
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: JS38swPhxAYWf+pmcL7c6eUWWc8HjeGE3fPyc6DrYpU=
Subject key identifier: CB:E8:7D:25:F7:EA:16:1A:E5:57:D1:F5:78:1F:A7:86:0B:2A:D8:31
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 019D273AE729F38828F1EA64F9258CD703DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: CAHGYWg1HXKVxIMYsWMtS/IuhnztA+ZCH1GDZsH+vS0=)
2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e7:29:f3:88:28:f1:ea:64:f9:25:8c:d7:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=cbe87d25f7ea161ae557d1f5781fa7860b2ad831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:95:c3:56:22:0b:12:a5:69:61:ca:7e:37:94:
c1:ac:ed:36:17:39:bc:ff:31:54:0f:4d:b1:1a:b6:
bf:47:ae:6a:7e:fb:b3:d1:fd:7a:65:92:8f:82:dd:
2d:31:56:c8:11:2d:88:b0:79:54:9f:34:ab:ac:9d:
ce:64:43:25:7b:0d:04:70:2c:aa:21:e5:c1:20:97:
a4:52:b8:bc:ec:3a:8d:61:33:75:bf:84:4a:7d:91:
df:4b:4d:c5:26:d5:c3:0d:ca:c3:2f:df:f8:10:48:
63:e2:e6:a8:d1:87:4e:a0:6a:53:08:c1:c4:07:2d:
32:6f:f0:cb:f4:fc:4e:38:5e:c9:4f:e6:ec:7a:fe:
1b:a3:75:56:4e:d4:68:60:c1:52:70:93:c4:3e:28:
ef:b3:fb:ce:4c:a1:2d:4d:a7:79:05:3d:3e:3e:6a:
52:dd:b5:8f:72:62:2c:05:c2:1e:83:78:4a:38:04:
69:ca:54:a8:06:86:f2:d0:a5:a9:2c:e2:e2:54:65:
44:38:72:50:f4:5a:44:7d:16:c5:f5:bd:73:7a:22:
cd:97:df:6b:8e:e8:4d:7e:90:26:55:5c:1e:d5:13:
68:36:ac:67:74:a7:b5:52:fe:45:9e:10:e0:37:65:
7b:5d:e6:fe:20:0b:ff:59:ed:96:5d:ca:9d:b1:06:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:7D:25:F7:EA:16:1A:E5:57:D1:F5:78:1F:A7:86:0B:2A:D8:31
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:05:2e:ad:22:4b:12:ea:4c:e5:8d:cf:4b:78:f9:3a:bb:
87:63:d3:b2:47:da:6a:0b:71:e0:a2:b6:2c:a4:1e:dc:fc:e8:
23:3a:3e:b2:45:9d:44:d3:4f:fe:d3:68:3a:59:d1:06:74:5b:
0a:76:a2:ae:70:7f:01:d9:68:48:e1:b8:53:8e:70:5a:9c:86:
27:2d:d7:f6:5b:e3:ad:5e:08:af:f3:26:73:a4:ec:8e:6b:ca:
8b:73:68:f1:f0:53:3e:27:f5:40:cf:2a:6d:e6:e4:53:f1:fb:
6d:be:30:59:ab:a7:1f:21:e9:7d:10:6f:ec:dd:d9:e0:5c:9b:
6a:74:a5:8e:b2:1e:0f:d5:69:07:6e:95:a8:88:62:cf:0c:4d:
eb:a9:c4:a7:e1:57:b9:c9:af:68:11:d2:93:4b:2f:52:48:86:
22:d1:55:6f:1a:e0:10:a1:8b:9b:8f:ab:38:ee:61:39:b3:85:
b2:96:cf:6a:3e:d0:4a:83:46:f6:e3:e1:13:2d:27:13:4b:fc:
16:4e:6c:d0:6a:51:7c:9a:db:60:65:30:55:56:de:c5:5d:df:
1f:d6:45:c9:54:11:b9:82:6b:40:a0:27:16:4b:6b:98:37:52:
5c:2c:89:6c:45:3b:bb:ab:c7:e4:35:03:fa:99:5e:62:26:02:
da:70:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:32 2026 by rpki-client