Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: OFQ4E4/qbXWAopvUiCWLQPuzgcdMtrEPLbUu7oNQgkI=
Subject key identifier: 1F:C8:E8:FD:23:66:FD:85:83:1E:2D:EC:AA:DD:48:4E:CA:AB:34:09
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019D26966D49F408F5A75AABA97AA9D1F6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0157
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: Nkbvs/bm5rRdSSULvNQ8VrM2lY6Px8wwt4Ie4TR2xxo=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: mwCzzvweJkXnsuKQFU_XqrjgkuY.roa (hash: oIsIZ9PAHY73DINk0iQBEaX5PRlBNYPUighzgQGS/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6d:49:f4:08:f5:a7:5a:ab:a9:7a:a9:d1:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=1fc8e8fd2366fd85831e2decaadd484ecaab3409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:fd:19:40:fc:16:a3:2b:95:39:d1:3a:ee:
e6:0f:cd:95:db:5a:b6:12:e8:02:12:64:92:32:10:
48:96:61:9c:1d:40:ef:77:2c:af:98:f9:45:ff:9a:
67:12:4e:ea:02:30:d7:17:75:e9:07:a4:0e:e5:fb:
e8:58:96:3a:c4:af:fe:38:a9:9c:2f:f8:75:d9:82:
4c:30:3a:6e:9a:cf:55:b8:ca:c6:e7:0b:19:bd:46:
d9:c0:ff:e5:08:f9:8f:59:b7:1e:f0:8d:2e:0e:67:
ee:ab:5b:6d:e6:ff:6d:67:f9:5a:70:03:43:bb:55:
f2:ab:db:c1:96:c7:9f:44:93:c6:f3:36:50:85:79:
31:84:e4:1b:88:5a:39:32:a4:10:15:a7:02:fb:52:
37:12:ff:0f:67:52:83:00:67:33:0d:41:74:f4:be:
41:da:3f:ba:e6:6c:87:fc:47:a0:b6:09:19:e4:ef:
09:1f:5d:ca:11:6c:c6:90:3b:1c:01:68:1d:64:26:
1a:22:5b:18:4e:f5:ec:03:73:87:11:b9:7b:f2:64:
19:77:ff:71:db:74:2f:dd:7f:db:2c:4b:cc:ac:80:
bd:f6:4c:f3:59:07:a5:94:0f:7a:15:c9:c4:f7:25:
ff:31:88:3d:9a:36:48:5b:03:8b:cc:d3:42:36:91:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:E8:FD:23:66:FD:85:83:1E:2D:EC:AA:DD:48:4E:CA:AB:34:09
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:7b:78:4f:62:4f:99:8c:f9:31:5c:d4:f0:08:7b:75:3f:
80:87:62:4c:d0:22:df:3f:77:3d:55:81:25:88:73:ee:e3:5a:
ad:60:26:41:1d:12:36:61:88:65:ac:25:da:f0:97:d3:4f:19:
42:95:e3:c0:2d:c2:34:fb:c5:de:42:2c:27:2c:d1:46:4d:5d:
9d:17:bf:52:98:d0:af:5d:96:31:55:5f:c4:eb:c3:12:12:c3:
02:53:16:06:84:01:5d:2b:a3:15:13:7f:40:bc:48:33:f8:40:
f2:34:7f:3c:8c:05:56:8e:ae:aa:2b:a8:cf:b7:4d:ab:1e:73:
48:94:c7:62:40:63:e6:ea:d5:6f:e1:0b:f7:f1:8c:48:df:d5:
fe:be:95:30:1c:95:31:6f:42:b3:20:7c:01:7d:2d:53:1a:6f:
b6:58:c6:1b:51:80:1c:51:57:ec:eb:61:01:35:6b:26:c9:93:
bf:ba:9b:a0:2c:b3:55:d3:dd:59:98:17:14:bd:ab:e3:38:e1:
ad:51:4d:41:b7:22:d0:2e:b6:de:be:00:d8:55:73:f4:49:f0:
df:c5:8b:68:79:cf:a7:5b:b2:25:49:0b:77:9b:3e:29:e8:c4:
22:3d:e0:bf:1a:a6:4f:4e:b7:61:43:88:fa:73:db:6a:1f:bd:
31:aa:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:52 2026 by rpki-client