Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: 4iqtF9/rFAOWBojzIT1bc1n/RSKddcW1zrwA8ERpnqM=
Subject key identifier: 01:9E:6E:A5:25:82:73:85:3C:B1:D1:2B:B7:42:82:1F:34:9C:27:A5
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019CAAC692E81FE62C45CE3DFFE4F47A7AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 110C
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: TOxZLQU9WiVZEIMuxdqM9bTUEJp5+9nJHHwbfFklbus=)
2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:e8:1f:e6:2c:45:ce:3d:ff:e4:f4:7a:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=019e6ea5258273853cb1d12bb742821f349c27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:ba:9b:68:5c:c0:54:c3:5e:a3:62:ca:9d:
c5:92:61:70:7a:1a:b7:0b:0f:e8:f9:59:bd:87:d2:
e6:11:85:64:14:0c:84:f2:50:e5:8a:d1:94:6f:1d:
76:45:cc:6c:0f:6d:0f:d4:8e:ef:2c:ea:be:2d:c0:
b2:b7:83:dd:54:ed:06:84:ed:67:6b:01:e0:23:fa:
fc:21:6d:8b:b9:98:10:fa:80:b7:c7:7d:d5:95:31:
2c:81:66:f5:75:f0:d4:dd:f1:63:7b:16:8a:c3:e4:
fb:25:d3:af:18:09:fc:c7:4b:dc:5e:55:34:e9:8b:
2b:79:5d:42:c9:21:31:bf:1e:f7:2a:55:e7:d5:36:
a5:32:67:53:f1:ce:0a:36:70:28:ef:59:15:c9:a8:
c4:32:e2:86:77:fc:be:71:aa:5c:5e:91:f8:65:cd:
27:ca:dc:75:81:de:f5:67:09:3a:75:0d:41:9d:de:
41:63:95:a3:43:89:13:c8:a3:f7:92:8c:78:1d:b3:
87:30:43:57:a2:b8:f7:dd:cd:88:3c:55:9b:02:d5:
da:9d:01:2d:94:27:24:f7:92:a0:dd:e7:86:cc:fc:
db:4f:a3:87:0d:91:ca:71:00:52:52:62:6b:e6:24:
1f:e3:01:b1:dc:92:d5:4a:2e:4e:a4:ad:55:6d:c4:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:6E:A5:25:82:73:85:3C:B1:D1:2B:B7:42:82:1F:34:9C:27:A5
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:5d:35:ff:ce:9d:d7:31:fd:fb:fb:01:2c:9b:e3:6b:c4:
29:86:d5:55:cc:5d:de:77:9f:bd:ca:45:48:5e:17:aa:8d:41:
8f:f1:3f:46:a1:bb:eb:1f:d9:25:a8:10:a0:2d:58:9f:15:c5:
db:89:d9:8a:12:22:f4:86:5a:40:c6:54:fa:8d:f6:74:e5:67:
75:8c:3f:63:eb:3d:cb:17:9c:76:63:3f:3f:f7:cb:59:a8:d8:
67:88:63:97:08:e7:ef:66:70:c0:20:ac:76:90:9e:cc:0a:4f:
04:47:2e:6b:c6:92:5e:16:12:7f:ec:b9:d9:64:3b:85:4e:b8:
3c:bd:81:2c:eb:bc:ea:14:b1:04:88:35:46:b9:25:15:7e:9d:
27:d3:e5:32:8d:ef:ef:30:e1:8e:d9:e2:96:e1:e5:42:17:e7:
e2:68:37:81:2a:6b:f0:11:66:d9:0e:28:c2:0f:00:8b:b2:d9:
f5:6a:ac:c0:a4:21:8e:64:93:1f:a4:b1:25:2d:4d:5d:e9:2c:
b2:d3:2e:9c:17:e2:c9:c0:d7:07:02:f7:ca:37:3b:38:a4:92:
52:ea:eb:b3:fd:e4:2a:9f:06:57:3e:79:16:28:ef:8d:2d:3e:
65:93:e5:24:83:14:dd:29:04:3e:44:70:31:6d:30:59:9a:7c:
92:eb:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:41 2026 by rpki-client