Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: 9nwiLszRyxoPGclhM/cg5+QGkD24b5jIXlXwqgtpF6w=
Subject key identifier: BD:44:9C:F2:18:AE:D1:CC:D4:FC:83:93:4B:48:D1:68:22:94:18:28
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 019D25F12F48136D33CA6742C57E28DCAB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 17:00:56 +0000
Manifest this update: Wed 25 Mar 2026 17:00:56 +0000
Manifest next update: Thu 26 Mar 2026 17:00:56 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: OIGsZG2JB13ZwMpazTV4rMdvdEUtTxdPWStesysFSh8=)
2: jkf9uYsYVRJJo7-7ziQQDEzWpm8.roa (hash: KJPWOCNh5BY9Xr2oC9jvPyLkj0+8kyflAtM1BYsxhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2f:48:13:6d:33:ca:67:42:c5:7e:28:dc:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Mar 25 17:00:56 2026 GMT
Not After : Mar 26 17:00:56 2026 GMT
Subject: CN=bd449cf218aed1ccd4fc83934b48d16822941828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:6f:db:34:66:30:2c:c7:58:d1:c2:32:3e:
f1:f4:ca:3c:a6:58:ca:97:4d:0f:1f:15:a6:8a:9e:
68:27:30:42:0c:e8:52:4b:29:fd:a8:9e:d7:d0:45:
f7:c9:30:a5:48:4b:20:22:5a:67:c7:81:74:9d:4c:
d1:1e:96:1c:ca:83:6b:8c:b1:6f:e2:61:ce:09:4d:
40:b9:37:d2:ff:53:98:08:5a:c4:27:08:09:0f:25:
be:39:4d:d3:b3:c1:10:30:f2:b7:2b:db:dd:e2:5c:
a0:be:35:ec:0c:5f:f3:21:71:6f:1b:e3:1a:a3:90:
99:c4:ac:09:11:f3:16:a5:87:29:67:e3:2a:23:e4:
31:8b:7e:fa:f8:24:e6:b4:89:20:73:ec:15:4c:51:
aa:58:f2:cd:9c:7e:1c:5f:b6:5f:39:49:fb:ef:f5:
ad:62:0c:78:c4:ba:20:14:94:37:63:e7:ec:bb:ff:
27:39:b0:c4:0d:c9:33:db:67:fd:1d:11:b5:bd:c5:
b1:43:7b:ef:40:0f:a2:90:fb:0a:79:a9:dc:18:8d:
50:f5:91:b4:09:f8:1e:16:e6:3f:98:5e:1c:8e:fd:
bd:55:73:3f:30:5c:b1:d9:aa:89:46:d8:47:46:f8:
3b:3c:f9:85:0e:8a:5d:ae:e3:f1:ea:3f:27:8c:2c:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:9C:F2:18:AE:D1:CC:D4:FC:83:93:4B:48:D1:68:22:94:18:28
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:d0:11:46:05:65:57:ef:58:65:04:24:1c:0d:e3:11:68:
a8:b6:53:3b:68:f9:ef:a4:ae:e4:75:30:79:31:74:5b:1e:df:
6a:64:2f:73:88:52:49:52:97:2e:86:18:03:9b:9d:c9:3c:1b:
07:46:26:80:e8:70:4b:3d:f2:d5:fb:cd:aa:3b:3e:fd:21:99:
12:a7:75:3c:7f:eb:5d:5f:45:42:55:0f:be:cb:0b:f1:a8:d2:
62:b6:54:b3:98:15:99:60:74:48:5d:e2:4f:02:27:a0:55:d9:
86:d1:24:7e:80:55:19:87:82:fc:b1:fe:9b:be:5b:29:88:43:
34:f7:9b:20:e4:9a:88:a5:93:6c:91:04:04:71:dd:cc:50:8e:
7e:7e:61:57:d7:7e:63:49:b0:0f:27:39:58:be:df:65:4a:4e:
8c:2a:d7:0b:58:af:60:b5:1f:da:e6:4e:95:f2:98:64:d9:b7:
3f:e1:2b:51:4b:30:23:25:a9:24:41:f9:9d:b2:e4:f2:f7:38:
33:ab:66:03:9d:ef:8c:0d:df:af:60:68:7f:f6:76:b5:c8:fd:
3a:c0:13:76:57:a2:f9:cc:ca:70:a5:6d:1c:9f:c9:61:e6:e2:
94:96:8e:fd:2f:78:6a:6a:b4:54:e0:4f:b6:87:61:d1:70:7e:
a2:2e:fa:29
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0l8S9IE20zymdCxX4o3KttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YWE4YTNlYTk5MTMzMzM5M2YzZWYyYTE4MjI0NTExMjNk
M2VlYzcwHhcNMjYwMzI1MTcwMDU2WhcNMjYwMzI2MTcwMDU2WjAzMTEwLwYDVQQD
EyhiZDQ0OWNmMjE4YWVkMWNjZDRmYzgzOTM0YjQ4ZDE2ODIyOTQxODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdv2zRmMCzHWNHCMj7x9Mo8pljK
l00PHxWmip5oJzBCDOhSSyn9qJ7X0EX3yTClSEsgIlpnx4F0nUzRHpYcyoNrjLFv
4mHOCU1AuTfS/1OYCFrEJwgJDyW+OU3Ts8EQMPK3K9vd4lygvjXsDF/zIXFvG+Ma
o5CZxKwJEfMWpYcpZ+MqI+Qxi376+CTmtIkgc+wVTFGqWPLNnH4cX7ZfOUn77/Wt
Ygx4xLogFJQ3Y+fsu/8nObDEDckz22f9HRG1vcWxQ3vvQA+ikPsKeancGI1Q9ZG0
CfgeFuY/mF4cjv29VXM/MFyx2aqJRthHRvg7PPmFDopdruPx6j8njCxZ9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL1EnPIYrtHM1PyDk0tI0WgilBgoMB8GA1UdIwQY
MBaAFPmqij6pkTMzk/PvKhgiRREj0+7HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hcUtQcW1STXpPVDgtOHFHQ0pGRVNQVDdzYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZDFlMzI0LTU0ZjMtNGRmOC04ZWM2
LTAzOGQ1M2MyM2MzOS8xLzEtYXFLUHFtUk16T1Q4LThxR0NKRkVTUFQ3c2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdkL2QxZTMyNC01NGYzLTRkZjgtOGVjNi0wMzhkNTNjMjNj
MzkvMS8xLWFxS1BxbVJNek9UOC04cUdDSkZFU1BUN3NjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/HQ
EUYFZVfvWGUEJBwN4xFoqLZTO2j576Su5HUweTF0Wx7famQvc4hSSVKXLoYYA5ud
yTwbB0YmgOhwSz3y1fvNqjs+/SGZEqd1PH/rXV9FQlUPvssL8ajSYrZUs5gVmWB0
SF3iTwInoFXZhtEkfoBVGYeC/LH+m75bKYhDNPebIOSaiKWTbJEEBHHdzFCOfn5h
V9d+Y0mwDyc5WL7fZUpOjCrXC1ivYLUf2uZOlfKYZNm3P+ErUUswIyWpJEH5nbLk
8vc4M6tmA53vjA3fr2Bof/Z2tcj9OsATdlei+czKcKVtHJ/JYebilJaO/S94amq0
VOBPtodh0XB+oi76KQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:31 2026 by rpki-client