzdEQviQ=
Subject key identifier: E7:C6:1C:F9:83:2E:9E:DD:42:CE:6B:6E:DB:1C:D3:37:84:99:EC:6E
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019D29CE36124B42F21E5E719C0AEF27806D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: +rvKMOceh9NFDGOKVTWsnfWIGRgnWr2Z47t+4/0Z8ls=)
2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:36:12:4b:42:f2:1e:5e:71:9c:0a:ef:27:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=e7c61cf9832e9edd42ce6b6edb1cd3378499ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:e7:34:82:56:3c:39:b3:f4:52:fb:ed:85:
36:83:f7:7e:ea:9d:ed:0a:41:32:8f:ef:32:ff:11:
87:82:43:42:c5:9a:47:35:05:32:19:8e:01:2d:30:
b8:2e:cf:9b:27:6c:3e:e0:ee:8a:78:a1:6b:d9:72:
49:e7:9a:54:4c:bc:19:25:f8:dd:19:40:86:f9:08:
f8:b6:b7:82:0a:fc:c8:f6:db:cd:91:06:21:a3:bb:
aa:f0:cd:83:fd:73:47:e8:6e:7e:10:41:8b:8f:4f:
f7:04:62:41:f3:0a:d1:9d:34:5a:03:1c:62:24:4a:
cd:47:12:3e:8e:49:be:41:b9:54:ee:da:be:d2:d5:
55:d2:b8:ce:68:b9:ab:0a:b1:5d:c2:67:80:ae:1e:
2b:6d:35:ce:35:38:88:45:58:72:49:b7:34:4c:03:
39:c2:2e:cd:00:a7:b2:63:f4:e8:f2:9a:e1:64:e9:
bb:b5:db:ba:51:4c:0b:f5:6d:1f:6c:e1:45:05:bf:
82:47:2d:43:d3:33:65:92:e9:fb:c6:96:f9:bf:7b:
fd:af:da:34:d4:98:15:3f:84:2e:20:df:27:d3:22:
e3:8c:99:9b:9e:c3:c5:c6:69:04:36:5a:ae:69:20:
36:3e:86:bb:0d:42:59:19:5a:9e:e8:1b:fa:cd:2a:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C6:1C:F9:83:2E:9E:DD:42:CE:6B:6E:DB:1C:D3:37:84:99:EC:6E
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:88:24:13:90:e7:12:50:01:dd:71:88:d5:b4:e4:1d:b6:bd:
dc:f7:87:05:10:9e:25:19:af:46:2e:20:ea:b0:23:27:a2:d3:
a2:18:c4:83:3d:11:3e:62:6e:46:10:7c:c5:7c:30:ad:76:fa:
9d:fa:73:f6:7a:32:ac:ce:6e:f8:4c:54:27:1c:85:f0:19:1f:
18:dd:8c:fc:28:a4:39:e1:4f:9b:20:0b:6c:9f:7f:2c:88:71:
e4:0f:34:7d:37:6e:22:0e:27:ff:98:a8:eb:0b:c2:bd:59:5d:
c1:7a:81:b5:b6:4e:8e:34:b0:03:2c:f8:82:77:15:0e:5c:15:
0a:62:94:53:8d:cc:dc:ea:a1:30:8e:c8:41:cb:75:b3:81:3d:
db:fd:16:d2:2e:1d:51:8b:d1:09:ba:a7:3e:26:54:02:2c:37:
d7:2b:f6:e0:52:f4:7e:fa:68:4c:d6:f3:a0:02:b6:e4:bc:33:
8e:97:1d:8b:c4:4b:36:7e:94:10:8d:81:60:30:95:ad:65:88:
0e:95:27:e8:12:41:42:a8:02:ca:d4:ca:8c:dc:24:7e:cf:5e:
39:3a:04:5c:38:19:3a:f4:aa:c6:a2:64:d2:a8:2e:dc:da:5a:
16:2c:a2:c3:4d:47:8c:ca:cb:c6:04:08:b6:7a:35:64:c8:37:
83:b5:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:15 2026 by rpki-client