Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: h5aG5N5WefELbTsj+tHh5joIbinQvUfw0mmdzaCa+lY=
Subject key identifier: 1A:A3:99:43:E1:D2:3E:E4:FE:39:A4:D9:C7:28:67:36:B0:60:15:BC
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 019D29CE7F2FD894C38A1A42C2AF2D1CB9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 08E2
Signing time: Thu 26 Mar 2026 11:01:31 +0000
Manifest this update: Thu 26 Mar 2026 11:01:31 +0000
Manifest next update: Fri 27 Mar 2026 11:01:31 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: Sjwv+WG6SbLRl5pEITG1m8fuhhNtix5MU+MBS+dviTA=)
2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:7f:2f:d8:94:c3:8a:1a:42:c2:af:2d:1c:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Mar 26 11:01:31 2026 GMT
Not After : Mar 27 11:01:31 2026 GMT
Subject: CN=1aa39943e1d23ee4fe39a4d9c7286736b06015bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:4c:d8:88:c7:d9:9e:01:32:8a:a9:5c:05:
2e:ec:1b:d7:01:41:34:32:16:c0:4b:12:8f:b8:04:
d1:23:0e:4f:ae:37:28:af:ea:83:ef:cf:95:5b:80:
22:78:f4:28:f7:0e:70:fb:1f:82:00:46:6b:7f:29:
a0:12:06:38:fe:b6:f0:10:5b:36:e3:62:4e:d3:02:
17:0a:2b:72:96:c5:a7:e7:fa:36:3a:6f:72:f0:67:
e6:74:34:30:73:9b:29:c2:a4:79:15:75:ae:95:dc:
1c:bf:37:15:c3:b9:f2:3c:cf:78:20:92:46:d1:ff:
5a:4b:a8:cd:67:0d:63:a5:16:55:89:a4:fa:b1:fb:
5f:a5:6b:35:79:9e:cd:bb:a4:e4:f4:a6:43:71:df:
31:99:21:bd:35:65:8b:cf:25:fa:cc:4f:99:26:8e:
df:d1:64:49:46:b1:04:f8:3d:49:d3:55:31:3f:08:
fd:70:3f:2f:6e:3d:98:f6:f4:6c:a9:3c:a3:e0:8e:
1b:f1:24:86:a5:31:e4:a4:6a:04:3c:93:bb:2d:b2:
ac:45:79:95:dc:2c:cd:34:77:62:38:a0:2a:d5:12:
1d:36:d8:65:14:91:45:67:35:cb:89:19:a2:dd:3c:
7d:fa:74:f8:75:95:f4:3a:58:d5:4d:10:0b:02:dd:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:99:43:E1:D2:3E:E4:FE:39:A4:D9:C7:28:67:36:B0:60:15:BC
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:ae:81:4d:79:50:f5:73:e6:14:13:58:b8:0a:3e:b7:3d:
db:cf:ed:57:8a:c0:c9:f1:71:16:bc:1b:8b:12:c4:bf:cc:df:
d5:e7:82:67:32:b7:b5:d6:31:e1:0b:3a:c8:52:af:1a:5d:f8:
fc:60:18:36:bb:d8:c8:31:05:3f:87:82:0b:79:fd:61:f8:de:
43:cb:b1:ea:9e:26:59:51:f8:74:32:ab:00:9a:41:3e:18:1d:
46:1c:3f:b3:d2:1f:1e:5f:45:5f:77:88:74:24:0e:cd:45:bd:
6a:10:fd:07:45:a2:7e:18:8a:ff:ed:4a:74:02:43:c3:b7:a1:
28:2b:ff:a2:7a:3d:2a:e4:ef:5a:bd:9a:25:f3:a8:6b:ac:39:
a4:f0:cc:da:cf:11:3c:94:10:fc:53:43:4b:88:ef:11:f3:15:
1c:99:7a:03:ed:3c:5e:2a:7e:47:c7:ba:66:07:56:1c:9b:e1:
af:f6:93:3e:d2:ed:7d:1b:23:e5:70:15:d7:cf:d0:c7:8d:fa:
ae:ac:53:5f:5a:45:a6:30:e4:2c:0b:42:4a:9a:03:fc:30:95:
d3:2f:2e:c7:8c:d9:ff:fa:97:77:64:29:48:1e:74:f2:ab:87:
1e:3a:00:a4:f6:e9:66:ac:9e:cd:2b:02:65:44:b8:d3:6e:ae:
09:45:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:37 2026 by rpki-client