Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: PbkV9v06ujUtIZahP6sikCCX05b1X/m8F8ztG6AUBTQ=
Subject key identifier: 1D:E6:AD:46:A3:A3:6A:34:91:19:AB:B8:5C:16:EC:B8:9C:D3:CD:77
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019CABA2599CE701C18FA0F549CF60650F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 12DE
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: D0BnT9ZjMNROi4yrNuGBWZGjqR9My43k1s8LERiZKSc=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:59:9c:e7:01:c1:8f:a0:f5:49:cf:60:65:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=1de6ad46a3a36a349119abb85c16ecb89cd3cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:70:77:2f:5c:ea:fb:02:4d:dc:61:00:b2:
90:7b:6e:28:f5:6a:78:3a:8e:67:59:b3:32:f2:39:
d8:b8:57:0d:ed:dc:a7:ec:39:d5:a2:e5:e1:7e:87:
ac:7c:c1:76:35:26:e5:e8:cc:74:69:75:a1:d0:bf:
69:cb:4e:9b:d9:45:65:1e:51:ed:7c:b2:7a:5b:56:
f4:39:ab:d6:12:68:60:81:63:d6:0c:7e:3a:59:3a:
7d:db:e5:aa:43:a4:c1:42:95:c3:3c:69:ae:59:d5:
15:dd:bc:39:08:fd:e6:15:6d:3f:ab:75:d0:8b:6f:
a2:5d:7a:3f:2d:27:f7:ca:75:bc:d3:88:2e:ea:e8:
27:58:11:6d:65:f8:50:13:22:11:e9:9d:4c:d0:e6:
b4:13:a2:6f:49:e8:38:67:09:31:4c:94:14:b0:f8:
48:98:f9:fa:f1:be:e3:01:c5:3d:48:3b:79:f2:90:
c5:63:87:bc:f9:ac:43:5a:a9:7e:c1:c4:85:06:8c:
bf:8d:d8:9f:a3:fd:07:40:16:16:77:62:8d:ca:08:
51:80:f3:de:f9:b9:a1:f6:c3:35:c7:3d:c3:4b:1e:
c1:aa:a8:8d:7c:63:bf:05:4a:e5:72:28:6f:31:d7:
52:ec:a4:35:7c:8e:5a:32:04:21:19:e5:5f:23:bf:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:AD:46:A3:A3:6A:34:91:19:AB:B8:5C:16:EC:B8:9C:D3:CD:77
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:78:fc:fa:fc:14:af:8d:b6:e9:26:13:c1:c2:50:f4:08:
6b:63:e3:bd:59:98:09:24:3e:5c:8d:23:7b:aa:f8:8c:4a:5c:
b3:f5:5c:e1:cc:52:7c:f8:84:cc:f2:fc:18:ad:22:7e:e4:af:
9d:54:26:43:02:23:9e:94:b4:1b:0e:db:fd:41:8c:a8:a5:11:
9d:0c:ae:c2:46:ac:98:35:81:49:c3:62:cd:86:14:5f:11:b2:
ab:97:33:b9:d4:a1:bc:04:7e:19:40:30:70:1c:10:a2:9f:ea:
ad:4a:9c:ca:ff:ea:58:dd:50:3c:a7:a8:0e:38:b5:1a:e0:c2:
fa:04:ab:a6:14:e7:14:99:49:ea:5f:fc:c9:c1:54:08:a0:59:
db:91:53:19:f9:70:7d:a0:7b:7c:7a:1f:9b:ea:cb:4a:c6:30:
fe:5c:b0:9d:08:4b:c9:b6:f5:75:43:02:90:0b:eb:b1:ed:27:
e1:e6:89:0a:47:11:1b:c3:4d:f3:dc:9f:5a:78:e1:d2:9c:e5:
75:25:0d:b9:2e:85:c6:3b:d8:03:7a:fe:f4:3a:ac:c9:fa:8e:
09:fd:75:fe:3b:c4:5d:c4:f1:d7:e4:e8:d3:ad:0f:44:7b:60:
09:ed:bb:d7:b1:ed:83:9e:24:f9:c2:3d:5f:d9:e0:7c:26:b3:
41:2d:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:02 2026 by rpki-client