Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: op5s/9JV+ScBtqXCSauf249rIEys/KT85jcV1hNSZIA=
Subject key identifier: A3:EB:C7:84:BE:5A:13:84:FE:75:BA:C0:2C:2E:17:D3:EC:80:2A:06
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019EBDDA5A589247DD52C4C951C271F7A85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 0163
Signing time: Fri 12 Jun 2026 22:01:04 +0000
Manifest this update: Fri 12 Jun 2026 22:01:04 +0000
Manifest next update: Sat 13 Jun 2026 22:01:04 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: q7HixGtrQtuyviIYYhCSozAvkcJXvKjxft9y+M0F2ro=)
2: T5AgIIaFdxy_1Zx7xMWIF5zHoBg.asa (hash: VlDdILGQpNO7PnepZreVOz2IeXfZ/rzSseatg3jF9EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:5a:58:92:47:dd:52:c4:c9:51:c2:71:f7:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Jun 12 22:01:04 2026 GMT
Not After : Jun 13 22:01:04 2026 GMT
Subject: CN=a3ebc784be5a1384fe75bac02c2e17d3ec802a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:6f:db:36:8e:c4:e7:b8:61:30:ff:80:ce:
dc:57:73:7e:97:d3:32:86:3a:04:d6:9f:d4:ba:c0:
01:4e:5d:d6:d8:5d:8d:51:03:a2:5e:de:55:d5:aa:
fe:ea:45:9b:1a:74:68:b4:3d:b5:c7:d9:22:0b:8a:
97:2e:65:c1:cc:87:d1:ef:d6:cc:6c:65:a7:55:a9:
49:be:6e:5a:19:39:a5:e8:3b:7c:1a:43:17:1d:3d:
83:e9:ad:66:2b:f7:97:2b:04:31:8a:5c:ec:33:46:
b1:65:89:09:59:de:16:bd:be:4d:8e:bc:db:bf:a9:
b7:80:1f:8a:2a:52:3e:eb:2a:29:41:aa:10:ba:9f:
4f:9f:5f:b8:55:74:67:9f:43:d5:aa:e9:49:69:3d:
ee:9b:de:b0:02:1b:83:fc:be:0b:3f:77:4a:c8:c2:
59:ed:9f:af:0e:45:f7:ad:42:c1:ce:c3:35:a0:20:
e6:66:ac:ec:84:ee:c8:0e:76:48:01:e2:1c:ed:5b:
00:09:1a:fb:a5:ec:8e:70:ba:56:49:cc:c6:0e:66:
18:49:f6:b9:fe:d4:5f:03:21:42:54:ab:d8:2c:96:
30:be:8f:fa:17:ab:5e:93:9f:70:f3:67:c2:d9:e8:
6a:db:a0:b6:74:cb:82:5d:1a:c6:26:6e:da:e9:8c:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:C7:84:BE:5A:13:84:FE:75:BA:C0:2C:2E:17:D3:EC:80:2A:06
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:ad:3e:90:f0:56:42:fd:29:2b:8c:08:88:76:cc:0b:ef:
6c:83:4b:61:eb:ff:7e:7d:b5:23:03:92:c1:b6:11:81:1e:03:
6c:82:69:0b:07:15:b6:3d:d5:12:60:05:f3:3f:42:7d:cb:42:
36:41:03:8e:93:1a:f7:b5:ae:cd:ac:97:cc:d2:1b:5d:92:79:
08:73:9c:70:2d:63:39:a0:bb:38:f4:d8:c6:cf:b9:2e:1b:9e:
7a:d8:ca:31:e3:92:e7:fd:25:d3:12:3b:a7:66:32:53:93:24:
83:4e:63:61:7e:1b:2d:22:72:0d:34:24:3f:05:d0:c9:13:11:
a3:43:79:0c:fb:b9:1f:6c:01:71:41:eb:11:50:a5:c8:84:1e:
cd:e8:04:aa:e3:7d:e1:42:66:30:3e:ec:59:35:45:80:74:5d:
3c:4d:75:fb:c4:34:9d:02:66:7b:21:cf:92:5c:ae:1b:b7:fb:
0c:6a:f5:33:24:83:9a:aa:18:14:20:ad:ea:b3:cb:4f:e0:ab:
c2:5a:33:1c:35:9a:7e:fb:f9:64:28:b8:4b:82:3f:37:70:64:
b3:87:3f:76:5f:35:71:60:4c:e9:05:02:31:1b:f1:6d:d7:4f:
c1:de:33:73:a0:f8:d2:8b:a0:3b:80:5e:4f:1c:18:27:e7:a0:
ef:03:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:29 2026 by rpki-client