Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier: fXmDL27xj3/0r4pU/qAYoAQMFa9JPW3xuAbz62dTUzk=
Subject key identifier: 09:28:00:AA:74:8D:99:31:21:A7:47:49:53:FF:65:A8:48:14:6A:DE
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer: /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial: 019D3375B0F057ED53EFCA29A33634FC8549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number: 056D
Signing time: Sat 28 Mar 2026 08:00:44 +0000
Manifest this update: Sat 28 Mar 2026 08:00:44 +0000
Manifest next update: Sun 29 Mar 2026 08:00:44 +0000
Files and hashes: 1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: EB/2fcyN1Dw/FIhDsgqhfvmALKkvWddmdluPSsBoPww=)
2: 2KBWkcPFqkYA0kPvVy34YeHDaAc.roa (hash: TZpzJmLu+Le01MBZkjnMNOjVGVfhPGdBwTzFj1GAQXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:b0:f0:57:ed:53:ef:ca:29:a3:36:34:fc:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Validity
Not Before: Mar 28 08:00:44 2026 GMT
Not After : Mar 29 08:00:44 2026 GMT
Subject: CN=092800aa748d993121a7474953ff65a848146ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:d3:b9:f4:04:1d:56:e3:fd:59:ae:54:d9:
63:df:ff:78:cf:ea:bf:29:1b:56:f2:a4:21:1c:f3:
83:60:86:05:35:82:4e:0a:6e:d1:8a:99:dd:1c:15:
c8:4a:1c:dc:9c:38:6a:c3:62:7b:cb:ed:60:16:8e:
7c:80:11:a3:87:b5:e1:cc:c1:8b:48:3d:9b:32:f2:
95:dd:6b:1b:a0:44:5f:e9:64:51:e7:b9:75:62:c4:
b7:63:a3:13:12:c9:07:de:d0:67:a1:33:37:b4:73:
35:c1:c4:10:bc:0a:4c:20:5d:37:24:57:7d:d7:e3:
fd:74:f0:f0:4e:e9:a2:9b:13:2b:a9:9d:07:13:ed:
dc:0e:1a:fd:5f:10:f6:b6:c4:2c:b2:c5:8f:93:7b:
47:fd:92:a5:a6:d8:d8:bb:1e:3b:ec:1b:6b:31:61:
75:45:62:1d:3f:58:6e:8f:55:78:59:5d:fa:7b:05:
22:ca:37:42:0b:ab:bb:be:94:7d:09:fd:4b:fb:40:
f0:b5:6d:2b:c8:03:64:7a:a7:3e:31:5e:2d:35:9a:
fd:5e:02:62:56:48:65:89:15:af:34:4f:4c:e7:a7:
7c:7a:6e:a1:8b:df:3c:87:2c:76:79:88:9c:95:45:
d1:d8:d8:17:90:7f:ac:90:cb:01:52:38:30:40:8d:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:28:00:AA:74:8D:99:31:21:A7:47:49:53:FF:65:A8:48:14:6A:DE
X509v3 Authority Key Identifier:
keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:18:dc:70:77:ef:eb:ce:55:63:e5:ff:dd:95:4f:7a:8a:60:
36:13:5e:45:d2:11:9a:a1:bc:6c:50:4a:92:4e:1b:3a:62:5a:
c0:a7:6d:86:f5:80:85:25:ec:68:c1:f6:56:c8:45:5a:8d:a1:
c6:f6:9b:15:cd:50:ce:c4:c9:0b:02:9b:93:69:e7:a3:c4:ba:
a0:b9:6f:d5:b3:15:26:82:8f:97:46:08:39:cd:59:f2:c6:da:
a6:15:93:c0:34:19:b2:62:6a:81:d4:e4:4c:1a:12:e9:00:c6:
84:ea:1f:95:21:10:54:d3:71:17:1d:31:ef:fe:35:ec:7f:e8:
d3:32:e3:7d:6e:dc:6d:8e:16:a2:da:2a:ae:1c:13:a2:7b:ec:
c7:f4:5d:6b:b1:53:fc:24:b8:02:78:fa:1d:68:01:72:fa:c9:
3b:a1:34:10:37:97:ee:ef:22:c9:bc:c9:39:02:81:71:82:aa:
91:9f:f4:08:74:c7:a3:72:ad:71:83:7b:19:3e:80:c9:00:34:
fe:ac:2d:61:7b:be:e5:d4:cc:f8:39:b5:bc:14:2a:00:fe:2c:
39:94:fd:58:22:ce:91:28:93:2f:df:06:db:0d:52:ac:4c:f0:
bf:70:9c:55:a2:a1:81:79:2b:fa:c1:33:ce:83:6f:14:65:24:
b5:65:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:47 2026 by rpki-client