Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: qO4Dvj37QGJ/Bz64+/oZ3+TY6K6UmfrKVMsXC2JsMWc=
Subject key identifier: E0:D7:F5:2D:1A:D7:31:36:CC:99:41:55:F2:45:19:02:7F:1A:1C:08
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 019D28848D370BF27B530CE88CE187B64206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: Hn63LBp3PdxIu53qKZW9TFvtPAsD49i3D2sKeo6q4Hk=)
2: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (hash: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8d:37:0b:f2:7b:53:0c:e8:8c:e1:87:b6:42:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=e0d7f52d1ad73136cc994155f24519027f1a1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:74:fc:8f:ba:3d:39:66:5d:43:e0:75:1f:
9e:cd:95:e0:0e:3a:c4:92:37:64:89:4f:71:ef:0c:
7f:b2:79:c9:c2:08:1c:b8:ff:8e:35:24:24:22:88:
4e:86:c3:00:0a:e1:94:a9:cd:64:83:e2:e2:0d:f4:
d0:75:cd:2d:b9:2e:94:51:8d:67:41:27:ff:da:8f:
bf:bc:6c:18:1d:01:39:dc:bc:ef:03:79:14:e8:71:
0d:35:5f:cc:80:78:55:7e:18:8b:13:f9:13:d7:72:
88:a0:99:5b:b0:6f:a8:02:d8:14:fc:15:a3:7e:ec:
44:e0:97:47:b6:e5:10:cf:5f:3c:d2:30:1e:4a:04:
78:5a:0a:1a:63:e8:f1:69:35:90:89:bf:af:7c:b2:
92:ff:7f:7c:e6:95:2a:4b:a9:6a:c5:19:2c:53:50:
c0:ca:a1:ed:2a:ce:2c:dc:76:75:64:9a:c3:5c:d8:
45:5e:3a:8f:6c:c5:e9:43:3c:54:b9:70:ae:65:0d:
f6:91:5d:01:f5:23:4d:d8:58:c7:49:46:41:b4:e0:
e9:9f:0e:ea:86:ce:83:4e:37:9b:ac:7c:71:01:e4:
70:9a:84:a3:30:56:62:22:43:fd:d6:1c:fa:b7:c4:
3d:9d:c6:27:7d:f8:a0:b1:5b:5a:0a:eb:d8:e6:a1:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:F5:2D:1A:D7:31:36:CC:99:41:55:F2:45:19:02:7F:1A:1C:08
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:b0:90:95:1f:96:7a:c4:6d:35:24:20:12:5f:00:e2:0f:
2a:c2:38:3b:10:34:31:76:42:3b:2c:18:28:48:61:e4:f3:0c:
14:4b:05:68:66:8c:b9:ab:b0:43:5f:17:e9:d2:9d:fb:d6:9e:
47:34:92:15:bf:3c:5c:38:ef:c2:e7:ee:32:e8:0e:b8:00:12:
3b:02:76:18:52:a4:b6:b3:6d:f4:9b:e9:9b:d9:87:98:93:96:
f5:d7:e2:3b:18:df:ae:0a:9f:d3:2f:3d:b7:d3:f0:dd:a6:ec:
0b:62:67:c3:5f:4b:ca:8f:b2:76:6a:2f:47:3a:a1:f6:dc:dd:
1a:20:02:2f:c9:a3:e9:bf:c9:e8:3a:0b:f4:5f:c6:3a:d3:a3:
a5:31:89:21:18:b9:0a:d5:b7:ea:de:ee:79:d1:c8:58:8c:ff:
6b:83:93:a5:bd:c8:5a:bf:a3:98:5e:f0:7b:0a:76:37:1a:d8:
28:a4:3f:bd:44:92:29:97:74:f6:7e:ac:26:ff:ff:be:95:4e:
85:94:ba:f9:d7:67:e2:94:83:39:ed:38:2c:ab:ab:86:c7:17:
a2:d7:e6:6b:3b:29:ce:13:cd:88:fb:ef:8f:a5:47:50:7a:4c:
14:e8:20:f0:68:13:19:ac:ba:ad:2e:da:84:af:dc:99:1c:4e:
ba:c2:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:19 2026 by rpki-client