Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: 6HCM0bqYwJHl/AQVaLTIyqSGxvSATcn3VGX8FY0z2F8=
Subject key identifier: 83:72:A9:6A:08:DC:AC:59:0B:7B:03:F7:2E:C9:E3:A3:04:DC:61:15
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019CA9B3B1233842892C30AC92820D85D207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 158B
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: Ex2NaATxvX1OKl/WHrdEEgUmGwReith0nb7nT9AtODE=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b1:23:38:42:89:2c:30:ac:92:82:0d:85:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=8372a96a08dcac590b7b03f72ec9e3a304dc6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:81:18:ca:8b:f6:a4:fb:a9:e0:a7:00:16:
ee:74:f7:43:b0:b8:c3:da:1f:f9:af:69:f7:ae:e7:
ee:7f:35:0a:15:c5:a7:9b:6d:9c:a5:09:70:a7:ff:
2d:e7:16:07:54:5a:48:54:96:b5:a6:72:00:1e:15:
f7:28:e1:65:7f:5e:9c:21:c0:f7:aa:09:bd:28:f2:
47:b3:e5:2c:4d:d8:0d:41:57:72:4a:94:37:e4:df:
de:23:31:42:ee:ce:c2:70:56:97:fa:7d:d8:71:91:
be:a1:39:c2:71:59:84:9c:ac:73:78:5f:d8:fe:01:
5a:86:70:fa:c4:a6:5b:41:c4:cf:5e:be:87:f4:6b:
22:8c:c0:a5:09:11:05:aa:73:11:17:23:2c:77:ab:
ca:83:81:3e:ce:de:16:ea:ef:d8:2a:d6:ad:0d:02:
3e:6e:0d:13:cb:44:06:0b:39:33:72:76:2e:81:5e:
5e:95:26:04:90:bf:ac:d9:76:cd:cc:1f:cc:e3:01:
78:d8:7c:59:71:e8:4b:99:4d:7e:d2:a8:90:23:88:
91:14:b6:ce:59:bc:4b:ac:1b:e0:6d:f0:2c:cb:c1:
c2:0e:52:86:76:64:de:f4:25:43:8c:99:1e:d9:73:
96:68:52:c9:d3:e0:87:ad:d2:90:00:8d:da:d7:40:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:A9:6A:08:DC:AC:59:0B:7B:03:F7:2E:C9:E3:A3:04:DC:61:15
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:be:21:13:57:37:6d:04:13:cd:ff:14:5d:79:8b:33:11:
3a:80:58:e2:f2:65:38:d5:ab:d9:f7:c6:3a:4a:9c:67:94:ec:
36:1c:7d:01:b8:ca:70:76:cb:f3:4c:54:8b:4a:c6:38:8b:6e:
ee:cd:02:80:c1:cf:8d:f9:18:cd:ae:0b:bf:52:0b:67:b5:0e:
b1:6e:ea:c9:c4:45:12:d9:d6:1f:4e:78:47:f3:92:d7:90:1a:
0a:ef:e5:b7:e2:f7:35:7b:94:7c:83:45:d9:68:81:55:dd:8d:
bb:4d:05:d7:ae:41:8d:48:1f:e7:09:75:ed:ac:42:ba:8b:f1:
87:b4:17:4a:46:1f:e3:1a:09:78:b2:b5:00:8a:e9:98:58:69:
94:93:97:ef:b7:a0:93:ff:44:ac:51:73:6f:6d:34:58:61:95:
0d:3f:a1:2f:7c:64:8d:c2:f4:f8:57:36:71:3c:12:5e:20:d0:
b1:95:33:ac:48:77:b7:52:ff:8a:92:02:80:8c:27:43:48:4f:
df:2f:22:c8:e4:0d:8c:5c:e5:d7:25:20:73:2f:bd:09:fd:91:
d3:19:61:c0:e6:52:0e:41:c7:92:0a:80:b9:a3:4a:f2:00:9a:
0a:38:50:9d:ce:c6:43:1d:10:a7:f8:22:69:5d:13:82:f8:12:
bc:c0:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:03 2026 by rpki-client