Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: nlHL4hyEkXYD/LMauMqdox5f7/vmTIqKqkjK1YHv/gQ=
Subject key identifier: F4:0A:C4:E3:12:84:E3:F6:B2:63:71:0B:B9:A9:33:93:89:A1:FE:C1
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019CADC7D9E6DFFAE16E62E849E92019A61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0690
Signing time: Mon 02 Mar 2026 09:01:21 +0000
Manifest this update: Mon 02 Mar 2026 09:01:21 +0000
Manifest next update: Tue 03 Mar 2026 09:01:21 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: yF/NXa7DYe3yPDxAXBm9mNeriZQeVmaZEglHOTCqnMs=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d9:e6:df:fa:e1:6e:62:e8:49:e9:20:19:a6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Mar 2 09:01:21 2026 GMT
Not After : Mar 3 09:01:21 2026 GMT
Subject: CN=f40ac4e31284e3f6b263710bb9a9339389a1fec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:c2:5a:34:c4:46:d7:26:24:3e:4d:ff:20:
6c:a9:f1:14:6d:3d:30:28:f9:a5:93:fe:45:b1:ec:
92:3c:e3:fa:62:4d:7c:80:0f:89:95:9c:b1:dc:7d:
3c:eb:14:fc:76:7b:fb:91:e2:39:19:a8:0c:ba:be:
6a:1d:4b:a0:ae:78:0f:73:32:4e:48:50:31:b8:f7:
02:15:60:21:48:f5:bc:34:fa:4a:f1:cd:c9:52:af:
6e:9c:26:0a:47:d2:d5:ea:57:3d:c9:ee:60:44:9a:
c4:3b:6e:b8:bf:90:17:cb:bd:e8:0d:96:47:07:34:
4a:30:b4:1b:fe:01:2e:40:09:29:4f:e6:18:b3:55:
c6:c4:f6:d3:e0:a3:e6:42:e1:f0:16:b9:02:ee:ba:
14:f1:bb:fe:18:c9:e1:42:84:db:c4:2a:b1:3d:26:
67:10:52:d1:c8:0b:e8:bd:eb:de:82:1b:12:11:17:
e3:d9:4c:80:5f:d2:86:e1:41:15:20:90:75:7e:ca:
d3:b6:98:de:f4:e5:4f:5e:ec:ba:6a:f6:1c:eb:61:
19:65:5e:c4:6b:fd:26:7b:90:0b:af:b2:0b:dc:5e:
c8:21:2c:d2:87:df:b8:d2:0a:07:6b:b0:ce:81:89:
85:07:23:a0:dc:1b:9a:64:e8:bc:ff:be:0a:da:40:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:C4:E3:12:84:E3:F6:B2:63:71:0B:B9:A9:33:93:89:A1:FE:C1
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:28:64:4e:37:2b:fc:1d:09:d8:b3:07:49:bd:a9:04:7c:
48:f2:f0:71:77:fa:4a:28:72:ca:e1:e9:cc:3f:fb:cc:82:64:
c5:16:42:b4:bb:6f:0f:1e:b4:d4:45:46:2c:10:a3:8c:dc:68:
d3:76:ab:17:2e:dc:08:af:a7:36:63:15:22:16:ea:59:06:e4:
88:40:28:a0:09:98:3a:22:4d:92:74:ef:eb:e9:d3:00:cc:b0:
84:61:85:14:13:c0:25:cd:08:3d:b3:62:a7:18:9c:25:93:13:
b4:03:a5:47:35:d6:b1:58:e5:77:65:af:4e:1b:98:09:24:21:
d5:02:82:7b:47:30:c8:68:b5:af:e6:00:8f:a8:7a:8e:0a:0e:
6a:23:39:1e:56:14:96:ce:b8:82:03:8d:78:6a:3d:f7:a8:3d:
77:89:39:54:4f:e1:26:7d:bf:7d:33:5a:3f:77:22:71:6c:8c:
97:5e:a0:9c:6e:13:2d:75:c7:82:ab:3a:d4:23:95:c2:c8:73:
a8:9f:72:fe:98:29:5c:f8:aa:07:f3:f2:be:c6:a7:b2:44:fc:
c9:bd:55:42:e6:b0:3b:8f:41:8a:48:df:88:2f:ff:4f:ae:d7:
04:f1:57:c3:70:89:b3:74:4d:26:9c:f6:bf:ae:04:3f:6e:07:
6a:03:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:58 2026 by rpki-client