Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: iwadAYhNDatb7Il7LWxkL72ClD3jtKnKZ49/wXTPh4I=
Subject key identifier: 77:35:EC:E1:F4:70:E0:46:1D:07:4B:DB:A0:74:56:E3:D5:57:AD:7D
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019D2AE0DA70319735C3ECE139353D9190D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 16:01:12 +0000
Manifest this update: Thu 26 Mar 2026 16:01:12 +0000
Manifest next update: Fri 27 Mar 2026 16:01:12 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: /00bTYKPYQMtgIkLZW874u+ZwOmIYKQpX4iX3PB9V1A=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:da:70:31:97:35:c3:ec:e1:39:35:3d:91:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Mar 26 16:01:12 2026 GMT
Not After : Mar 27 16:01:12 2026 GMT
Subject: CN=7735ece1f470e0461d074bdba07456e3d557ad7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:75:49:fa:a8:04:f0:8d:98:3f:2b:0e:6c:
d3:bf:60:98:53:c2:8c:d9:25:56:08:3d:6b:06:8c:
49:8f:0a:7e:1e:f2:86:c4:22:92:c9:7a:bd:69:fb:
4b:ee:b6:75:ba:d1:53:bb:59:16:f9:0a:38:3c:f5:
90:51:f9:de:02:40:15:11:56:0d:8c:bd:87:b3:c8:
f9:49:00:da:c2:88:cb:60:5e:52:28:d6:7e:fe:45:
9b:d3:7a:35:40:24:6c:eb:1a:b5:6b:26:5f:15:18:
79:d4:a6:15:6f:84:83:de:09:65:2c:70:b5:88:d4:
31:51:fc:76:36:01:c4:ff:0d:33:12:5c:7e:32:ca:
ba:d0:d6:b6:44:c0:d2:0d:e9:48:eb:62:28:27:a0:
1a:67:63:7e:62:b3:ef:b6:0f:77:ce:38:c2:2c:02:
4c:2e:1d:4b:b8:d7:07:f5:2b:b0:05:13:72:4e:17:
0b:ce:b4:57:33:af:7a:9c:f8:d1:6f:8e:e3:1a:f9:
c2:ea:8c:91:0c:84:ff:24:8a:9e:5f:88:64:bd:7e:
16:c5:ed:0e:58:0a:06:aa:af:73:95:14:38:62:91:
03:bd:14:8f:97:48:07:58:e3:c1:de:68:90:d7:1d:
7e:af:09:57:df:00:99:4b:92:8a:94:21:b6:46:77:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:35:EC:E1:F4:70:E0:46:1D:07:4B:DB:A0:74:56:E3:D5:57:AD:7D
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:79:17:f6:d7:26:da:59:d2:7b:94:c4:9b:82:66:58:76:22:
f3:eb:42:61:50:fe:a5:e4:3a:3d:14:ff:1e:53:09:7e:48:fb:
57:7a:32:f7:43:36:d3:e7:38:d3:37:52:bb:f7:c2:61:51:c8:
36:7d:15:d3:ed:32:e0:00:80:24:4c:04:42:64:0d:a7:28:4e:
d4:c2:8e:4b:f7:6b:e4:38:f9:15:33:a7:0a:61:97:32:9a:e0:
20:56:e8:8b:74:8d:1d:8e:40:35:bc:f6:2a:01:42:ac:cb:9e:
fc:f8:b8:dd:5e:ad:2b:50:d6:98:52:97:5b:34:aa:e5:c6:94:
e2:60:b4:a5:41:c4:1f:d4:77:88:b8:cc:6f:5a:f2:e4:a8:f4:
df:72:9f:22:cb:1f:ea:76:5f:19:55:ee:6d:29:91:b3:00:28:
61:ae:7e:9b:81:f1:16:09:d9:c1:a3:e9:2c:f6:4a:93:1b:e6:
c7:66:bb:ec:b3:78:80:26:63:e3:34:c8:46:82:d3:c1:2c:61:
1f:88:6e:c4:d4:86:f7:bd:23:de:1c:a3:bb:ad:5a:61:95:00:
94:6a:3c:4f:1a:50:b6:91:a1:31:60:43:ce:3e:97:86:50:cb:
6f:4e:e2:02:92:63:a2:75:d7:1c:2c:43:6f:24:b7:f6:5e:86:
1b:af:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:03 2026 by rpki-client