Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier: VWixQiaRyFZQezBx8CoyZdM1mAjwElppwTqxLMDEEoE=
Subject key identifier: FC:28:90:4B:89:EF:74:83:60:DE:F1:7F:40:9F:C6:C5:F6:0C:AC:FA
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 019D28F2CD480FBF11490A5A4219512BC457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number: 01EE
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: 9YAot8TEk42xEXChGKEISRZfIG1s86CO1cLwe03EYho=)
2: hrDir8hInSlFPN-Q1uO1aajy_9g.roa (hash: LO9s/4upanODPdu0Y/QyxRsG/lztm/48QBv0SUqV5f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cd:48:0f:bf:11:49:0a:5a:42:19:51:2b:c4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=fc28904b89ef748360def17f409fc6c5f60cacfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:cc:dd:39:25:af:1b:5d:31:2b:f2:ea:53:
1f:d7:5d:23:55:af:b8:ff:9d:56:03:d9:18:a7:d8:
5f:45:2b:29:6d:f0:87:59:13:43:9f:69:43:7e:9a:
31:6f:4a:da:2d:90:3f:7f:d9:6a:3f:a6:d7:0f:88:
18:f3:de:dc:50:b6:a9:d4:9a:90:54:1a:e7:7a:4c:
1d:00:16:08:ab:38:d7:da:0b:38:3f:bc:22:57:0a:
7d:21:a5:11:4f:e2:c2:a7:21:46:23:0c:5f:72:bc:
67:ff:f0:5b:4e:13:9b:c8:28:c5:66:5e:05:9e:09:
41:8c:e4:3b:c0:92:b4:e9:a0:ec:84:83:b2:85:da:
7f:51:3b:5c:42:f4:ef:37:24:05:25:72:73:b0:87:
3d:a6:4d:69:42:51:a0:84:9b:af:5b:d6:a6:9f:13:
5f:95:df:3d:bf:ac:4e:35:16:03:4d:87:92:83:ec:
e4:7b:9a:65:6a:71:1d:68:2c:69:af:d3:c6:45:9c:
f0:f7:c1:46:b4:5d:5f:82:47:0a:a5:7e:0c:35:5b:
e8:3a:93:2c:69:cc:90:25:c8:73:91:27:cc:21:35:
f2:5e:6a:2a:58:fa:6a:a6:b0:c4:a5:7a:77:49:f0:
61:b3:47:87:0c:f9:e9:b3:e3:61:0f:59:2e:ee:aa:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:90:4B:89:EF:74:83:60:DE:F1:7F:40:9F:C6:C5:F6:0C:AC:FA
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:d7:2a:67:9d:3c:b4:e2:54:0e:8f:30:ba:2d:8c:e6:e9:
85:b8:bf:4b:13:26:7e:a5:ef:6d:16:43:18:d6:63:b3:c9:40:
bc:42:de:09:5b:79:6e:2d:ca:95:c4:e3:82:34:8a:a4:9a:08:
68:88:d4:d0:3d:fc:71:08:ca:22:71:d9:78:93:e4:5b:72:63:
2d:56:23:f5:be:9b:27:f8:98:45:f1:16:39:0e:86:a2:f0:ad:
80:66:dc:e8:bc:41:78:15:ae:aa:ea:11:a4:d4:5b:62:57:e6:
d9:7e:08:cd:0b:b0:fa:7d:e3:c3:9d:f0:55:68:eb:36:ef:fd:
28:c4:ae:d4:d3:75:5b:26:4a:a7:2d:ea:e4:a5:82:38:e4:f1:
d0:67:5c:76:0b:0b:c6:4f:b9:ea:96:3e:97:26:c3:d9:8a:6a:
30:80:c7:b9:f6:af:84:40:fc:4d:0b:87:48:50:2b:6b:7c:b6:
07:2a:96:80:53:d8:be:ec:1e:3e:f6:35:e0:8c:64:2e:8e:88:
ff:67:6e:bd:74:36:05:ec:5a:95:3f:ba:6b:a3:10:cb:81:7c:
06:32:49:16:17:6e:7b:83:a7:40:62:c6:12:36:77:86:d7:e4:
2c:b6:bf:7f:0d:d9:fe:27:44:ff:ce:9c:68:52:73:ac:d7:e1:
87:8f:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:17 2026 by rpki-client