
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier: eBXkn1Ftptk991W8+5SJXLpXb2d+EWfWF6UYo/7cEWA=
Subject key identifier: D6:38:F6:5A:8B:E0:89:BB:9E:85:BC:46:1C:B8:F1:EB:80:3E:02:15
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 019CAA593B861B6953B06C0D89EEF4475D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number: 0F62
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: zinGQhnG7dw1nZoV78Std2d8UXIo5d9QGMRs56jpeBc=)
2: CdSvxh-qsouaR9D0nMWLFmlP_7c.roa (hash: w2S9yeJgNzOTOHLkky2uOaSMYllBxEErLoohZYBuiDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3b:86:1b:69:53:b0:6c:0d:89:ee:f4:47:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=d638f65a8be089bb9e85bc461cb8f1eb803e0215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:f2:1a:7a:d6:4f:14:25:fd:2a:2b:ae:99:
d5:8d:68:db:2c:37:e9:5a:63:f1:a5:e5:7d:b4:e8:
5f:8b:ff:06:a4:40:24:a8:e5:bf:fa:74:24:0c:61:
63:3c:0d:67:93:15:f6:39:5b:81:25:33:f9:6a:29:
47:db:68:e5:53:f4:de:50:76:c1:ad:07:2f:8d:ac:
09:9f:4c:3f:dd:e4:b5:bf:5b:29:d7:f8:39:44:9c:
b5:95:f6:2b:67:51:11:64:ed:ff:f4:d6:5d:b7:67:
08:2b:26:f0:1b:7f:ff:57:ec:45:e0:74:b5:7d:4e:
76:13:50:8c:8e:8a:e6:80:75:75:8e:31:ae:59:34:
b1:9a:89:0a:cb:02:68:51:ce:f4:73:c4:f6:56:f6:
1f:be:c7:2b:9b:0b:ce:99:07:16:b4:97:a9:41:59:
1a:58:8c:51:c4:e6:3a:22:9a:f5:87:f2:8d:6c:b9:
9b:40:d3:fd:e9:0f:47:5a:d6:01:88:a2:29:0c:76:
ed:7d:72:31:b8:3b:76:d4:0d:5b:56:de:af:79:ab:
c7:8d:12:78:69:3b:a1:97:b2:ab:71:7f:40:ca:4c:
cb:22:0d:e1:c3:53:2c:4a:c5:72:1e:0c:d5:f2:2a:
d5:0f:25:71:f1:f3:39:69:94:dc:93:ac:51:22:8e:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:F6:5A:8B:E0:89:BB:9E:85:BC:46:1C:B8:F1:EB:80:3E:02:15
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:44:97:a3:1f:05:96:42:cd:cc:2b:58:dd:27:71:5c:f1:
e6:55:0f:3b:f4:93:5b:9b:15:a7:33:1a:fa:6d:24:e3:0a:62:
5a:56:6c:87:bf:a2:1e:25:a9:f0:26:2c:63:26:cd:f0:b8:9d:
40:01:62:51:f2:89:1c:d8:ee:2a:c9:51:dc:a4:b1:06:bc:ac:
e1:51:3e:a0:77:b2:6c:aa:74:f6:54:54:5f:f0:4c:1e:fe:5d:
42:75:6b:d1:73:96:89:8c:29:4a:1a:5f:2e:41:ab:a0:4d:4f:
ef:09:ad:9d:d2:fd:c0:58:10:39:d5:24:91:f2:39:27:a1:53:
34:45:72:ec:df:da:62:63:ed:35:26:ea:49:d4:e0:de:8a:64:
40:97:1d:4b:fd:cb:a6:2d:ae:26:db:5c:45:99:d3:ff:d3:fc:
31:3a:1a:1f:62:66:e5:67:f8:32:8d:8b:6d:36:fa:99:11:b0:
87:45:a2:bc:6b:2f:e3:8e:9f:1f:1f:af:30:b3:b8:4e:83:af:
72:d8:8d:49:4f:78:f3:1c:ca:6e:b9:ff:1f:fb:ef:cc:ca:0e:
91:a1:7c:1d:b2:6b:bd:a9:98:3a:65:c6:40:dc:df:f1:78:bb:
f2:f0:d6:65:60:9a:98:42:a2:1a:77:d9:af:3f:2d:b3:db:d5:
96:2d:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:01 2026 by rpki-client