Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: wVj12X2CVfvhBUdsAR+g7nf+cyRGj1vH4g3Se8PwbzU=
Subject key identifier: ED:85:C4:C9:10:72:C3:59:11:36:97:16:63:E1:93:DB:80:E2:9E:41
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019D25BA82E797B0BA72E125287D068D2010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 16:01:13 +0000
Manifest this update: Wed 25 Mar 2026 16:01:13 +0000
Manifest next update: Thu 26 Mar 2026 16:01:13 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: HLuIgIHJkHCKUwJ8wN3qOF4WF9N5YFPTGOn/KyfoYOE=)
2: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (hash: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ=)
3: jn0yEdikXWBGn1EaR0b8w0TJFr8.roa (hash: 10DA5MXiJsweYaG/q6sof9ShkMYv66PwkP1hNlnqUDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:82:e7:97:b0:ba:72:e1:25:28:7d:06:8d:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Mar 25 16:01:13 2026 GMT
Not After : Mar 26 16:01:13 2026 GMT
Subject: CN=ed85c4c91072c3591136971663e193db80e29e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:a0:45:05:cd:1e:2f:9e:65:96:ed:3e:28:
c2:0d:fd:ec:b9:ae:ff:e2:f6:33:69:ad:bc:eb:00:
12:e7:37:26:0b:cd:92:56:74:5a:43:f2:bd:7c:3e:
56:7d:b9:c2:34:41:3d:39:ef:8d:be:c9:37:41:6a:
81:20:e8:13:2a:38:25:e6:ad:e8:82:b0:24:de:ef:
d1:d7:88:68:d9:f2:1a:a5:a7:53:67:57:58:37:4e:
ba:07:50:e0:7f:ff:04:5a:5b:5f:ab:04:7d:a1:a1:
06:90:87:01:a0:50:5e:99:ba:92:ea:bd:1a:f0:d6:
4d:fa:d9:c2:19:ab:23:43:68:aa:d8:69:b3:cc:39:
7c:06:89:13:2f:3c:23:b8:e5:2d:d1:a7:41:0b:c8:
1d:20:df:c3:77:b1:94:f4:15:38:83:a9:fb:6b:89:
c1:e6:7a:d3:ce:d3:48:a6:5e:51:64:fa:df:f3:df:
48:4e:6a:d4:e8:08:6c:b6:b9:fd:69:d0:31:a3:4a:
5b:42:71:ba:8d:a6:99:43:54:5a:0a:ee:36:18:83:
98:ed:fd:c4:54:3a:ee:8b:46:d8:0e:bf:4a:1e:91:
0e:13:b5:67:16:59:60:46:1d:85:c9:04:65:83:06:
49:98:e6:68:76:d7:0c:42:7c:63:54:29:d0:b9:d0:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:C4:C9:10:72:C3:59:11:36:97:16:63:E1:93:DB:80:E2:9E:41
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:95:92:6a:b9:cc:05:ea:42:e7:e3:73:85:ca:07:fb:a4:3d:
00:44:ef:29:0f:0d:aa:20:bc:13:4e:c5:8f:28:20:65:cb:b5:
34:b1:0a:33:39:7f:c6:74:75:f9:4a:cc:ff:7c:0f:44:0d:51:
69:1b:3f:99:a7:a9:21:4b:d3:25:b9:2a:a4:89:b0:18:3e:89:
7b:ec:af:f7:db:05:34:f5:fe:bf:02:c3:00:1c:38:1d:3c:09:
d7:a7:8f:71:62:87:dc:29:c0:67:b4:d5:e5:32:ed:61:3e:31:
40:3b:38:8d:b0:b9:0b:f4:6c:d8:fd:cf:6f:56:0d:97:a1:25:
1a:74:ba:98:68:fe:6e:33:ff:cf:e1:3f:f7:42:d1:cb:f1:b3:
09:80:f4:ba:d7:96:59:8b:88:a7:f9:ab:d6:a5:1c:b6:5f:34:
a5:79:97:ba:b7:c1:f5:f2:77:ba:82:34:82:7d:d8:16:16:9b:
d3:0c:62:40:a4:61:34:54:e9:f0:f9:a6:9f:8b:9e:30:6c:41:
52:a4:2c:7c:5a:93:62:c4:e5:05:35:21:34:1c:13:16:a9:01:
62:02:24:a0:1a:e9:0c:19:1b:4a:c9:37:08:75:21:1b:a8:be:
69:8f:83:4f:5e:ea:46:80:bf:a8:7c:48:c4:25:5f:87:72:32:
f8:9f:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:20 2026 by rpki-client