Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: vOIdJwSvMsvdr20kzmjSRwHxpQUE1J9W9HPJIWsmx4g=
Subject key identifier: 62:25:F6:8E:A4:7B:3F:ED:B9:87:07:5F:5D:B8:BC:51:AB:20:FC:CF
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 019D27A8A627E27EAB12976DB208B1E503C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: 2/qsmHcSTOhLxTxu/8S97vgAbTLt/BwcemWhBopXZfQ=)
2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:27:e2:7e:ab:12:97:6d:b2:08:b1:e5:03:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=6225f68ea47b3fedb987075f5db8bc51ab20fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:cc:31:1b:79:71:ad:36:5d:1c:59:66:5e:
0c:db:9b:26:ab:2e:7a:e2:a3:ea:12:52:89:22:d1:
94:aa:ce:2b:70:d4:7b:71:30:ab:fe:c9:82:16:fe:
73:64:5b:fc:36:83:1a:a2:4d:e9:50:5a:43:85:da:
a9:5d:9f:97:5b:81:89:fa:f9:0d:dc:bc:dc:82:15:
a8:72:42:12:e0:07:89:c2:27:fc:e9:8e:27:50:46:
7d:6d:55:95:7a:2d:01:2b:8c:ce:7a:0a:ac:18:cd:
15:69:e4:f4:9f:d7:3b:04:3c:4e:ae:89:b1:c6:27:
86:2f:49:87:94:98:d9:91:7c:3a:06:6c:68:da:f4:
47:fe:bc:f0:b4:f8:bb:65:f6:8e:4c:df:60:ef:49:
58:eb:f8:8a:3d:59:5f:b2:8b:a3:66:42:c4:ab:c7:
3b:a5:f3:66:28:89:5f:8e:bf:e7:85:28:87:d2:32:
97:e0:19:3d:ce:16:32:01:b1:1f:ad:df:b2:4b:df:
2d:41:93:93:69:76:f6:5a:bb:fe:c6:35:7c:c4:98:
64:eb:d3:7f:40:b1:8b:51:24:95:da:bb:e4:1b:ca:
57:5f:44:fd:d2:de:7a:f2:81:a3:96:60:40:dc:f9:
fd:e9:0f:e6:87:8b:cd:9c:72:cb:21:f3:f8:e1:b7:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:F6:8E:A4:7B:3F:ED:B9:87:07:5F:5D:B8:BC:51:AB:20:FC:CF
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8c:8d:e7:d5:64:90:5f:78:e4:56:7e:fa:eb:4e:00:a4:18:
d7:47:e7:60:34:66:63:ce:6d:09:fd:cd:7b:cc:39:90:93:11:
c7:71:c1:94:a5:1b:a2:f8:93:57:ec:6d:4a:e5:e5:07:bd:a1:
66:39:29:fe:4b:73:4b:83:61:55:8a:d3:75:3b:18:35:3c:85:
1b:a0:cd:ff:73:99:bd:a1:c3:85:5e:c4:21:48:62:dd:85:19:
ef:7b:42:5e:9a:43:d1:ef:f6:06:1a:52:ac:2d:6f:09:6f:05:
1d:07:dd:0c:3c:f1:77:7c:42:5d:3a:22:fa:7f:15:01:55:7e:
f6:c1:6b:f3:a1:58:c6:79:12:4d:da:ed:dc:35:32:2e:51:4e:
e6:d0:0b:27:72:67:38:41:bb:11:a2:8e:0b:fb:ac:ab:41:44:
c7:d7:05:a3:16:5a:c8:05:92:84:eb:82:b2:18:3c:d6:86:d4:
c8:1b:84:03:15:0b:0d:bb:e9:bd:2f:c4:42:de:a4:c2:a6:e8:
6d:b4:c3:de:45:90:4d:9f:9d:df:22:3e:aa:ba:01:6e:be:23:
92:d2:50:4f:f9:3b:7b:ed:28:84:09:57:58:f8:d5:6e:70:3e:
b2:a3:20:0c:76:0b:7c:01:df:ae:98:b0:6f:69:06:bd:28:db:
c8:cc:47:fd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nqKYn4n6rEpdtsgix5QPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2
MjNlOTIwHhcNMjYwMzI2MDEwMDU3WhcNMjYwMzI3MDEwMDU3WjAzMTEwLwYDVQQD
Eyg2MjI1ZjY4ZWE0N2IzZmVkYjk4NzA3NWY1ZGI4YmM1MWFiMjBmY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fTMMRt5ca02XRxZZl4M25smqy56
4qPqElKJItGUqs4rcNR7cTCr/smCFv5zZFv8NoMaok3pUFpDhdqpXZ+XW4GJ+vkN
3LzcghWockIS4AeJwif86Y4nUEZ9bVWVei0BK4zOegqsGM0VaeT0n9c7BDxOromx
xieGL0mHlJjZkXw6Bmxo2vRH/rzwtPi7ZfaOTN9g70lY6/iKPVlfsoujZkLEq8c7
pfNmKIlfjr/nhSiH0jKX4Bk9zhYyAbEfrd+yS98tQZOTaXb2Wrv+xjV8xJhk69N/
QLGLUSSV2rvkG8pXX0T90t568oGjlmBA3Pn96Q/mh4vNnHLLIfP44bfmQQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGIl9o6kez/tuYcHX124vFGrIPzPMB8GA1UdIwQY
MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0
LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1
ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIyN
59VkkF945FZ++utOAKQY10fnYDRmY85tCf3Ne8w5kJMRx3HBlKUboviTV+xtSuXl
B72hZjkp/ktzS4NhVYrTdTsYNTyFG6DN/3OZvaHDhV7EIUhi3YUZ73tCXppD0e/2
BhpSrC1vCW8FHQfdDDzxd3xCXToi+n8VAVV+9sFr86FYxnkSTdrt3DUyLlFO5tAL
J3JnOEG7EaKOC/usq0FEx9cFoxZayAWShOuCshg81obUyBuEAxULDbvpvS/EQt6k
wqbobbTD3kWQTZ+d3yI+qroBbr4jktJQT/k7e+0ohAlXWPjVbnA+sqMgDHYLfAHf
rpiwb2kGvSjbyMxH/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:55 2026 by rpki-client