Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: wNLM7j3q8X1+AGRvBq93fmlbgXp1HcWvVGART80ZNFQ=
Subject key identifier: D1:C7:6B:6F:AA:D7:E7:5C:86:2D:59:4A:E9:A5:B2:4A:8F:60:27:48
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 019D2A3C10B0DC2634661FA9D3A799BD4713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 13:01:12 +0000
Manifest this update: Thu 26 Mar 2026 13:01:12 +0000
Manifest next update: Fri 27 Mar 2026 13:01:12 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: Z5PTOOulEte9bvWUAcuLGs+RBMbhdgseIczhhdcbiaE=)
2: 61-4acpKq_PC7ATdZVCHWRg8JKs.roa (hash: XfLv38L+k8qNjwRe1RGjTzVU0A2ck+gkD6atchEx+8g=)
3: snhbQ-MBqaP4OUTW8WJ3Hr1dnUc.roa (hash: 9I5SXUe0pT58xK312SvCJFKTSES2daM8oG5AXaPkWQM=)
4: y0v5hqRnK3oXSef_pYXkfz4Oyzw.roa (hash: 0FZ3W5rrSzMRERGSvGaSIJBxiMzf+ECnXIculdCdNkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:10:b0:dc:26:34:66:1f:a9:d3:a7:99:bd:47:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Mar 26 13:01:12 2026 GMT
Not After : Mar 27 13:01:12 2026 GMT
Subject: CN=d1c76b6faad7e75c862d594ae9a5b24a8f602748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:37:60:62:37:7c:31:60:80:8c:3c:16:cf:
8a:5a:8c:4b:92:c3:a2:78:64:f8:c6:8c:37:6a:93:
2f:10:75:f6:32:05:2b:65:95:87:42:d3:6e:4f:d6:
6d:1d:3c:9d:cf:ad:ad:a2:f7:47:35:2e:16:42:5e:
73:28:ab:0f:00:46:13:61:de:fb:60:a4:74:86:5b:
ff:0c:38:5f:75:12:2b:74:64:ca:2c:ba:f6:16:8d:
29:7c:2b:83:bd:56:19:38:95:5e:35:93:8e:ef:c2:
93:53:be:dc:b1:29:2b:09:4f:08:1d:5f:97:b7:d1:
f4:49:4e:ea:92:38:e8:ae:88:f7:cf:d6:e0:2c:11:
79:6d:a3:be:fe:c4:91:f2:30:0d:5d:0f:14:ca:b4:
bb:25:fe:69:25:8b:a0:47:ff:ae:3d:4b:5a:02:be:
56:2d:93:ab:c6:7c:77:a7:92:74:c7:1b:2f:c2:bd:
f6:e1:ec:9e:0b:05:9e:44:b2:a9:8c:e8:3a:2e:71:
e8:99:df:92:16:41:ac:dd:53:27:c3:27:7e:42:c4:
18:4b:6f:02:de:40:3b:23:be:7a:81:6b:6a:9f:fa:
64:00:76:7f:00:41:3e:b4:ab:67:ff:fb:f2:a3:9f:
43:70:5f:ce:7f:56:88:0c:a2:d1:1e:d7:a2:b7:57:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:6B:6F:AA:D7:E7:5C:86:2D:59:4A:E9:A5:B2:4A:8F:60:27:48
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:5c:55:82:1a:d0:c9:c7:17:0c:6e:09:42:f3:eb:61:d2:
fa:dd:65:0f:f2:16:48:ae:9a:5c:f6:d1:96:52:c2:b5:a2:c5:
18:80:29:6f:95:2d:18:55:30:bc:5a:13:85:b5:ad:f9:9d:a8:
e4:0f:9e:37:14:67:43:5a:32:69:6a:87:02:3c:b7:2d:0d:c8:
ab:6e:b6:74:ff:cf:1e:66:f3:f9:71:38:93:7a:0d:49:5b:81:
b5:5a:b7:ee:5b:0f:ef:b6:d9:f8:ce:e8:21:86:fa:5f:cb:cd:
0c:b5:cc:19:1f:c6:0f:6c:03:8b:03:be:92:b5:e1:38:7c:75:
6d:b5:a6:1c:8a:a5:4b:bf:8e:7f:13:ee:59:8a:27:a1:a8:50:
0d:26:b3:33:be:68:a6:97:ea:42:13:89:51:27:20:94:57:04:
55:f7:08:36:80:3b:cc:db:15:5e:79:44:a6:a0:77:03:fc:ee:
38:b0:f0:27:00:c9:16:d2:b9:c8:5f:2e:08:1b:cf:8d:7d:dc:
25:5d:22:74:d3:52:34:5f:2e:7d:fe:22:1f:3f:72:73:3e:ea:
72:be:46:d5:7f:52:aa:82:cb:21:7c:82:0c:e7:5d:2f:7b:de:
be:69:d3:dd:36:9e:84:b7:c1:be:b5:89:4d:e2:15:42:c2:cb:
ba:ff:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:35 2026 by rpki-client