Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: 2fv45VMUrq5Bhpodfj+RvNijFHO6RUwL+dZ6QQDbgLk=
Subject key identifier: 43:2F:86:9D:D9:38:8A:32:D9:07:EA:B8:E6:A5:52:DD:73:9B:EB:08
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019CAA8FAF453E883F35A3AF5BE2897D64D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 13EB
Signing time: Sun 01 Mar 2026 18:01:08 +0000
Manifest this update: Sun 01 Mar 2026 18:01:08 +0000
Manifest next update: Mon 02 Mar 2026 18:01:08 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: 70Oin9SLgJmTuWpYfF6BmiyBtt7BhJf2BBm/8qNRUXU=)
2: 4h5jFmUAHogYMzFmPzLef51aEOo.roa (hash: +Vnh/sN48kb2A3UtpPAdLkn1qR/raYPxhCm9aIXa9vk=)
3: IejMQZqryCYEJhPt3g_AUlVHwbc.roa (hash: nNLRvEhZpJTRNsbKaW/XctbPiknRbtd4nqAjqgh3BSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:af:45:3e:88:3f:35:a3:af:5b:e2:89:7d:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Mar 1 18:01:08 2026 GMT
Not After : Mar 2 18:01:08 2026 GMT
Subject: CN=432f869dd9388a32d907eab8e6a552dd739beb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:b9:63:f9:01:a3:a8:dd:a1:83:d1:02:c5:
c3:2f:47:2e:71:2c:ed:f6:c4:7b:8b:fa:d4:44:e8:
ef:7b:ac:02:b9:26:88:5a:3c:46:6e:d9:34:95:82:
53:f5:68:0c:45:b9:f0:d1:b8:85:a4:24:ab:62:60:
9a:cf:b8:0f:a4:c1:0c:60:9b:b1:69:86:14:e3:f7:
f7:f3:1b:89:8c:d4:11:97:14:6a:f5:ae:77:b3:10:
5a:31:a5:0e:df:40:f0:26:6c:b0:09:fd:a6:c9:ee:
9a:e0:03:e4:09:ff:9b:33:59:82:fc:9e:41:a1:95:
78:44:98:4a:6f:1c:a4:4c:64:1d:30:59:59:0b:28:
dc:ee:1c:c9:e2:8b:74:b2:f3:7a:e4:73:0a:23:47:
8b:78:fd:ee:b5:05:97:b2:ba:ca:cc:9a:88:4c:38:
ed:f1:52:9a:ed:a1:91:a0:84:78:f7:0c:63:14:3d:
9a:05:f7:6f:50:40:86:db:87:50:31:71:e3:3c:92:
c0:ff:40:2f:81:8a:51:9f:c2:c7:f1:71:7d:87:62:
10:c0:34:09:c9:7e:97:a0:7f:fe:09:9f:aa:b8:b2:
72:e9:32:00:99:67:81:87:ad:11:93:7e:a9:24:27:
10:e4:47:53:28:46:b9:a4:c8:3c:f9:d7:2d:61:92:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:86:9D:D9:38:8A:32:D9:07:EA:B8:E6:A5:52:DD:73:9B:EB:08
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d9:5a:ba:63:a5:3c:db:93:c8:61:d1:8b:79:b7:a9:51:07:
9a:f7:34:a5:a6:a9:41:d0:70:1b:50:a3:d8:21:f5:37:60:31:
aa:72:4c:e8:d6:38:b8:19:df:29:47:0f:24:b5:88:a3:92:66:
19:d8:ed:2a:bb:ca:28:86:e0:fb:23:f8:1b:08:0f:d4:91:44:
6d:78:75:54:53:3c:a2:ed:50:54:2c:48:fb:31:1d:54:16:b0:
c9:eb:f7:c4:c8:41:44:da:07:a0:c1:d8:7b:d1:bb:24:c4:0e:
7d:09:87:17:25:12:c0:15:3f:61:25:88:63:16:7d:35:8b:51:
5f:70:6f:0f:22:54:78:75:5c:02:47:ec:88:0a:32:32:c0:83:
00:dd:f1:c7:4e:40:1e:4b:43:07:df:ac:27:9e:69:5f:00:e3:
88:9e:18:f2:46:54:ca:9e:6e:e3:44:15:46:50:17:44:5f:2b:
a3:ea:5b:44:84:80:3e:40:4b:29:f9:2f:93:0b:eb:e3:f9:1a:
5d:70:5e:b0:8c:0f:05:fa:09:31:0a:0a:94:c0:9d:d2:10:55:
ca:58:56:21:cb:56:ff:36:8c:eb:62:c5:3f:94:be:eb:32:0d:
d3:9d:2c:a4:9f:38:31:51:b6:e4:1c:61:1c:f3:34:8e:f9:78:
d4:48:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:48 2026 by rpki-client