Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: Oe1lJTtKqHXQcvKvWLi40v5TO7VAnOLraYzD8XxipEg=
Subject key identifier: B5:75:A6:A2:86:A9:B3:0E:CA:EA:5D:15:A1:23:11:2E:6B:4F:B7:87
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019CABA1DBF69224F7BE0631D2429831A3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 04E0
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: 24W9H8BB5eEIpWDtQZ0fZXLySGNsl7OS/Cx3x1y0T5w=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:db:f6:92:24:f7:be:06:31:d2:42:98:31:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=b575a6a286a9b30ecaea5d15a123112e6b4fb787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:9e:5a:65:d1:5b:f1:23:b9:2c:8a:cf:3b:
f3:04:93:fb:a1:b1:d6:a8:86:42:9d:68:bf:65:7b:
5e:36:f4:fe:a2:f3:58:ae:6d:18:a7:d7:a9:28:e1:
ca:5e:6f:69:84:d7:4c:44:bb:18:9c:cb:f4:3c:e0:
46:e1:ca:96:e5:74:3f:59:3f:f2:ec:48:ab:3f:ad:
f2:1a:7a:ca:43:48:61:1f:00:4e:ad:a3:63:d6:23:
21:fd:b9:5a:29:aa:12:9d:38:27:4e:a9:2e:81:d2:
dd:c2:3c:4b:c8:39:e2:70:10:87:b6:e4:33:d4:7c:
9c:0f:7a:d6:77:2f:27:a8:5b:e6:e4:39:19:dd:37:
f8:c6:de:56:45:a9:2f:fd:af:2d:e8:c8:ac:18:8c:
6a:54:82:3b:88:78:7e:30:0f:ff:95:c9:06:85:86:
b2:88:ee:e6:51:84:5d:50:b1:99:5f:ed:6b:9a:72:
04:5d:b7:f5:fe:16:68:6c:7e:7c:06:f4:5c:3e:86:
d8:be:f1:7d:8a:32:94:dd:ea:3d:8d:e4:cd:5e:aa:
37:65:a6:ea:b0:08:f9:26:08:3c:78:a9:2b:60:f8:
8b:a1:d3:27:da:ea:76:eb:16:ba:f7:6d:47:a2:c3:
98:d9:cc:e0:dc:81:b0:a1:1c:72:3f:a7:5f:42:1b:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:75:A6:A2:86:A9:B3:0E:CA:EA:5D:15:A1:23:11:2E:6B:4F:B7:87
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:52:75:99:e9:dc:d0:d7:58:f3:00:d1:02:51:c5:53:d3:
7d:3e:77:dc:92:df:16:d1:ad:f3:ad:f5:80:37:e5:03:fd:c0:
7a:c1:96:53:6f:d0:de:ff:21:05:3d:5d:17:71:ad:55:41:e4:
d2:48:4b:bf:1f:2b:1f:72:5e:15:a4:63:7a:cd:47:b1:6e:4b:
fc:7e:d7:98:c3:cc:7c:76:58:00:8a:c1:1a:ad:75:71:67:1c:
36:75:8e:07:e0:26:9f:a6:15:2b:87:95:60:31:c2:48:86:47:
24:36:a1:8f:7d:a7:0b:f4:fb:7c:e9:15:88:0d:f6:52:0b:04:
26:e2:b2:bd:96:9f:cc:f7:68:b8:1f:b0:97:f8:52:f9:fa:14:
77:c7:47:e6:d9:72:fb:83:54:c1:1d:3f:df:d9:51:42:e7:8f:
33:45:00:5e:96:a0:39:5d:58:44:d5:9e:61:35:a7:24:f5:a5:
58:e3:78:d8:71:18:f1:9b:c5:e0:a6:08:11:93:77:1c:77:1f:
2b:8c:8e:83:e9:9f:dd:ed:27:2b:7d:b2:63:3e:a9:b4:90:d2:
99:15:38:3c:9f:14:01:b2:01:64:85:58:fb:8f:c5:8b:99:9e:
2a:61:03:7d:78:1b:21:55:21:0c:bd:e0:41:56:1b:c3:0d:5a:
29:3a:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:28 2026 by rpki-client