Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: e6a/1lyZCgeuejFeIVZc12KCVkg+CHNAMXhQ/N+Q804=
Subject key identifier: 6A:8C:97:D2:ED:A8:DA:E2:2D:C9:32:86:6B:92:DC:B9:3F:F4:8A:7D
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019CAAFCFE5C07DA7BC6DFF9927AB8BC1849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 1196
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: 1yKdJd6bz9ZIietLk39dvKnfuxvjy2ys38fMAQRiaQ8=)
2: jM4bCus_MOUyOpnMWkBG4DEReus.roa (hash: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8=)
3: v4vgN5S5raK6CZzGiAArElrxR7M.roa (hash: xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:5c:07:da:7b:c6:df:f9:92:7a:b8:bc:18:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=6a8c97d2eda8dae22dc932866b92dcb93ff48a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:35:01:0b:fb:0b:66:1c:bf:0f:7f:a0:e4:
98:4e:1a:62:27:5c:c2:6a:59:d1:e0:a6:2a:1c:2b:
ff:c8:6c:ed:88:d0:b4:04:68:1a:88:29:a3:e4:38:
af:1a:93:10:ff:26:fc:e8:15:a0:11:58:15:f3:4b:
98:b8:cd:93:c9:7c:c7:f4:a2:57:90:70:37:35:00:
91:d1:40:74:e2:08:4a:fe:7d:79:81:02:6d:8b:b8:
f0:48:ce:e9:a9:98:ae:db:ae:9b:c4:4e:d2:36:f0:
1a:42:9a:dd:57:c1:47:11:d7:e1:65:f5:f9:58:a1:
b2:31:ea:47:81:9a:e9:61:c2:2a:7f:44:41:db:4c:
42:0e:dd:db:ed:0f:41:76:61:e8:c1:82:fb:a8:aa:
37:37:a5:60:e7:f8:2e:ec:8e:33:41:d8:de:97:90:
ee:f6:9b:a3:f2:d6:09:3a:a0:84:19:8a:b0:b0:1e:
cc:b3:cb:45:07:4f:c9:3e:d0:a3:af:92:86:58:3e:
3f:85:69:2f:6f:2b:40:d0:68:fa:da:c5:a7:2f:c9:
50:36:3c:5f:5f:58:4b:b6:1b:a7:82:d1:97:c5:5f:
ce:e3:8a:d6:23:29:e6:b3:c1:64:68:13:02:32:73:
48:4c:89:26:46:e4:82:fa:59:f9:b1:5c:24:3b:5b:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:97:D2:ED:A8:DA:E2:2D:C9:32:86:6B:92:DC:B9:3F:F4:8A:7D
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f8:c7:74:6a:3d:27:ee:6f:e5:6e:1e:7e:c3:16:03:15:63:
26:97:9e:c2:bf:9b:7f:67:e3:db:03:f4:e2:b2:7b:85:6f:89:
bd:1a:60:59:37:9a:64:a3:de:ef:a9:a7:e6:b2:b2:1f:dc:b5:
2f:a7:c7:f5:c3:8a:48:f2:6e:8c:e2:a4:ee:72:d4:71:ce:f2:
e4:fd:74:e0:11:18:5b:02:aa:ab:6e:54:32:ac:dd:e2:98:7a:
66:70:81:00:61:d2:b4:3f:26:c4:8f:05:03:26:2e:60:d9:34:
ab:e3:d6:31:e8:1a:82:42:9f:8e:04:0c:13:85:d2:a0:51:05:
3e:21:5f:27:a4:2a:9c:f1:d3:51:c6:ef:5e:b7:9e:95:15:7a:
06:96:c6:a9:84:55:0f:0e:85:ce:c3:eb:b1:b0:1b:eb:da:d8:
78:39:c0:f2:52:b7:96:27:c9:c2:39:a6:de:ad:71:dd:bf:d3:
0e:89:81:aa:c1:3f:b2:a6:4b:3b:47:57:c7:d9:d1:d1:9f:7e:
b7:54:93:33:48:f4:e8:c8:00:64:3b:01:b3:af:5f:4b:9a:c7:
1c:db:a5:58:05:d9:3d:ed:c9:9f:ef:8c:2b:8c:d2:47:d0:9f:
ad:a0:9b:83:2e:86:1f:06:8f:d6:eb:23:09:19:ef:ce:8d:eb:
52:04:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:19 2026 by rpki-client