Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: zKjP23TRqnZG8m3A05UvsuGtmW0UgtZ4mLgg6qMnI+g=
Subject key identifier: 9B:B3:F3:07:B2:C2:C5:C3:D6:94:9F:E3:5B:E9:42:E0:85:80:CE:0C
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019D27A8E2E70641503C849AB07AE28E869D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0D5B
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: A6uewgI+v9J5/Dbl5+zVoOHOeWe721uL/dD/cDYT3QQ=)
2: PnfxL11O3EjH9h0EH3Rg7luqnAM.roa (hash: i4lQXSpeif5iY7JiCTfcDMb/7WzWvaV3TLIqruxq13Q=)
3: x6wY1hh1UMR03dRTbKZ1rvUylzo.roa (hash: jSu5cUSFLGmQIwJTQdJ25XCFgFKf8LZSMzXzmSmg5w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e2:e7:06:41:50:3c:84:9a:b0:7a:e2:8e:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=9bb3f307b2c2c5c3d6949fe35be942e08580ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:e4:a0:65:4b:24:51:d9:87:75:45:b6:56:
b7:6a:a3:85:ce:76:2d:e7:17:5e:81:84:06:b1:46:
b2:15:09:25:6f:eb:89:66:d2:c7:72:a4:80:81:b3:
9b:b7:10:1c:a0:cb:cb:e8:bf:2b:c2:b5:c7:68:1f:
ed:0e:5b:89:13:b4:ce:91:df:97:ce:26:08:eb:a9:
23:6a:1a:4f:68:99:77:6c:85:1f:ab:82:24:08:62:
79:fc:d4:4e:4a:87:1e:17:aa:c9:57:9c:ba:33:b4:
e5:29:75:55:de:5a:05:c8:31:75:bf:4d:19:9b:e2:
14:af:c7:d8:04:ce:32:8c:0a:d2:a3:fa:e5:3a:6a:
03:f7:19:fb:c2:9e:d5:98:20:a4:da:52:ed:7a:ac:
88:44:07:a2:93:56:28:ef:44:93:a9:74:3a:82:98:
a5:1f:0c:91:94:33:16:19:e7:d0:2e:92:dd:ce:52:
36:c4:ba:f0:94:36:d0:ca:a2:da:2d:c6:14:1a:25:
7a:f3:5f:45:ba:0e:9c:b6:78:ba:af:38:b5:5b:a4:
01:30:85:f3:62:6a:ab:5b:98:e0:f2:22:a3:00:93:
1d:ca:8e:d7:81:15:7e:83:9c:02:64:45:bc:fb:86:
16:75:44:34:74:25:07:8e:4b:1c:ec:99:ee:31:72:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:F3:07:B2:C2:C5:C3:D6:94:9F:E3:5B:E9:42:E0:85:80:CE:0C
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:48:7e:88:2d:c3:9e:d4:0a:fe:7d:c0:7b:4e:ac:de:29:c0:
b1:22:ec:75:00:69:8f:01:b2:33:45:ac:39:21:2d:ae:1d:2a:
73:7d:ff:95:2a:72:e7:2a:9c:4d:a5:c8:97:21:5a:5a:92:18:
c2:79:3a:d7:1e:aa:fe:84:f2:59:9c:e7:af:83:9b:31:7f:8e:
13:57:d1:75:64:98:f8:ab:53:fe:69:ea:77:55:7f:ad:0e:2b:
a8:c4:4c:5a:16:24:c7:43:20:c6:0b:a1:f7:ee:33:c7:20:f4:
f8:41:4e:4d:7f:27:13:22:95:36:63:42:8f:50:f6:3a:fb:a3:
0b:20:ba:ad:d8:77:39:b4:7a:ff:c4:16:49:3b:02:8a:aa:a4:
cc:75:55:69:76:f0:4f:40:55:42:81:e8:03:9c:99:ae:55:21:
00:ba:5a:e9:22:17:87:4a:da:95:3b:6c:d8:4a:56:4e:5f:e5:
59:7c:5e:5e:ba:e7:0d:d3:e7:9a:ff:ac:45:af:de:cd:db:30:
61:c7:83:01:96:bd:07:69:69:16:60:46:d5:d6:09:f5:63:ca:
d0:f3:f4:e9:be:f9:41:c8:97:92:2e:1f:de:d5:21:48:03:79:
8b:f2:24:af:f1:02:c7:c8:10:ea:0b:c7:3c:f8:31:2b:dc:5b:
7f:7a:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:51 2026 by rpki-client