Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: NmQnV5KZe0S2+28phs2U/rcsPySKRKwqKxwq0UcYl2c=
Subject key identifier: C4:2C:7B:5C:21:A6:0A:25:56:2C:B2:6C:73:C3:4E:84:78:26:3E:F0
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019D29296ACB38C0685C3C23D95F949D230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 131F
Signing time: Thu 26 Mar 2026 08:01:13 +0000
Manifest this update: Thu 26 Mar 2026 08:01:13 +0000
Manifest next update: Fri 27 Mar 2026 08:01:13 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: QIaqPlTz7pBbj+fZkmDe6O1NvsUq5AkxhSP94z1teXg=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6a:cb:38:c0:68:5c:3c:23:d9:5f:94:9d:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Mar 26 08:01:13 2026 GMT
Not After : Mar 27 08:01:13 2026 GMT
Subject: CN=c42c7b5c21a60a25562cb26c73c34e8478263ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:ec:79:89:f4:41:75:47:6e:61:49:0c:6a:
89:60:60:8b:d6:1d:7b:78:bd:06:43:48:55:b0:93:
1a:87:65:d8:08:34:74:cd:bb:b2:84:2a:fe:d6:75:
55:7a:f8:68:b3:6f:90:88:ec:f9:b5:4f:1e:31:72:
66:62:51:0d:1e:de:a9:4e:b2:b0:d5:eb:e9:fc:89:
20:39:a5:dc:0f:e6:91:34:ae:c5:6a:4c:ec:e9:04:
14:a4:e5:99:a1:32:6c:ea:1d:66:99:d3:bf:3e:8c:
04:62:f9:18:4b:4e:cb:0a:74:40:81:a0:88:db:3b:
28:72:71:e3:68:d0:4f:05:b2:ad:12:4f:fc:03:0e:
33:03:32:00:c9:a2:5c:0a:40:32:3b:8c:2a:1a:aa:
e5:00:8b:8a:9f:82:91:34:c7:1f:92:91:66:da:f2:
ee:91:b4:7b:af:aa:32:c9:77:eb:7f:7f:9a:a3:a5:
61:b6:5a:b2:43:6a:cf:cd:ae:85:f5:24:bd:55:ba:
75:f3:b8:51:f7:62:fe:3a:51:2a:3b:22:52:1d:0d:
15:a7:bf:a9:7a:71:95:da:7c:00:db:38:cf:8e:42:
24:4a:45:63:01:36:4b:5b:bc:81:31:b7:40:ec:8e:
3d:32:1f:11:ac:b7:ab:04:08:6b:99:74:47:a3:cc:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:7B:5C:21:A6:0A:25:56:2C:B2:6C:73:C3:4E:84:78:26:3E:F0
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f7:45:a6:86:38:0f:44:e2:2b:2e:70:fa:8f:41:b0:16:f3:
09:05:8a:87:14:00:25:19:cf:67:94:48:3e:12:60:68:f3:f7:
4a:3d:f4:de:8e:99:ad:ee:23:41:06:37:ce:e2:a2:ce:0a:8b:
d2:a9:b8:d0:0e:84:97:c6:9d:c5:20:f0:1a:d2:ae:a0:9b:3c:
19:68:54:3f:d5:e3:1a:7a:3d:1c:41:d8:33:04:2d:39:78:61:
14:68:34:34:08:8c:b8:bc:5f:78:f9:2f:66:64:8b:41:81:12:
60:3b:77:79:5d:a3:68:25:0d:2c:0f:ec:d3:76:17:3d:bd:f8:
91:01:3c:fc:5d:00:2f:46:d4:70:6c:e2:2d:28:90:f4:66:b6:
e8:e0:df:9e:ef:e7:91:0a:14:2e:a8:5a:4c:14:93:9d:d2:01:
8c:bd:8e:70:34:4e:92:ab:ed:34:11:bc:54:34:f0:76:86:52:
f8:80:15:12:2d:f3:cc:2f:4f:65:e0:1f:26:82:41:57:9f:d2:
52:74:63:d7:4c:05:e8:bf:49:2a:87:c2:9d:35:32:f2:4a:a0:
60:16:8d:ef:4a:47:e6:20:00:4c:ab:07:ff:67:d4:9e:d5:99:
8c:12:a4:26:0d:a8:f4:66:a4:6a:c2:1f:f8:48:0a:e1:c0:2a:
ba:70:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:55 2026 by rpki-client