Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier: imzg4LmzQwpCp6r+LwdiJFNhEt5+3yJLLTEtARMzmRI=
Subject key identifier: 8A:1E:E3:B5:63:02:1A:32:13:6B:84:C2:23:C2:6B:AC:2B:7E:B6:CF
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 019D27DFFA94603324EA1049F60BE9F157DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number: 1159
Signing time: Thu 26 Mar 2026 02:01:23 +0000
Manifest this update: Thu 26 Mar 2026 02:01:23 +0000
Manifest next update: Fri 27 Mar 2026 02:01:23 +0000
Files and hashes: 1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: CG0sMCMKK7h7hNb9f8KHFXXJKKo2nSHtYURKc0DB8P4=)
2: CXq1ehXWNMHefU8KADZSUiW5JNQ.roa (hash: IQLBY624JMgfLXTy5NdATSOazp1jTQpenvXMhkZX3P0=)
3: U_-oEqDoqq4pyChyVJLsATa4hF0.roa (hash: 8Yj0FUG+yJPUHzOrojBoyPpjqX+h2j3Dx9uPO5dyJKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fa:94:60:33:24:ea:10:49:f6:0b:e9:f1:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Mar 26 02:01:23 2026 GMT
Not After : Mar 27 02:01:23 2026 GMT
Subject: CN=8a1ee3b563021a32136b84c223c26bac2b7eb6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:db:89:18:d5:70:14:e1:92:b8:f4:61:5a:
b1:1f:05:5d:7b:eb:fe:2e:dd:41:7f:4d:a6:41:2f:
cd:44:5a:00:23:19:b3:1a:bf:62:c2:c0:53:9f:38:
48:17:dd:41:d1:ed:62:44:80:17:e8:e8:10:7f:bd:
a4:9b:c9:82:2b:4d:6c:9f:6a:f0:af:e1:27:a8:f4:
8f:70:bb:c4:11:d0:11:2d:11:3e:d1:32:df:82:0e:
a3:ae:e3:28:ec:46:35:65:2e:68:fc:03:0a:2c:5d:
b0:0e:d2:b0:96:19:dc:04:8b:af:1b:93:64:63:8d:
9d:f6:cd:0e:b8:20:83:12:fd:67:0d:09:df:bc:a7:
25:61:11:9c:50:f2:7b:cb:96:54:d9:a2:7e:0c:b1:
88:61:f7:59:04:9c:13:8e:f1:de:c3:d5:6a:e8:9b:
f1:12:5f:a3:c8:d1:9c:34:93:53:87:84:69:88:5e:
5c:e1:ca:6b:5e:f4:19:d8:14:30:07:61:cc:63:32:
3e:5c:15:82:94:a6:57:ff:21:a7:fb:01:1c:bf:76:
bd:ee:4f:71:3a:73:ac:41:a2:89:30:2f:ae:a8:c8:
07:4f:16:2b:aa:20:03:da:3e:de:1c:63:8e:15:f7:
9a:1e:53:8c:56:3f:24:62:db:99:24:ed:cb:63:07:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:E3:B5:63:02:1A:32:13:6B:84:C2:23:C2:6B:AC:2B:7E:B6:CF
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:c7:3a:1b:84:4c:af:46:6d:32:dc:4d:92:03:7d:72:8e:
57:53:56:f5:ba:3f:0c:26:bd:7d:f4:89:3d:77:ba:99:ac:fb:
f4:06:2d:5d:93:82:c8:04:3e:39:f1:ee:38:f6:87:c2:1b:11:
28:ac:4f:cf:ec:f6:5a:64:e7:c1:8b:b1:e1:73:11:95:39:8a:
dc:5d:36:92:ca:46:bb:c0:b9:f2:45:c0:fc:47:db:31:39:af:
e1:cc:5c:fd:6e:4e:ea:cf:3a:22:dc:ed:0b:72:57:71:8a:2f:
fd:e3:37:fe:0f:b9:68:d6:a7:46:cb:dd:42:3b:b6:75:06:84:
ec:dc:dc:56:6c:cc:e6:8b:ad:c0:37:40:f8:73:ef:42:30:7f:
99:33:b7:74:4c:c9:b0:a7:d6:99:1e:d7:6b:14:ac:47:fc:9c:
be:fa:ad:73:bf:9f:86:16:7e:ba:53:1e:fe:e7:68:13:d8:2c:
5c:00:98:78:00:d2:7c:6a:bb:b4:83:60:37:d8:f5:c9:f9:93:
80:56:5c:e8:5a:8e:67:4c:94:99:1c:3b:5d:2d:60:71:2a:d9:
4e:16:a0:b6:90:99:b8:a3:39:2e:dd:73:28:cb:92:78:0e:99:
76:7d:17:2a:f9:be:7d:14:a3:00:4c:3f:49:2c:31:34:39:20:
7a:cf:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:35 2026 by rpki-client