Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: pI36QDjsMvCNnwdEKAn2m6Ck3xwujpjj6SrFa48szcE=
Subject key identifier: 95:B1:A0:AA:FC:0D:C9:3B:73:29:E9:FB:13:D4:5A:69:77:1B:52:3D
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019CAC0FD35856D31547581B1AACD1506CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 08A8
Signing time: Mon 02 Mar 2026 01:00:44 +0000
Manifest this update: Mon 02 Mar 2026 01:00:44 +0000
Manifest next update: Tue 03 Mar 2026 01:00:44 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: qiZeeG2F7YUzPjEHhi/zJt0GWW21H1Qos5NbaHDoERY=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d3:58:56:d3:15:47:58:1b:1a:ac:d1:50:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Mar 2 01:00:44 2026 GMT
Not After : Mar 3 01:00:44 2026 GMT
Subject: CN=95b1a0aafc0dc93b7329e9fb13d45a69771b523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:e5:2c:0e:5d:f0:a1:54:c4:66:a4:90:eb:
28:95:b0:39:80:d0:6f:60:21:39:c0:2e:eb:19:26:
df:82:fb:57:a7:85:75:38:4c:16:10:9c:7c:fb:45:
27:db:e7:26:88:d9:b2:b5:44:25:e8:1d:5d:2e:6c:
df:84:bd:6a:83:dd:31:ed:a5:f4:f4:9c:be:b9:c8:
bc:46:c7:4e:bf:0a:1a:52:a1:4a:57:d4:52:ba:6c:
ee:47:3d:87:0d:ec:b5:c6:ee:fa:34:27:3f:47:e9:
9b:2a:89:fb:d3:49:4e:a9:22:23:05:1a:57:8f:98:
56:a3:d3:2f:56:bc:c1:ef:f6:59:65:e5:d0:66:83:
76:5a:69:40:ab:43:b3:6f:e1:e0:25:92:c4:f8:25:
1e:bf:68:39:fb:79:a5:fa:4a:77:09:5b:74:22:3b:
ad:cc:d7:62:a1:82:bb:c9:51:5c:d6:01:b9:b5:ca:
3c:00:83:c3:a1:03:97:20:c1:9a:3c:ac:6e:86:a1:
c3:18:e6:bf:b9:6c:dc:d3:01:8e:9c:8f:5e:43:c8:
85:20:1d:85:fe:34:da:73:b5:6e:3b:bc:9c:45:df:
85:b6:79:a9:7c:51:99:67:15:f8:be:a4:f4:38:44:
8a:21:5b:ef:a4:27:fd:6a:41:25:ee:82:ce:b7:4b:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:A0:AA:FC:0D:C9:3B:73:29:E9:FB:13:D4:5A:69:77:1B:52:3D
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:e2:04:4f:6e:af:da:cd:87:07:73:00:8e:30:28:5f:57:
b3:a3:72:96:35:ee:b2:a0:bc:97:f7:cb:e5:52:32:8c:3d:69:
81:8e:98:e7:ed:d6:1b:de:53:4e:8c:52:1a:ae:6f:f0:1d:dc:
ca:ae:11:ed:48:68:0c:d8:da:87:5e:5d:c1:4f:f7:05:da:8a:
c3:1e:5b:44:85:2f:ad:71:a9:a7:50:05:d1:8a:41:77:ba:2a:
d4:e8:e8:86:77:0d:e3:47:d5:cd:ac:7e:98:a7:ea:af:b2:dc:
86:27:6f:f0:91:4f:b4:5a:f5:fc:36:0a:43:46:9d:5e:92:f8:
e1:7b:d2:11:62:1d:1f:27:6e:77:8e:29:79:06:2d:7c:97:48:
4c:eb:a6:5b:fa:6c:9c:3e:32:77:c0:7b:c1:0e:fd:15:b9:07:
15:dd:16:3b:b7:8e:76:59:88:5f:f1:13:c9:45:e8:63:41:b0:
23:1d:51:fb:09:68:f1:bd:af:36:e2:19:77:72:33:ef:ac:40:
e3:7d:d3:94:83:26:25:f2:8c:36:53:12:e5:a2:99:8e:42:4d:
5f:4f:68:cd:00:82:54:5f:1c:98:c5:b3:17:1d:57:d3:6f:a0:
fa:3c:0e:1e:5a:ad:72:4c:6a:35:9a:cb:f3:44:79:3a:b3:57:
02:02:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:02 2026 by rpki-client