Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: +YdUouvbTy9c7RZ0y7+JKvNg6BX3CEeu8pFpplp5S3g=
Subject key identifier: 86:BB:3D:A7:8D:F6:BF:C2:2E:DC:0D:F8:C9:57:E7:17:66:94:85:AF
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 019CAC7E0DAF2BCA461BABFC8CB0B1D15758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 05CD
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: R/09gySqMk0MgI3mRNOJURE+DLFOlVkAMGy3lcYwfJU=)
2: fz-rvWQsVYjo3OqyUy9lM_fX5Ww.roa (hash: m87pe4kWn6CXoDHZ+RYNhWqFQvvF86Ib8ZOI9K0cWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0d:af:2b:ca:46:1b:ab:fc:8c:b0:b1:d1:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=86bb3da78df6bfc22edc0df8c957e717669485af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:e2:a5:90:b2:fe:6e:b1:b2:76:7e:7e:e1:
b1:56:84:5c:f3:62:03:9c:bd:a0:de:7c:b7:1b:82:
9f:5b:04:25:bc:b3:f8:ae:db:78:78:be:3e:08:f1:
c2:0b:f0:af:9e:44:26:34:9a:d5:5a:fd:0c:41:91:
eb:14:e5:b3:51:b7:81:e7:91:1e:34:ca:48:01:53:
bc:7c:bb:de:48:79:2e:ef:8a:fe:c1:a2:fb:ed:62:
54:47:69:05:a1:c5:d9:b8:05:93:64:a2:6e:3b:f8:
af:de:7d:c8:6a:f1:8a:78:3e:c0:c3:b4:74:ec:92:
d8:fa:5f:76:0d:3c:af:dd:d2:c8:b7:68:da:3d:39:
44:d4:ca:31:a1:78:ff:81:32:cf:d0:d2:ad:58:ed:
b4:0d:cc:11:6a:4e:3b:36:e8:f4:fd:b3:25:2b:7b:
1c:b2:24:c8:ad:36:b3:19:c9:1a:04:ec:ef:92:2d:
84:c1:a1:ef:de:36:c3:ab:bb:8a:88:53:a8:cd:79:
3f:bd:a7:21:bf:d4:e5:6e:4b:3c:68:2e:ed:45:f6:
dd:b7:f6:a7:93:5c:60:86:b0:31:04:d0:56:fe:f2:
68:0b:88:cb:78:97:67:0f:fd:73:41:65:6a:a2:16:
47:5a:fb:44:68:6c:9f:5d:23:ec:e2:73:e0:c3:5b:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:3D:A7:8D:F6:BF:C2:2E:DC:0D:F8:C9:57:E7:17:66:94:85:AF
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:af:54:67:23:84:6c:da:9d:83:b3:e8:14:c3:5f:7f:ab:
e8:2d:2b:09:05:41:78:6a:4f:3e:a5:36:2c:50:82:d6:5d:fb:
cd:85:35:d2:69:1a:cf:d4:8e:12:0d:2b:da:95:10:7a:60:9c:
6d:5a:24:64:84:1f:d6:b5:36:65:36:97:bb:bf:39:86:ca:93:
da:cb:5a:ab:93:37:f7:1e:cb:83:6d:63:5c:b2:c3:96:0d:2c:
35:6a:fb:bb:a0:f2:67:4d:3f:10:db:41:7c:8f:a3:87:9d:d8:
63:41:c0:1c:a0:55:ae:e7:ee:5a:f0:09:bf:2c:16:ee:77:03:
02:65:b4:68:7f:a7:ff:1d:43:c9:51:b4:6b:c5:ef:10:cf:96:
85:c1:19:d3:55:bd:76:db:f5:8f:1f:77:57:e6:6d:ef:78:a7:
3a:4b:8e:ee:81:05:3b:b4:e7:ac:ed:23:d8:f9:49:85:ed:e3:
f6:c9:17:e1:c4:2f:ac:ba:0d:b9:17:c3:52:75:2d:85:db:49:
41:75:b4:76:28:e0:b2:89:1c:f4:4e:87:12:6c:be:93:34:7d:
57:ce:73:bb:2e:d6:03:1a:15:f1:e0:6e:16:8a:c7:cd:62:f4:
a4:5d:66:6d:41:08:db:22:9d:b5:70:43:2a:3b:29:cd:b5:71:
58:96:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:59 2026 by rpki-client