Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: LqD5gWXU/fokcX6JLxn7B7kkM1ouPV5hALmbQFdwGcg=
Subject key identifier: 6F:8B:53:59:5F:F3:27:2A:AF:46:D0:37:41:3E:C3:B5:AD:C8:B9:29
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019D273A979B64DD9C40DE5FF45441D6B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: TAdKnU3CCoMhwV7MzFfNTCIvmzV445TzVdQG1bjNYcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:97:9b:64:dd:9c:40:de:5f:f4:54:41:d6:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=6f8b53595ff3272aaf46d037413ec3b5adc8b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:7a:30:dc:7d:6b:98:a7:36:40:10:e7:b8:
6f:d9:df:c7:3b:ed:0a:5d:2a:ee:0f:c8:a8:8a:fb:
26:c4:d2:8c:ee:51:3a:aa:73:fe:68:bb:9f:25:ad:
c6:bd:66:45:7f:76:4b:33:8c:34:bc:cb:79:d0:0a:
5a:ea:b5:c7:d9:7b:9a:a5:29:b9:09:d1:01:32:b9:
9f:6d:e5:84:69:9f:9d:21:82:a9:32:f4:1c:46:86:
3c:89:05:7d:b7:d6:86:72:48:e9:16:ba:05:74:d6:
69:54:29:74:6e:0c:29:de:2e:22:6e:25:af:23:31:
5a:29:cf:f7:1c:ff:13:82:42:bd:20:1a:7c:c3:3e:
4d:59:d3:c9:7a:e8:da:25:c1:d2:b2:fd:ef:c7:10:
d6:cb:0b:b4:8d:c1:e2:18:32:2f:3c:93:a1:2a:7e:
ec:b5:73:74:94:c8:a4:d9:8a:09:f9:54:3c:38:16:
52:c6:97:40:21:50:ad:a0:41:22:57:22:0f:8d:0e:
cb:d6:61:85:4b:2e:7a:a5:59:e1:cf:bf:85:52:4a:
80:87:0e:a8:91:63:48:c9:58:b0:83:d7:f0:5a:35:
cd:56:49:55:4a:d3:61:35:27:b3:57:10:07:1d:63:
d3:c8:d5:03:d2:e9:9e:ab:2a:c6:22:03:80:81:8d:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:53:59:5F:F3:27:2A:AF:46:D0:37:41:3E:C3:B5:AD:C8:B9:29
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:25:4e:4c:83:2a:49:57:35:3b:c8:57:e8:33:62:a5:63:04:
3c:23:fc:6b:d2:b4:c4:ab:df:37:e5:a4:8e:1b:ed:56:99:1e:
d2:67:19:63:5d:af:09:2c:6d:f4:3a:1a:58:88:7a:d4:c2:46:
7c:27:6b:76:5c:58:2d:32:59:b4:6e:be:5b:5b:7c:9b:52:91:
3c:95:83:0f:27:39:7d:19:f9:3b:b9:30:a0:51:ae:ff:6c:8c:
5b:85:62:5b:ac:31:eb:3b:92:f7:c7:85:58:2b:04:a4:cc:45:
61:0e:a4:00:cf:cc:d6:01:f5:fe:03:bf:38:c9:08:e2:e3:fd:
6c:48:f5:d9:13:b6:f2:be:e7:a6:60:a8:15:7a:3a:2e:21:d9:
66:18:42:6e:ed:19:b5:7c:ea:17:11:a4:1f:ab:1d:78:38:e0:
fc:ec:f6:5c:d5:64:ac:d6:b8:b6:fe:2b:ce:34:e0:f0:41:69:
70:4d:66:68:07:ed:6d:6c:27:12:af:83:34:78:0f:fc:e7:c7:
e9:94:4b:1d:31:b9:10:b7:75:18:97:ec:1e:67:61:ed:85:5d:
26:c4:a8:ec:5d:92:82:c4:8a:a7:cb:6d:a5:b8:04:0e:b3:36:
66:06:20:62:f0:99:2e:5b:45:98:ab:29:aa:5c:41:4e:4f:eb:
ee:d8:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:41 2026 by rpki-client