Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: oozmuqeJ7g7r2glBRDUlfq5ghaxbud88/kKlNzEivVo=
Subject key identifier: A9:84:81:DB:57:DF:50:58:C8:21:B1:5A:06:64:13:CA:2D:EC:5D:59
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 019D28BB95B248FBBF15E8028112C59B98FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: 26n30EiYwN/C5DUWGlI5a/JH+m3yuqGWqQtv6NDbXc0=)
2: 4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa (hash: l+G/CcJNCFJU4d+SNUaOc2KOUJVWckb0n4DNmMjMMz4=)
3: yJ2MXHIuwnlLBfSQT_c_ui7bxZ8.roa (hash: bKb0mrONqrCtemohnhY7UQM4/Wb2IQBdRvBQnmw2e9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:95:b2:48:fb:bf:15:e8:02:81:12:c5:9b:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=a98481db57df5058c821b15a066413ca2dec5d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:f4:91:77:84:c9:e8:53:43:63:71:ad:56:
40:3a:f3:48:71:8a:22:ef:08:69:e6:ef:10:2c:0b:
fc:07:48:c4:5e:6d:7a:12:24:e7:90:c2:92:17:9a:
ed:d6:00:05:0b:90:52:bb:95:64:27:db:12:b4:44:
aa:23:d1:d8:88:bc:1d:9c:f9:dc:8b:28:b8:70:4f:
75:40:72:d8:f0:e7:d8:b2:2f:04:9d:78:35:a0:a6:
f5:28:3c:c6:b8:ef:fa:c5:5e:26:ef:f5:dd:fa:a6:
fd:86:af:90:2b:30:2c:87:90:03:6c:3a:a0:72:75:
99:04:8a:f3:85:52:ab:9c:fe:c0:61:62:07:ad:1b:
52:03:28:cd:31:8f:45:45:f9:10:fc:29:b8:28:b5:
c4:a7:0e:b6:be:49:38:d8:dc:8f:f5:5d:33:9e:8e:
de:ff:cd:6d:5a:40:38:ca:7b:5b:c7:4a:a4:14:07:
e3:37:d0:5c:89:5d:08:a4:d0:f3:33:b6:6f:3f:56:
27:b7:80:31:58:25:5c:44:3c:90:d6:37:61:3a:9b:
4e:95:ad:2d:8d:02:3c:eb:6f:86:f8:fb:c1:3d:0f:
28:f9:67:2e:ca:f2:43:fd:a4:94:27:57:91:ee:b2:
74:bb:ee:e0:9d:1a:71:29:00:18:25:51:2b:e0:4f:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:81:DB:57:DF:50:58:C8:21:B1:5A:06:64:13:CA:2D:EC:5D:59
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:12:c1:80:d2:aa:38:29:96:12:24:76:87:62:a8:2d:1f:95:
a5:a3:96:b9:16:37:4e:91:70:68:0a:f5:42:b6:d0:fb:02:78:
90:12:f1:e3:f1:41:2c:03:c9:2c:1f:a9:f8:b6:78:57:b8:3c:
64:38:e1:5c:24:05:b4:a9:5e:e8:dc:ed:48:56:fd:eb:e9:4e:
ba:4d:fd:8f:c0:b7:de:fd:53:31:08:b2:90:4e:7e:75:ba:0d:
70:ec:b4:14:a1:b9:0c:15:c0:11:89:18:8c:3a:43:c8:17:25:
4c:0b:19:df:55:91:c3:a6:9a:8f:ec:64:3c:29:fc:cc:30:32:
b7:c2:7c:91:c3:7b:f0:7f:bc:ff:20:4e:af:ab:6c:0a:5f:72:
fe:d4:00:5e:4c:ef:13:44:07:45:c7:4a:4d:d0:6e:dc:c1:4c:
31:19:36:9f:a7:a9:1e:c8:fc:94:f7:f5:7c:06:b9:02:63:df:
fd:4f:a2:a0:90:e7:ec:e7:b7:e3:75:cd:a6:5d:fa:46:76:e0:
88:d2:8f:f7:c3:3c:8b:97:b8:81:e3:64:8c:e3:28:94:8f:90:
b2:8e:0b:d3:30:74:7a:a1:0d:c9:fb:73:24:12:91:19:06:24:
99:48:02:7d:60:fc:68:6d:1e:f2:e1:8a:38:19:72:bb:03:25:
20:30:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:50 2026 by rpki-client