Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: hIraYqoXYOdsOhLDdAPVZ2g3qrGERlj22+Ib69TYeYE=
Subject key identifier: 6E:8D:34:CD:CC:52:8D:66:EF:1A:56:89:EA:83:7B:45:85:F3:FB:07
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 01A0E32B4CDCD750A3C4ECDCABB4C6FBD067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 150D
Signing time: Sun 27 Sep 2026 14:01:00 +0000
Manifest this update: Sun 27 Sep 2026 14:01:00 +0000
Manifest next update: Mon 28 Sep 2026 14:01:00 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 9Gsz7Faoa0FSVWPRrag4o+uUwGPZ9JR2lJ6dPJn4ouM=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:4c:dc:d7:50:a3:c4:ec:dc:ab:b4:c6:fb:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Sep 27 14:01:00 2026 GMT
Not After : Sep 28 14:01:00 2026 GMT
Subject: CN=6e8d34cdcc528d66ef1a5689ea837b4585f3fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:a2:2a:3c:fe:df:3b:65:b5:66:0e:83:ed:
9e:5c:85:74:c0:c5:ef:a6:32:f4:9d:eb:d9:73:69:
e9:7d:c4:93:62:36:21:a6:17:23:ec:ca:5f:1e:27:
06:b6:c3:74:de:be:d9:4c:d0:ac:c0:dd:75:e0:a1:
2d:b6:1d:9e:9f:f9:e5:fc:fb:39:a6:64:b2:16:fa:
1a:af:c2:04:a4:12:6a:69:a1:60:62:ac:d3:5b:ff:
6e:c1:79:22:e9:ce:34:8e:df:bc:a6:07:c2:d3:c9:
9f:13:82:5c:f8:35:41:a1:d1:57:8e:b7:e0:f5:b5:
5b:b8:b2:3e:12:97:dc:65:60:57:b7:59:4e:66:6d:
4c:b9:45:9e:90:c7:16:ef:d0:c6:eb:b8:5b:64:e2:
08:76:22:00:18:88:b3:1b:64:44:a2:75:4c:1f:7b:
d7:47:9b:36:eb:27:60:5e:3a:fc:43:80:63:d5:81:
5a:44:07:51:f8:f0:d9:a0:ef:c6:f7:52:cf:ab:f3:
b3:5c:cc:06:5b:b9:4c:44:7a:1a:18:7a:e1:76:76:
bc:6a:e0:26:ff:53:b2:e4:96:ec:05:cd:35:26:e3:
3f:80:8c:42:94:cc:99:3d:b7:ac:5d:eb:f8:3b:3a:
3a:66:62:3f:9a:28:88:b8:a6:03:d2:68:40:7b:e0:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:34:CD:CC:52:8D:66:EF:1A:56:89:EA:83:7B:45:85:F3:FB:07
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:04:98:d4:40:5f:56:45:7c:52:29:69:63:6c:f7:48:cb:6f:
01:db:64:a0:c5:5b:cf:58:23:a7:1e:35:49:ea:2c:1a:55:48:
a4:b1:50:21:9d:0c:0f:53:f9:b9:28:3f:15:66:72:92:ac:10:
d3:d3:16:56:f6:fa:bf:d5:e9:9e:3f:f0:b9:8a:2c:3b:46:f8:
17:dd:77:4d:5f:ad:59:e5:89:43:d5:4a:75:e3:e6:e6:d4:97:
15:db:7e:11:5f:c7:9e:a9:78:91:ff:f0:3b:f5:d5:32:02:85:
d3:0e:c2:6d:e0:b3:4b:3d:a6:1c:79:e8:77:19:84:46:e9:5d:
e2:a7:df:ef:10:b2:23:25:87:83:be:6d:9d:4e:40:c7:13:dc:
17:af:97:2e:88:04:78:d8:28:b4:1d:61:45:1b:1c:36:22:ae:
20:db:1b:45:7e:cf:a8:bf:99:f2:28:be:c4:c9:f4:19:4c:d9:
87:6f:d0:b2:08:9e:24:01:22:27:64:94:b6:a7:aa:18:00:47:
7e:54:23:90:b4:18:38:ae:3a:b6:8b:d0:45:1d:58:ab:1b:35:
e9:0b:f6:4d:08:e7:dd:4b:83:9a:48:01:8c:fb:94:7c:3f:78:
e0:60:07:d5:a3:0b:00:73:d1:42:4f:cf:c3:95:76:7c:18:a4:
05:d2:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:56:11 2026 by rpki-client