Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: aTYcoqFQYuu85kN86FyVwIeZIxnYC+n2qL3aAnlWdoU=
Subject key identifier: 5B:66:22:79:AE:4D:A7:E7:52:CD:90:4C:95:D9:0A:F1:DA:CA:00:ED
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019D2A72C731B3EE5907221BF16836B2F090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0869
Signing time: Thu 26 Mar 2026 14:00:58 +0000
Manifest this update: Thu 26 Mar 2026 14:00:58 +0000
Manifest next update: Fri 27 Mar 2026 14:00:58 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: ETSQ9Pz+OGyS1XvgNoRG8P3uQGkht/aMrY5YVH2P3cg=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c7:31:b3:ee:59:07:22:1b:f1:68:36:b2:f0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Mar 26 14:00:58 2026 GMT
Not After : Mar 27 14:00:58 2026 GMT
Subject: CN=5b662279ae4da7e752cd904c95d90af1daca00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:69:13:cf:ef:ce:51:a1:5d:74:45:b1:96:
d9:c7:f7:c3:ee:a1:08:1a:00:64:56:2a:41:7b:00:
cd:fb:a4:9e:c4:8a:54:15:23:f5:ec:90:22:c3:76:
f8:14:06:ca:e6:13:54:65:d4:86:dc:7a:37:e8:d3:
20:c6:03:57:94:15:e3:5c:aa:5e:81:37:08:f1:8f:
f5:ae:14:59:03:e3:de:a1:0c:6b:6f:b0:de:59:fd:
37:43:7d:47:a8:df:2a:a2:83:e0:e0:f0:da:57:8d:
13:b9:ac:13:7d:5a:da:37:89:31:1a:f9:90:4a:94:
f4:83:c7:e8:3a:c2:52:a6:e2:c8:8b:ac:23:53:ec:
3b:db:5e:db:83:34:4b:f7:db:9a:61:e7:0d:79:2f:
6f:70:b9:06:29:9b:f7:f9:ea:ea:e6:b8:7e:21:18:
9e:3b:86:0c:27:a9:da:e5:73:03:9a:94:aa:a0:33:
cc:ad:93:6b:de:15:0a:5e:82:c9:9b:d7:e6:e4:0c:
d0:e3:c8:75:ce:5d:7a:a8:ab:52:ff:82:f8:28:eb:
10:e3:59:3e:40:1f:60:21:f1:db:3c:93:50:eb:09:
d7:a3:ec:75:42:02:fd:3a:fb:cd:fe:42:92:a0:69:
d6:4c:f0:da:e4:92:97:84:fc:ca:e7:bb:6b:1b:59:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:22:79:AE:4D:A7:E7:52:CD:90:4C:95:D9:0A:F1:DA:CA:00:ED
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8d:38:aa:cc:fe:6b:34:0e:a2:b0:c9:44:2c:26:d3:e0:9a:
15:64:e5:63:61:63:42:28:f0:26:7e:34:03:e8:de:f9:eb:3d:
d7:9e:2a:63:88:d0:ab:a0:48:b6:08:61:60:d5:d4:6d:74:71:
d9:43:06:78:d0:fe:5b:ed:db:a9:50:2e:c8:ce:08:90:4a:df:
d1:69:48:9d:27:45:f8:90:94:93:26:3f:13:96:00:4b:34:a0:
89:00:ca:53:a4:af:b8:d7:32:2b:f4:4f:35:e0:64:e2:5b:6e:
29:72:b2:2d:a3:8d:11:e7:04:6f:5f:53:11:fd:9d:78:34:83:
cd:37:aa:a1:db:e9:c5:c4:57:7e:31:4c:9c:d5:77:db:c2:92:
60:da:c4:f6:e9:aa:3b:fa:d2:fb:e5:f6:fb:23:d4:86:7e:44:
9f:f3:55:bd:71:50:31:63:52:c4:cd:9d:94:94:2f:75:cf:11:
3b:05:39:ba:5c:1d:3e:3e:f4:24:8f:35:6e:4c:df:76:ae:3b:
44:12:c1:8c:60:c5:15:ca:20:e2:32:79:64:0d:58:57:f5:6e:
cf:fe:8b:aa:ba:4e:0b:92:2c:54:ae:9e:75:8b:85:fc:c2:4c:
fa:cb:be:bf:73:87:18:b1:f4:c1:34:20:6c:63:de:da:7d:93:
53:53:c6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:50:59 2026 by rpki-client