Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: h7Y2AWGeA4vvDHKPxKup+yLIJ7mBmj0/pBvopVpDpMM=
Subject key identifier: FC:5E:6A:4E:0C:F2:98:0B:09:7A:DE:C7:1D:ED:B7:F9:45:7F:12:52
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019D2695C5F8F86B1D700213BD401F9F28CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1845
Signing time: Wed 25 Mar 2026 20:00:42 +0000
Manifest this update: Wed 25 Mar 2026 20:00:42 +0000
Manifest next update: Thu 26 Mar 2026 20:00:42 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: c3l+iwuow+RsG26OaM1dKT04pQ0EwNLackSYlXtdT0Q=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c5:f8:f8:6b:1d:70:02:13:bd:40:1f:9f:28:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Mar 25 20:00:42 2026 GMT
Not After : Mar 26 20:00:42 2026 GMT
Subject: CN=fc5e6a4e0cf2980b097adec71dedb7f9457f1252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:fc:c3:45:c5:c0:e6:d6:18:29:fc:8a:ae:
2c:5b:47:92:1f:ea:50:dd:c5:10:4d:1f:63:43:87:
02:02:a6:b7:cf:3d:80:2c:7c:bc:38:15:47:b2:29:
07:4c:37:47:d1:cf:6c:b8:73:2a:39:06:d6:fc:f3:
d3:61:dd:88:61:d9:2f:3d:9b:2b:1e:7d:04:6e:e2:
ad:3f:bf:b8:80:04:05:37:9c:e4:8c:52:23:11:e8:
65:85:34:74:30:74:38:c3:fe:c8:5b:de:0d:54:7d:
57:66:bd:68:29:87:72:6a:12:7b:8f:68:b7:cc:cc:
9e:eb:31:0c:79:99:e8:83:2a:4a:41:df:72:5a:03:
af:9c:6e:79:89:4e:02:36:28:c3:b0:ec:50:1c:56:
bb:42:b8:42:11:31:d8:95:4d:58:93:88:21:a4:a8:
c1:3c:75:0d:41:ae:96:ec:19:b9:85:bf:2e:cb:2a:
c4:6a:8d:d5:a1:09:44:8a:4d:5a:e5:86:f6:6e:76:
fb:22:fa:e5:92:c2:ef:41:da:01:8a:f4:ec:d2:e9:
58:da:d1:03:95:49:15:f3:41:e4:fe:3c:c0:0f:56:
b0:c6:41:53:96:8b:71:02:12:53:13:50:da:ca:90:
b5:55:16:14:6d:08:58:06:ad:0d:c1:71:02:26:68:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:6A:4E:0C:F2:98:0B:09:7A:DE:C7:1D:ED:B7:F9:45:7F:12:52
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:59:5c:fc:d4:99:bb:83:10:97:85:50:22:d2:9f:5d:11:
e4:9f:ec:79:44:20:8a:a8:7e:d8:fc:0a:15:b6:af:e0:44:d0:
96:88:6c:f3:5f:c8:a0:89:3a:7d:83:4c:7a:60:a4:f3:0b:20:
ad:77:9a:4c:6d:b1:e7:41:26:25:2c:2d:71:9d:44:69:fe:fd:
be:14:1b:aa:31:f1:26:ed:e1:ff:49:60:67:ca:45:30:50:74:
a7:ab:df:51:a0:c9:14:b6:27:05:8f:5f:31:69:72:97:08:2a:
dd:aa:9b:1a:34:a6:3c:ea:fc:e1:e2:0e:19:9b:d3:b9:e5:a9:
e0:7a:80:50:6f:4c:98:74:e1:11:ca:49:64:9a:b6:9f:d0:a6:
72:ea:5b:ba:45:54:8c:6a:12:5d:cd:cb:b2:0d:a2:a6:67:05:
c6:63:39:37:4e:db:8b:f8:c6:12:80:f6:b4:a3:e5:4a:4a:99:
36:41:04:2d:90:39:aa:bd:f3:6c:05:ab:28:6e:9d:37:75:46:
db:74:e9:05:99:70:87:5a:d0:5d:3c:c6:2d:8b:9c:04:a0:ea:
57:e3:33:a2:be:87:26:8a:ae:8d:39:58:5a:c0:ef:0b:c2:f4:
42:6d:7c:5a:8f:89:8d:29:ba:ea:9e:19:6d:3b:f7:26:48:ef:
0a:1c:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:51 2026 by rpki-client