Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: 6n7Rl1irZgW18bV7ecHtrbeYMQWvEqiYVQ206BaoAHM=
Subject key identifier: F9:6A:87:C9:AC:6D:D5:28:C6:86:39:CF:A4:B8:30:48:F9:C2:2D:8B
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019D3977B96920DA902056F8EAC86BA1E584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 1777
Signing time: Sun 29 Mar 2026 12:00:40 +0000
Manifest this update: Sun 29 Mar 2026 12:00:40 +0000
Manifest next update: Mon 30 Mar 2026 12:00:40 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: Ca7ayAVEy3g7MzW7tXbYfna6P3kOibL16+VcWnovpSs=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b9:69:20:da:90:20:56:f8:ea:c8:6b:a1:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Mar 29 12:00:40 2026 GMT
Not After : Mar 30 12:00:40 2026 GMT
Subject: CN=f96a87c9ac6dd528c68639cfa4b83048f9c22d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:61:bb:d4:d6:14:aa:dc:67:45:b9:d8:2e:
d6:b0:41:bb:92:bd:be:6e:81:87:5c:9f:10:af:29:
8c:d9:e8:a9:75:87:b4:9d:57:af:8d:ba:7b:27:82:
48:85:58:de:8b:8d:42:52:32:1c:b1:7e:60:b9:6b:
a6:8a:d0:d1:f4:4a:d2:ef:7a:ab:52:d6:85:3b:bd:
b2:20:31:a1:9b:54:2d:20:fe:a4:0c:1e:b5:cf:58:
35:15:27:11:f4:8d:48:0e:6e:e2:b3:71:95:4f:b3:
67:cc:62:91:a4:8d:35:13:3d:71:5d:e3:b4:0b:f6:
0f:00:2f:1d:64:6f:ca:9b:af:43:32:b8:fe:de:8e:
0a:8b:0b:ba:1c:c7:d2:0b:0f:f9:11:e0:04:39:2f:
9b:de:18:bd:d6:57:52:ea:5d:83:6e:21:71:a0:60:
16:25:ea:46:8d:91:5a:f1:c2:e3:46:67:53:59:b3:
b0:8d:b4:cf:bf:be:ec:6e:2e:6f:e0:a0:72:c9:ff:
6d:2e:98:8a:70:82:fe:35:a5:db:16:25:e5:f5:86:
6b:76:fc:a1:e6:38:46:49:7b:10:a4:53:82:5d:71:
cf:0f:75:e7:bb:ed:71:df:72:df:be:4a:56:41:f2:
ad:f1:55:fe:aa:d8:a5:69:f2:88:e7:45:46:ac:da:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:87:C9:AC:6D:D5:28:C6:86:39:CF:A4:B8:30:48:F9:C2:2D:8B
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:1d:8d:f0:2a:ed:01:74:e7:ad:1c:07:01:de:17:17:28:
bd:dc:09:b5:0a:b8:b2:d4:f9:7e:c3:b1:b5:44:bb:e3:55:3d:
16:ab:eb:7e:a6:fa:0a:90:3a:5b:8b:6a:89:29:17:92:62:47:
00:67:08:84:c5:14:71:37:c5:19:72:97:75:80:c5:6b:43:07:
52:82:91:f7:89:5c:06:b5:f2:66:d5:17:2f:1d:9c:98:01:86:
fc:1f:e8:27:9f:06:f0:0d:e7:1b:86:88:b5:45:53:94:81:21:
2a:a7:73:c1:a6:32:f5:67:06:4f:9e:6e:2f:a4:0d:4f:91:e4:
b1:03:76:cf:fe:a9:32:b2:4c:bc:6d:20:89:78:31:c2:d7:52:
c3:f1:4a:bf:f2:e1:3a:d9:ae:d6:4a:bc:f2:29:33:89:dc:f9:
10:ed:e0:0d:d1:8c:8d:9a:64:c8:41:2e:91:13:7a:8a:bc:4c:
25:77:04:5e:37:c5:47:92:d9:2d:aa:8f:3b:f5:6e:c5:24:65:
90:0d:aa:d8:c6:0d:34:4c:55:67:ad:df:46:eb:50:c8:8f:9b:
bb:60:b2:77:a4:37:86:1a:67:3e:a4:e4:c0:50:99:82:b7:bb:
e2:97:79:f0:a4:06:4f:66:ae:4b:d5:95:44:8d:27:51:21:68:
22:42:70:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7lpINqQIFb46shroeWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx
MTY2NDQwHhcNMjYwMzI5MTIwMDQwWhcNMjYwMzMwMTIwMDQwWjAzMTEwLwYDVQQD
EyhmOTZhODdjOWFjNmRkNTI4YzY4NjM5Y2ZhNGI4MzA0OGY5YzIyZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbVhu9TWFKrcZ0W52C7WsEG7kr2+
boGHXJ8QrymM2eipdYe0nVevjbp7J4JIhVjei41CUjIcsX5guWumitDR9ErS73qr
UtaFO72yIDGhm1QtIP6kDB61z1g1FScR9I1IDm7is3GVT7NnzGKRpI01Ez1xXeO0
C/YPAC8dZG/Km69DMrj+3o4Kiwu6HMfSCw/5EeAEOS+b3hi91ldS6l2DbiFxoGAW
JepGjZFa8cLjRmdTWbOwjbTPv77sbi5v4KByyf9tLpiKcIL+NaXbFiXl9YZrdvyh
5jhGSXsQpFOCXXHPD3Xnu+1x33LfvkpWQfKt8VX+qtilafKI50VGrNqnZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlqh8msbdUoxoY5z6S4MEj5wi2LMB8GA1UdIwQY
MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt
OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh
LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeQdjfAq
7QF0560cBwHeFxcovdwJtQq4stT5fsOxtUS741U9Fqvrfqb6CpA6W4tqiSkXkmJH
AGcIhMUUcTfFGXKXdYDFa0MHUoKR94lcBrXyZtUXLx2cmAGG/B/oJ58G8A3nG4aI
tUVTlIEhKqdzwaYy9WcGT55uL6QNT5HksQN2z/6pMrJMvG0giXgxwtdSw/FKv/Lh
Otmu1kq88ikzidz5EO3gDdGMjZpkyEEukRN6irxMJXcEXjfFR5LZLaqPO/VuxSRl
kA2q2MYNNExVZ63fRutQyI+bu2Cyd6Q3hhpnPqTkwFCZgre74pd58KQGT2auS9WV
RI0nUSFoIkJwsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:04 2026 by rpki-client