Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: +ymk+XTNkkcaatPZHsiJMjhcEjpr1hzh67fquv2b2bc=
Subject key identifier: 12:6D:8A:93:8A:8C:05:E2:E2:09:51:7F:4C:01:32:FC:17:9C:1E:E9
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 019D265FBF83D4354DDF0791334F1E1E65D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: AcQ4einPuIFGw+eHanUSwfWfLZTqd3yJ7c9q0inuWiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bf:83:d4:35:4d:df:07:91:33:4f:1e:1e:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=126d8a938a8c05e2e209517f4c0132fc179c1ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:bd:53:f2:3f:ef:5d:61:ab:a1:26:07:f9:
3b:60:d3:54:1f:75:11:f4:20:0d:e8:f6:2b:cc:af:
51:3b:b3:1c:c8:ab:b5:93:9e:3c:48:76:d7:85:7b:
42:27:a2:b1:21:ae:12:c2:55:b9:82:d4:90:b5:fe:
06:23:26:89:fb:b4:d8:a6:a0:37:93:34:ef:cc:89:
81:23:41:c4:80:d0:e5:f1:55:d4:f7:c9:3e:c8:e7:
63:2b:af:f6:c1:4f:47:27:8b:f0:06:d0:5d:31:23:
94:db:b6:4d:2c:98:2c:bd:9d:01:50:f7:85:51:8b:
f2:9a:9a:e3:fb:59:ed:3b:28:fb:21:10:9a:2f:df:
a5:2f:d3:3c:e7:87:df:6d:88:e0:cd:f8:79:2b:fc:
a0:01:41:28:67:3c:8e:cf:32:eb:08:b6:1c:d2:f0:
f5:8b:77:ea:f1:5c:55:51:25:8f:4f:43:7f:bf:db:
90:dc:0a:22:ab:66:07:f2:73:b2:db:01:48:9a:56:
dc:73:3e:17:98:d9:6b:50:e7:85:f6:d2:21:84:88:
16:1d:c0:cd:6e:c1:74:fa:8f:1e:d5:9f:00:91:24:
5d:b5:fc:de:4c:32:4c:86:5d:f1:82:d9:e0:7b:1b:
70:fd:02:1d:45:9e:6e:0e:a1:5a:3c:fa:37:48:32:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:8A:93:8A:8C:05:E2:E2:09:51:7F:4C:01:32:FC:17:9C:1E:E9
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e1:d3:71:86:82:c4:3d:17:2f:18:97:37:0d:60:d1:69:97:
ba:bd:1c:9b:35:e9:3a:fa:ec:50:f7:e2:96:99:99:1c:48:48:
cf:41:d1:6d:6b:c6:cf:65:e5:4e:34:95:77:66:9a:74:69:b9:
9b:8e:ca:ed:9f:8f:8c:04:78:d0:97:50:f2:c9:1a:1f:24:a8:
18:50:f6:05:7d:4e:ca:06:6d:49:1f:63:a7:de:91:cf:26:d2:
26:9a:37:be:99:5c:7e:59:24:04:87:3e:d8:57:63:00:b5:01:
be:df:e1:3b:b6:ea:9a:a5:3a:25:12:b0:a5:2f:85:7c:62:13:
da:45:d1:49:84:8d:b3:a8:c0:d0:0d:e6:9c:c0:7e:ad:76:58:
52:51:32:f2:ca:9d:65:6a:7f:b5:90:1d:95:98:c8:e5:e8:04:
d8:92:fe:54:fd:f6:72:e5:90:5c:ae:2b:f8:68:00:d4:33:22:
62:91:35:71:ff:71:86:2e:bd:72:ab:cd:63:ff:90:67:72:03:
38:04:2e:bf:40:75:60:6c:3d:a8:27:1d:a5:cb:31:39:66:a7:
2f:df:b6:f8:ee:ad:b5:3c:70:e5:26:05:cd:37:64:2e:b3:29:
74:03:fd:63:78:bf:ab:9c:af:8a:5f:62:09:3b:e2:0f:4f:56:
34:7f:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:47 2026 by rpki-client