Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: G3kWYInl3qawq4whlMs1Y/jDPHSLy8suG458VkW/XjA=
Subject key identifier: 25:65:3B:E6:F3:B9:1C:C2:24:59:9D:D3:CB:4B:A5:8E:92:15:51:D4
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019D290E5897D01908ED654537F707487AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 138A
Signing time: Thu 26 Mar 2026 07:31:38 +0000
Manifest this update: Thu 26 Mar 2026 07:31:38 +0000
Manifest next update: Fri 27 Mar 2026 07:31:38 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: DT2rO3rWsNKYIpuTWLsT+9ZXBw5WHkpmcNwi6C04UqU=)
2: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
3: pii1CExQ4xf-GUYev0fHyho_G6Q.roa (hash: GV8QSwmOxalU5Jgs+Bx0setLzmJ9Th9pasTRJOzcZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:0e:58:97:d0:19:08:ed:65:45:37:f7:07:48:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Mar 26 07:31:38 2026 GMT
Not After : Mar 27 07:31:38 2026 GMT
Subject: CN=25653be6f3b91cc224599dd3cb4ba58e921551d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:9d:0c:db:e3:16:a6:7f:5a:79:c2:6e:74:
96:19:c4:f2:85:6f:11:e2:82:e3:04:76:14:d5:1d:
ad:00:4a:e2:f8:e3:99:c9:04:47:38:30:26:e0:f6:
b3:3f:71:0d:ec:4a:65:e5:f7:ab:05:fc:c3:cc:af:
e6:61:8a:79:61:57:6b:72:1d:dc:fc:5e:e7:aa:a2:
a4:31:e8:82:81:02:b0:ae:ba:81:02:76:92:9c:35:
85:02:40:02:be:b1:98:a4:dc:73:e3:9f:3f:17:80:
01:b8:49:19:ff:d6:0b:98:26:0e:49:3b:a1:6e:2c:
67:8c:9f:24:5e:21:32:1f:3d:2b:f0:21:22:9f:dc:
57:aa:57:11:45:83:3c:79:1d:f2:d8:7d:91:c5:68:
ff:8f:65:93:56:28:86:9f:04:d9:71:e6:d0:71:03:
e7:04:b3:aa:e1:73:e9:05:75:42:b9:be:24:0b:89:
e5:e7:63:02:f3:b7:5a:86:1d:82:cf:c5:e5:b7:80:
ec:7c:fc:33:cd:f7:cf:ea:58:86:16:04:33:d6:a3:
ba:b6:40:69:d7:b5:57:88:4d:86:33:a4:da:9a:cc:
57:f8:e5:a2:5d:93:1b:28:e4:e3:12:ea:3e:77:98:
b0:bb:00:b0:69:bf:03:eb:f3:58:1d:fd:76:7a:ae:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:65:3B:E6:F3:B9:1C:C2:24:59:9D:D3:CB:4B:A5:8E:92:15:51:D4
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:32:70:d4:5b:30:c4:bf:d2:61:75:51:39:b1:8c:87:a9:
b5:ca:c5:20:d3:0a:3d:6e:3d:52:fd:52:7e:5e:dc:e6:dc:f0:
cc:85:5f:db:2e:a7:20:eb:f8:92:57:b7:e7:f9:8c:ef:21:1d:
00:8d:7a:3d:fc:40:18:1a:8c:0c:17:67:93:e3:d2:1b:56:80:
46:f3:89:11:92:49:9a:44:22:12:cc:59:94:07:10:47:b0:86:
33:9c:25:d2:d4:79:34:de:af:c8:d8:54:50:0a:d6:9c:7e:e5:
7b:68:68:f3:c7:58:ef:24:d7:f9:81:b3:1a:be:47:c7:76:8d:
27:26:6e:1e:61:b3:77:4f:6c:d7:c6:3c:e0:25:d9:6b:c9:0e:
23:ba:a5:94:06:bf:c3:75:0c:c6:5f:8a:e3:79:e6:c4:7a:1b:
09:4c:f4:33:d3:24:77:b5:22:31:4a:38:a4:ea:4c:ec:3c:c3:
d5:89:54:15:0e:8d:e2:de:f2:63:ef:63:3e:43:14:54:d3:bd:
d9:99:4e:cc:60:9d:9d:21:cb:4f:8c:2b:1d:6e:8f:7b:fd:8c:
78:9a:ef:f9:17:0e:85:4a:df:2d:16:f5:36:49:f5:f9:0e:d6:
de:5c:06:05:63:59:82:5f:ff:42:cc:b3:84:bb:3b:6d:9f:e7:
4c:10:01:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:06 2026 by rpki-client