Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: /L/SqJkFo0FrJk690D9YoomP0BQ28qc6EY3L9mapxXo=
Subject key identifier: E6:52:C7:62:11:9B:94:19:1A:52:10:E1:62:AE:F3:80:98:8F:AA:91
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019D288444989D1468A19CC9E2395CF18563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: T9ZRN9gl3ym/oGVlNZ3N0SDq8eRySkYRXxKQdWsm0dI=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:44:98:9d:14:68:a1:9c:c9:e2:39:5c:f1:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=e652c762119b94191a5210e162aef380988faa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:d9:20:90:79:f2:8a:62:ae:48:fe:08:4f:
a0:66:45:8f:f3:99:dd:b0:07:e1:56:82:00:2b:87:
4d:fc:e2:1f:6f:ad:78:a4:ac:1a:de:91:14:ba:e6:
12:7c:50:5c:a2:12:17:36:d7:c1:61:58:dd:51:28:
7d:03:0d:35:73:b9:2a:7f:e6:60:74:4b:09:23:49:
3e:d3:b0:92:b5:a1:b9:63:3f:6b:cc:56:05:bf:a0:
d9:90:92:16:a7:a6:bc:47:8d:1f:cc:8a:43:22:15:
d2:cf:ab:22:aa:59:75:38:e9:b7:45:f4:c8:43:b8:
c8:90:a4:7f:08:61:97:16:8d:38:63:c6:84:56:4e:
2c:c1:7d:44:81:83:5d:92:b3:6d:9f:40:b7:98:41:
74:d1:ae:ff:9d:f9:88:6d:57:ee:81:46:34:f2:dc:
61:68:f3:72:cd:a6:4a:66:1c:24:9f:3d:92:51:db:
e6:44:2d:21:5f:57:d1:59:21:56:e6:7b:2c:57:d9:
b6:fe:fa:b4:3b:b0:1a:87:d1:b3:ac:98:97:b5:bf:
74:a3:42:49:c5:81:9d:22:57:9b:eb:7d:cf:f6:05:
28:ec:c5:a9:6d:4e:d9:57:bc:39:73:12:4c:75:81:
63:be:df:56:2b:0c:cf:ff:5f:6d:c3:41:f2:9a:f7:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:52:C7:62:11:9B:94:19:1A:52:10:E1:62:AE:F3:80:98:8F:AA:91
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:95:49:d6:9d:68:fd:61:00:d9:5f:79:b6:37:9a:3d:67:
0a:48:b2:0e:93:f3:ed:52:2a:f9:08:e0:bd:89:7c:90:7a:cc:
d9:43:84:19:fe:12:be:0a:bc:88:ee:1b:7f:41:ca:06:d4:8a:
5c:94:f1:2c:13:59:eb:94:cd:da:49:96:4a:c4:e8:5c:70:99:
d3:8d:07:e6:44:86:7f:33:c0:b6:57:a2:95:fb:e9:bd:5a:0c:
ac:ab:53:17:fc:53:cc:6d:8c:ff:7d:1c:87:ef:e8:20:88:cf:
ce:85:72:69:ac:9f:77:5b:65:04:45:ff:67:6e:fb:00:77:63:
e2:13:36:3d:d4:02:22:0b:a3:cc:6a:e9:1c:fe:28:e7:e1:88:
de:f3:90:fd:30:25:42:a6:53:84:1f:48:6c:e9:d4:ba:33:89:
ff:28:ed:e2:e8:ec:e8:27:90:fa:dc:17:cb:d5:01:e3:7b:46:
4f:5c:e2:29:67:3a:c1:0c:d6:b8:9f:ff:35:f4:42:ad:18:29:
86:e7:d7:a1:f9:7b:49:9b:91:d7:8d:76:85:b7:fd:86:9c:8a:
d2:3c:09:3c:a1:01:d9:83:06:c3:57:4e:c4:2f:c0:01:ff:a3:
23:4b:cf:fc:51:b4:32:d2:c7:36:d2:b3:90:f5:a7:a7:31:f8:
d8:f0:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:09:26 2026 by rpki-client