Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: SHVZY4FBisvxQ5sTbFw8O6edQYdf7n4pAgmRDESSLR8=
Subject key identifier: 8F:EC:D8:CF:04:10:E4:E6:E7:A5:4D:FB:63:67:EE:17:E2:6C:FB:DD
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019D98BDC982DE09976B1182CF033DE03D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 1148
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: klBTva4U77nl7a1Dh/Tuh4tX2G3eYPvaxFWV+LgeuCQ=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c9:82:de:09:97:6b:11:82:cf:03:3d:e0:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=8fecd8cf0410e4e6e7a54dfb6367ee17e26cfbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:e8:84:5b:0a:5c:6f:fc:c7:61:76:80:8e:
37:0b:b5:94:df:a6:ad:e4:12:4f:c0:4f:07:c4:1b:
0c:8a:05:19:cc:c6:6b:91:e6:78:b6:2a:0f:79:4e:
cb:16:97:64:29:2a:cb:ee:8d:6d:9f:1c:9a:f8:c8:
01:e3:54:1f:ca:d0:d2:a3:6c:37:58:44:63:07:e6:
3b:d8:1a:d0:94:fc:43:02:d3:20:18:22:4f:47:0c:
83:da:10:f0:4c:b8:e7:c5:db:e9:8e:4d:d1:76:d4:
07:59:33:41:f5:72:9e:d6:9d:14:7d:69:72:ba:04:
d9:1e:d2:82:f4:30:45:72:81:fd:d8:35:19:58:4d:
e5:48:76:aa:3a:00:74:3e:38:83:23:da:e7:0b:a7:
7c:99:b2:b1:b9:62:46:b3:29:c3:36:37:de:e5:02:
b9:98:87:15:f8:56:eb:f5:21:dd:8f:81:e0:64:53:
d8:b3:67:a3:bc:61:1a:a9:93:33:66:78:41:7f:b6:
3b:9f:e7:88:86:71:0a:9a:68:75:2c:fe:20:4d:20:
c7:47:b6:f0:6f:b5:35:5b:0b:83:c0:32:19:4c:70:
a0:cc:58:af:47:19:c5:d4:1a:41:0c:66:7a:9e:d4:
fc:cb:56:6b:fe:77:e0:ba:af:ca:da:4a:96:b2:5a:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:D8:CF:04:10:E4:E6:E7:A5:4D:FB:63:67:EE:17:E2:6C:FB:DD
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:93:44:9a:1d:5b:dd:f9:1c:bd:aa:9c:3a:14:e4:81:cc:
81:42:ff:41:ed:e0:57:29:75:2b:b2:18:d4:33:8f:18:68:b4:
8e:1c:e1:29:b7:b9:9f:da:7b:74:d3:b6:ee:d0:6b:74:e4:ae:
5f:2c:f2:c1:fe:57:fc:49:df:57:3e:b8:71:0d:4a:26:4d:85:
2d:7d:aa:55:81:e6:c6:4f:ca:6d:f6:25:ba:0c:ea:11:50:40:
e6:db:69:fe:9c:4a:d6:5b:90:15:0b:07:45:3d:01:de:90:d8:
f2:f9:a3:45:81:76:50:94:af:94:fa:a4:2a:be:89:c1:18:59:
9f:29:e5:d4:50:07:c8:40:ee:3d:bb:a0:83:6b:7f:78:7c:9b:
35:2e:cc:ca:ba:5f:81:6b:f7:da:3a:d1:3c:d7:c9:d3:49:07:
05:f4:38:d9:47:2b:87:63:49:8e:02:d0:06:ab:38:f2:1e:3c:
b0:52:d5:a5:37:b8:ad:c5:bb:f5:52:6c:d1:bf:ad:b4:0d:0f:
f3:10:59:7c:d4:60:8c:eb:51:28:6a:95:10:42:80:91:60:4c:
d3:8c:d8:e9:e0:2c:c9:7e:4b:6f:7b:cc:53:61:87:0a:a4:95:
30:ad:98:bd:ee:87:1a:36:2f:6c:bc:a4:33:8b:77:ab:b2:02:
1a:9b:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:03 2026 by rpki-client