Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: WBZl++L1azyqnsm/Ufn8B8VcJk5Cs7j4HaFdQDeqvow=
Subject key identifier: A8:96:A3:AD:45:95:E8:BF:46:0C:55:1F:E5:49:1A:AD:0E:8C:24:29
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019D2960DB8941C3C634262FFF63C552C205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 13AF
Signing time: Thu 26 Mar 2026 09:01:46 +0000
Manifest this update: Thu 26 Mar 2026 09:01:46 +0000
Manifest next update: Fri 27 Mar 2026 09:01:46 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: Y7A3O/TJJ/Jmbz6o5aEnxTklk3akQdjF8GE8onFftLA=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:db:89:41:c3:c6:34:26:2f:ff:63:c5:52:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Mar 26 09:01:46 2026 GMT
Not After : Mar 27 09:01:46 2026 GMT
Subject: CN=a896a3ad4595e8bf460c551fe5491aad0e8c2429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:01:c2:64:7b:16:7f:8b:12:08:25:58:13:
26:8e:36:70:c0:b1:22:00:3d:41:62:8d:e8:15:50:
a1:f6:4e:8d:ff:13:b0:02:a3:f2:a4:72:60:f9:12:
64:c2:90:1e:3d:d2:bf:44:3b:07:0a:63:38:73:7c:
27:82:50:a3:b6:be:9c:4e:68:85:d1:58:70:d2:01:
2f:f1:ee:d4:f1:f7:3c:eb:86:50:b2:bf:06:f0:4f:
bb:1b:fd:26:85:e2:e4:50:f1:d2:79:21:e7:17:04:
ca:7f:3c:38:b0:b6:c3:1f:54:9d:92:c8:26:6f:23:
b4:fe:10:57:fd:95:bc:b8:52:1a:21:7d:85:28:63:
cc:5f:1a:5e:4d:47:42:b5:77:e9:e6:65:fb:d5:d1:
39:a7:86:31:2a:d7:b7:51:7f:cc:e1:56:21:ad:c2:
43:95:3b:a8:a0:bc:62:bb:a5:76:89:9d:dc:03:6b:
d4:eb:1a:13:55:2b:e5:97:f6:4c:09:2c:77:a4:b4:
49:74:89:d3:93:c0:14:2c:0f:de:4f:6c:72:ae:ed:
bb:1a:4b:15:fd:b1:62:83:aa:18:24:4a:d3:9e:28:
d9:05:6a:9f:2e:31:df:8a:c5:79:66:6c:9c:96:dd:
bd:79:c3:fd:77:bb:cc:dd:64:9a:9b:76:b6:b9:a7:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:A3:AD:45:95:E8:BF:46:0C:55:1F:E5:49:1A:AD:0E:8C:24:29
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:63:2a:df:0a:6a:8d:7a:01:1e:cf:55:82:27:e1:61:43:
14:aa:fe:1c:49:49:25:83:81:f4:5e:b6:d7:bc:9a:47:74:b9:
b1:6c:d7:8e:b5:cf:e1:d1:1d:e4:9a:47:ec:2b:6d:90:a8:26:
08:b4:94:a5:65:0e:21:84:47:97:89:5c:c9:01:bb:eb:2b:85:
b7:93:eb:01:3c:ea:02:e3:4e:e8:14:d8:c2:10:e7:db:39:64:
8d:72:66:8b:7f:5d:7f:65:f1:a8:5b:db:69:ed:d1:6d:6a:f9:
62:68:dd:c3:6a:8c:7b:84:57:65:3c:ec:72:19:d9:62:c4:82:
38:73:68:06:1d:f6:0c:a4:28:53:7f:db:96:a7:de:91:c3:c8:
20:02:23:68:74:35:fd:4d:db:38:74:6c:13:45:3e:14:b0:cd:
48:83:56:6b:79:a1:c2:fd:23:70:8e:77:fc:45:d4:20:55:fc:
4d:98:6e:4a:0f:f9:6f:da:14:08:06:88:31:90:52:35:05:c3:
5b:17:a6:5a:da:99:a7:da:6b:09:94:17:74:84:b6:92:b7:bb:
ba:2c:f0:bb:f0:92:64:6a:44:73:1c:19:eb:f4:a0:87:7f:18:
01:61:e2:96:96:2f:a0:5b:fe:05:46:39:e6:7c:8d:e7:03:2c:
a3:53:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:41 2026 by rpki-client