Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: zSyDIiGXiUIEcjfUFlKRuMs65jJFqMCnstSeq2ofYQc=
Subject key identifier: 1C:91:AC:98:84:AA:B6:A0:C9:7A:62:A0:62:21:17:E4:BA:D8:91:1D
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 019D2884642DBA6EBBB6CA79C4C3961D7AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 0595
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: UJF68fFAPN13ESffDwASfKEGvMcs2khQtdruIxKx2MY=)
2: X_QIXpc1D9Swl7RHSJxujli_8yk.roa (hash: 18pzA1Lx0ABoYaRYkMn900C2smbYbwmxYD/sh/UcCOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:64:2d:ba:6e:bb:b6:ca:79:c4:c3:96:1d:7a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=1c91ac9884aab6a0c97a62a0622117e4bad8911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:0f:d6:42:45:d9:fd:db:07:e4:de:86:73:
7c:dd:2e:94:80:d1:b8:ca:2c:e5:06:e4:7a:20:74:
91:a0:37:e2:36:02:9f:4b:d1:27:2d:62:f3:a3:0f:
64:b8:f4:f9:ec:0a:50:34:40:59:1b:24:f9:f3:2c:
50:13:7a:53:ad:b2:c5:b8:67:a2:c7:64:92:1f:50:
95:6f:85:80:45:8f:e4:09:e1:20:ca:a2:13:b7:61:
e4:be:37:85:0b:9b:96:46:53:22:96:ce:39:e8:1e:
eb:95:5f:f1:a1:87:c3:2d:3a:b8:45:4a:b6:5f:c4:
e1:59:88:a4:4d:b7:a0:d0:0d:a8:07:8c:27:47:b6:
2b:11:70:2b:6e:51:0f:0f:47:ca:b0:92:64:ad:cb:
c9:ac:34:da:29:f2:59:41:61:ae:f8:c9:51:5f:62:
50:bf:6b:8b:7e:44:5c:f3:1a:70:88:00:3c:b5:40:
8e:8a:6a:1a:71:17:79:bc:4d:0c:84:7f:83:cd:38:
e7:71:3d:b2:3b:26:13:e0:2d:7f:12:e3:86:fe:dd:
a5:7f:c6:2a:cf:0d:9d:1e:a5:79:9a:22:e2:47:31:
c0:f8:51:aa:bc:39:cd:36:e0:a0:ff:4e:c1:75:a8:
96:b6:18:f7:c3:d0:a0:e3:b3:14:32:9e:5e:01:56:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:AC:98:84:AA:B6:A0:C9:7A:62:A0:62:21:17:E4:BA:D8:91:1D
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:53:7d:e0:a2:af:e4:7c:22:79:13:b7:28:a6:9c:df:9b:e4:
7b:bb:11:7e:b4:03:35:55:c4:b4:b2:f8:ab:66:99:be:c2:64:
aa:82:2e:f0:80:f8:ad:8e:e0:0a:a6:ab:46:57:3e:14:3d:97:
be:98:e2:68:56:d9:d3:f8:33:63:b7:bc:f6:11:be:6c:1b:6c:
ae:51:f7:1b:60:99:dd:fc:2f:ce:c1:e2:03:84:57:30:f5:c2:
8e:84:65:96:21:2f:2e:cb:0b:c9:53:de:73:2b:06:d9:94:4d:
91:b5:09:5c:44:02:0f:ab:c9:32:60:e5:21:cd:ee:da:4e:2d:
36:d1:4a:5f:7e:74:fc:a3:1d:4a:30:8a:66:91:ba:18:5a:1a:
4f:cd:43:0b:d7:98:ed:f0:c4:03:ed:d7:d8:6e:b7:a2:2e:29:
88:fd:30:c8:a4:1b:0f:77:a5:52:d2:fc:be:3f:d1:75:0b:02:
31:e1:70:a8:eb:74:04:2d:b5:00:a7:fd:32:55:b1:03:1e:bc:
5d:5b:b6:61:54:e9:18:55:43:40:8f:eb:58:09:c7:28:47:12:
0b:cc:aa:52:f5:dd:30:3d:7f:75:f5:fc:09:70:e5:15:e8:56:
b0:fa:4e:fd:70:96:fa:fe:ea:82:4c:cb:71:3f:e3:9b:6e:ec:
c2:72:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:52 2026 by rpki-client