Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: rqtAuF2r50AQEjTuA/w133I1f6e7dWg+K17aTarodA0=
Subject key identifier: 0E:91:99:CF:31:EB:B4:19:3E:B5:D5:C6:A5:D7:F6:A6:C9:E2:AF:1B
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019D3376494A8ED8983B526A183F85B2CF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1896
Signing time: Sat 28 Mar 2026 08:01:23 +0000
Manifest this update: Sat 28 Mar 2026 08:01:23 +0000
Manifest next update: Sun 29 Mar 2026 08:01:23 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: un0XoHK/GqAf9xTFDFEN9tFlAtURigt10FVtMEN90iY=)
2: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
3: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
4: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
5: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
6: wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa (hash: MuoJXkzRzdWJZg/ch4KkXpD2pgMmCcKq2XBOGx8d8S8=)
7: y3zfP0q93ofdDmTML3d9ibPYDE0.roa (hash: lXR/PGnLiIZR28DvXpTTFej/rrLITeIePZus7we16Gw=)
8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:49:4a:8e:d8:98:3b:52:6a:18:3f:85:b2:cf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Mar 28 08:01:23 2026 GMT
Not After : Mar 29 08:01:23 2026 GMT
Subject: CN=0e9199cf31ebb4193eb5d5c6a5d7f6a6c9e2af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:8d:e3:3a:bc:27:5c:c3:3e:0f:15:03:6c:
52:16:bc:98:f6:ac:e4:c3:18:be:2e:6e:16:01:cf:
74:c6:7b:60:44:25:39:3a:94:88:77:9d:1f:f8:7a:
62:05:93:ef:ae:8a:4d:20:05:c8:67:b4:5f:9f:b6:
35:47:53:3b:59:43:b8:19:6b:8f:92:4c:bb:67:c9:
61:b8:6e:80:c1:ef:87:61:d0:05:3a:e7:e0:08:c4:
04:59:d1:b9:53:d5:a9:0e:0d:89:cc:dd:4f:8d:32:
32:3b:46:7e:77:f5:de:37:fb:85:f7:90:e8:0b:cc:
3f:db:57:67:9a:4c:79:cd:ab:ed:e5:99:d5:37:8c:
df:df:76:a4:91:be:2e:d9:8a:f9:37:5f:6f:a5:27:
2d:d6:17:0f:89:2e:e7:30:91:f8:35:7f:63:24:7e:
b5:ac:a4:a1:ed:ff:1f:b1:81:e4:7a:4e:60:62:76:
c3:5f:45:31:95:fb:09:b7:a1:01:af:9b:99:69:8f:
36:c3:a0:f8:30:f8:cc:07:44:de:94:07:15:69:42:
61:f0:7a:54:4a:fe:56:96:84:90:ff:86:a5:0f:b0:
c3:af:93:3c:f0:e9:04:09:4a:de:e1:c3:69:99:52:
ca:9a:07:6a:f0:c3:2f:84:2f:02:bc:6f:5b:f8:64:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:99:CF:31:EB:B4:19:3E:B5:D5:C6:A5:D7:F6:A6:C9:E2:AF:1B
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f6:d4:aa:69:65:a0:b2:c3:0b:68:b0:a8:c3:a8:e1:35:98:
12:2b:77:91:6b:10:f6:38:8c:a9:75:ab:c5:d2:8c:3e:fa:8b:
67:ab:7f:b4:00:f8:35:ca:b5:f6:8b:bd:76:e4:ad:d8:6d:62:
66:e8:32:16:ab:4f:12:07:be:22:e7:48:33:89:54:fa:f7:e7:
5e:a9:2c:ac:1c:c1:af:0c:22:d6:41:32:ba:a9:0d:8e:76:f7:
8f:80:40:6a:7f:62:56:a5:68:e9:f4:8d:c8:17:ca:46:d7:3c:
20:62:64:79:f8:ef:ca:13:fc:84:74:b9:a4:df:c3:b2:6f:1f:
b1:3b:3e:80:d8:04:66:01:49:75:0e:7d:83:e4:c8:6d:5c:4a:
52:04:4f:bb:17:13:4a:01:14:ef:bb:8b:12:e2:1b:2a:e0:95:
c6:38:27:d9:c0:c3:8b:8e:0b:58:d0:ee:ab:22:90:7c:7f:19:
54:26:e7:43:67:be:c9:51:ee:ea:b9:ea:cc:a2:ea:7f:ab:95:
96:5d:50:c8:7d:c6:38:5b:64:37:26:99:cc:c3:e3:e7:35:f3:
4e:39:fe:c5:b9:cb:69:90:e1:71:f2:12:41:01:a8:2f:45:43:
fc:91:0a:39:5d:06:69:4a:6e:e6:47:22:45:d1:8c:c0:ed:e4:
14:25:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:20 2026 by rpki-client