Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: uS96Bk9sHRhu6NcM11xvP3Go63OFuHCdPBr80LnatwM=
Subject key identifier: F9:68:FD:F1:17:57:DB:F1:9C:E9:65:99:61:48:A1:54:E0:30:11:7A
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019CAC46A174B93D0B9F233057B31C7A99E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: XBKRlnQTqBix/FnGIjJBK91nsZxcuFgubWLpeDyC9U8=)
2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a1:74:b9:3d:0b:9f:23:30:57:b3:1c:7a:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=f968fdf11757dbf19ce965996148a154e030117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:e6:d7:d4:bf:10:d7:07:3f:2b:a9:7c:75:
5b:b2:8d:fc:d2:0a:51:0a:e6:5a:77:bf:ae:77:17:
cd:86:25:19:13:70:19:f4:a8:c9:f5:4c:8e:7c:3b:
b1:52:7b:b4:52:69:77:08:28:99:fc:28:c5:df:6f:
53:ef:7d:21:81:90:ac:6e:0e:3c:c3:bd:33:24:ba:
64:46:5c:0a:87:80:1a:87:03:00:33:bf:e0:95:19:
4e:54:13:7d:4b:f9:6e:c9:d8:22:e8:41:ea:ab:64:
2b:55:d9:f4:3a:51:14:62:b7:ae:3c:67:3c:67:b1:
8a:4b:e6:78:7a:30:69:2f:b6:13:45:8f:b3:21:9b:
22:b5:74:d9:2f:25:c6:de:37:51:e7:4e:89:db:58:
76:3e:fb:0f:b2:52:ad:81:d3:14:f2:4e:24:8b:82:
11:64:f3:c4:b2:e5:a8:fb:5b:e6:4c:60:80:e5:c3:
25:5a:4f:4a:1c:b0:4a:4b:b1:d0:60:91:f6:da:36:
76:7e:68:ac:bb:c7:c2:97:07:af:f6:6f:c7:3d:cb:
51:83:72:76:a9:e5:e2:29:dd:10:3a:78:4b:15:05:
cc:a0:dd:b2:ed:be:61:48:11:be:e5:7c:9d:54:d8:
a3:5d:46:ac:6e:d1:19:8c:2e:54:42:3b:2e:a3:4e:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:FD:F1:17:57:DB:F1:9C:E9:65:99:61:48:A1:54:E0:30:11:7A
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:0a:99:c0:c5:c6:e9:aa:4a:b6:f6:6a:35:e3:75:c5:75:
1e:20:81:fa:20:88:ad:67:fe:12:d1:6a:0d:96:b3:79:30:3b:
9d:d0:f9:80:f9:5c:97:a4:07:46:a2:46:e3:86:6a:e9:3a:a0:
d4:6a:8e:30:98:84:77:d3:21:f0:a6:b2:3e:8c:8a:1c:34:2d:
45:ad:c0:68:96:29:e4:23:fa:a4:f7:3a:39:64:a4:b1:98:bb:
25:59:fe:e0:1e:78:91:c5:e4:af:a2:97:7b:ee:a9:7d:c5:aa:
78:09:1a:b0:69:f1:8a:92:a2:37:ca:5f:0a:af:f6:ff:c6:3c:
5b:f9:f7:2c:ee:51:e8:91:aa:10:aa:57:72:dc:1c:5b:45:d1:
10:e9:17:f2:3b:3e:7c:bf:2d:18:6c:27:04:c3:b9:1e:bb:7d:
1e:5a:50:1f:7d:80:72:cb:02:83:6f:0c:b4:f2:aa:ac:c9:9c:
dd:ad:38:ec:f8:a4:27:ad:0a:df:5b:d5:c0:12:d8:dd:1e:c6:
b1:89:fc:b5:07:5a:ce:06:c8:ff:8a:5f:7b:93:e8:be:5b:0c:
c0:c0:b8:15:67:5b:67:fb:1b:e5:76:18:c2:70:e4:1c:8f:80:
e9:8c:2a:ab:e8:6e:bc:bc:81:39:ee:20:68:b7:66:6f:19:1c:
2a:5f:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:19 2026 by rpki-client