Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: V3LCtW+SvR7tdJ6GmPfqFkkrARoeeaWIeipo8K/cVAA=
Subject key identifier: 70:C9:23:54:93:46:62:3F:E1:5A:94:5A:66:8E:B8:CF:6F:22:3C:34
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019D27A866EB8D69E6EDC5ED54AE3259D31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 08E8
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: 4pPyHTT9+jhLTZGZ0dtLS0Jev31bsocS5eAvahxhGhQ=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:66:eb:8d:69:e6:ed:c5:ed:54:ae:32:59:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=70c923549346623fe15a945a668eb8cf6f223c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:4b:3d:42:97:c8:74:7b:e9:71:8c:0a:29:
01:10:95:e8:a5:76:ab:4b:d4:b6:7a:95:bb:44:f8:
99:91:e1:d1:04:74:84:30:a7:02:d5:9e:5e:9d:9c:
fe:c7:25:eb:56:ee:af:b5:4e:ef:ea:3b:1c:e2:c5:
ff:aa:79:ce:3d:e3:21:30:44:51:cf:59:40:f8:db:
2d:f4:3c:c0:59:cd:fe:99:c8:eb:36:18:13:53:e7:
8c:94:2b:4e:b3:bd:e5:37:b4:ac:09:b1:cb:05:c0:
a1:fe:53:97:e1:4a:6b:5e:3b:8b:39:89:e3:b5:9b:
64:f3:a8:2a:53:a4:91:2f:25:b2:cb:3f:a6:82:ff:
55:c9:67:c2:59:2c:59:7b:31:5e:90:99:fb:0e:39:
39:b2:98:ed:95:77:ef:6b:a7:20:3c:d8:e1:6a:48:
6b:b7:76:f4:10:b6:ec:cd:15:2d:9e:71:c0:97:1f:
69:eb:30:be:e2:12:88:53:4a:83:79:6f:39:09:6e:
2a:58:91:e4:20:d9:a7:f2:d3:d9:61:63:24:a1:05:
ce:0e:f1:ff:7a:3c:5b:bd:f5:ab:0a:c3:93:dd:6b:
70:f0:f5:b6:48:1e:f0:ed:87:cd:d3:60:bb:9c:19:
ec:4c:9b:00:ac:94:e9:8d:a8:7a:c0:12:f4:65:66:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:23:54:93:46:62:3F:E1:5A:94:5A:66:8E:B8:CF:6F:22:3C:34
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:f8:46:f2:9c:21:59:64:31:8c:75:52:4a:38:93:2c:2b:
fa:cc:e2:98:d7:82:dd:ba:8c:a7:c9:eb:68:14:42:e9:44:b1:
5d:c8:64:47:2c:b3:ca:20:f3:ec:74:73:ab:6e:a4:17:34:54:
5d:74:b7:d6:d0:e9:0d:40:6d:b5:97:74:c6:69:f3:1a:d5:81:
5a:42:85:b1:61:65:2e:a9:68:6b:3d:11:fe:44:86:11:7a:d5:
fd:52:3e:6b:c4:7a:78:d1:36:1a:cc:81:4b:18:6f:cc:16:41:
5b:ee:ec:62:71:74:e0:52:25:f4:bd:0e:de:c2:05:cc:24:ba:
44:e8:71:85:0c:d6:29:22:76:56:85:5a:41:c0:3d:f0:05:1d:
0a:0d:37:02:18:83:41:49:df:fe:4b:08:20:1b:5c:a1:c3:7f:
d0:c3:c4:8d:1a:7f:72:67:b8:76:49:c7:12:1f:94:b6:fe:46:
06:05:e7:31:1f:9f:21:69:10:6d:a9:f2:39:3f:0d:63:a8:84:
cd:9b:0c:0a:39:8e:23:ac:b7:3a:90:c6:26:d6:3f:73:36:fc:
66:43:79:ec:44:8a:35:f9:74:2f:93:5d:04:00:2c:77:ff:b3:
bc:4f:53:9e:c2:ee:57:48:3b:76:d9:d8:ae:e2:88:71:47:cf:
cf:1f:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:56 2026 by rpki-client