Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: bg0i+CbwpBi8O4xPGcz9unSCgsqu/YF3ZioqmLqCicE=
Subject key identifier: 44:F8:C7:A0:7B:BC:8D:0F:E7:4F:2E:F7:68:8F:24:20:B1:E0:0F:BA
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019D25F13B427B7A6CD7D558DDA9A0DBC41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: QFrVpppfUe0pWKuCdICl/XfFdwHTuqPeuRL/MBape6A=)
2: crGJsaUqkVJvevG7S1aR5kRrjuk.roa (hash: JplAsFQ7Xa/4SQCkj3u1taRZpnPpuKuRz//hnGEkFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3b:42:7b:7a:6c:d7:d5:58:dd:a9:a0:db:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=44f8c7a07bbc8d0fe74f2ef7688f2420b1e00fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:e5:ed:f9:04:53:2e:cf:14:1c:8f:9b:0f:
cb:21:40:51:66:3a:e1:44:95:56:d3:5c:7a:67:84:
c6:56:d1:94:80:a6:1f:80:da:7d:3e:69:40:44:ea:
a7:ef:eb:b3:3f:8b:5c:68:0c:66:31:43:4e:46:90:
d3:63:5d:0b:db:5d:50:de:8e:1f:dc:06:a4:6c:75:
90:99:ac:fa:22:a2:df:da:20:95:31:80:f1:4f:11:
e1:92:e2:b5:b5:74:b3:49:7e:de:4b:34:e7:84:3b:
b4:07:53:d9:d9:0e:07:e7:a3:fe:7e:27:e6:9c:51:
47:8a:44:7e:96:7f:eb:cb:63:6e:b1:7f:9b:03:de:
7c:98:3e:9a:f9:f9:3f:9b:73:09:16:78:dc:3c:e8:
5d:93:8b:ce:11:65:7f:fb:80:6b:a5:c3:be:16:df:
bd:a0:c1:a6:c3:cf:e8:f6:26:5c:4d:71:9d:66:b3:
3f:ae:46:81:da:79:2e:cb:e6:84:31:63:97:d6:99:
a1:f8:46:9c:99:15:82:7d:b4:20:3e:36:d1:3a:e3:
af:5b:4d:79:88:91:a8:f4:5e:00:08:42:a8:0c:81:
29:46:f2:d3:bd:b7:27:0e:62:f0:ac:78:ac:41:1e:
62:88:ff:cf:64:81:ba:2c:e7:f7:2b:84:cc:6d:30:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:C7:A0:7B:BC:8D:0F:E7:4F:2E:F7:68:8F:24:20:B1:E0:0F:BA
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f7:c1:3c:13:44:b7:e4:60:a7:86:86:b3:bf:c6:5f:f0:62:
67:21:37:dc:0d:71:01:a0:26:e4:41:19:15:18:9c:7b:b7:50:
71:59:bc:52:75:58:24:9a:43:8a:5b:c3:2e:1d:82:e8:64:34:
97:22:b4:b1:dd:bc:bb:2f:93:b9:e4:54:e1:6c:88:87:5a:75:
45:3a:42:82:24:87:09:04:8e:18:eb:bf:46:6f:ef:03:93:3d:
c3:5c:43:52:93:a1:3e:a4:c2:51:9c:b1:86:27:71:9e:73:c1:
58:a2:8a:95:00:47:4c:86:0e:c6:75:ed:b9:34:91:af:07:0a:
c4:d4:76:14:a5:69:10:6e:62:61:d0:05:1f:79:dc:eb:6c:ae:
e9:06:58:b4:92:e4:4a:49:d0:33:86:92:7c:c5:c8:1c:2d:af:
71:52:7b:64:f2:3a:47:25:50:73:bd:f5:de:d0:90:6f:f9:3c:
8a:b6:d8:81:ca:ed:00:71:74:38:38:64:c1:48:1a:8b:68:ec:
dd:6c:7a:ba:43:23:0a:d6:ed:a6:88:e5:d8:52:40:2d:41:0b:
68:7e:9a:f8:31:c7:74:b7:58:b0:47:57:16:80:08:89:1a:27:
12:6c:c8:fb:7c:19:a2:5f:06:ac:18:10:a1:68:b8:06:1d:07:
53:76:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:37 2026 by rpki-client