Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: 2GhJF+iK+ux5e+9ORqOF2ueYdLKBdkKKdLeq0iLD0zI=
Subject key identifier: 57:82:9D:D9:AA:35:27:B8:15:29:D8:6C:EE:E8:A6:F5:04:90:01:A4
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019D38D34B93E35050BFB47FDAAF2BC3B237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 02F8
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: BoE/Ggz9Iv528Cx3JkNlpWyuYq0HaLQzGOW87enHozs=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4b:93:e3:50:50:bf:b4:7f:da:af:2b:c3:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=57829dd9aa3527b81529d86ceee8a6f5049001a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:83:8f:95:6e:f2:77:30:e3:42:c1:0d:16:
3f:fd:00:3c:80:fc:b5:f9:a1:15:fa:e9:18:8e:80:
a8:cc:10:ce:89:57:57:ed:ca:26:06:3a:d9:cb:d6:
e7:e5:25:95:d6:8f:c4:a2:34:9f:0e:ec:98:cb:a2:
0d:be:33:a8:5d:a6:db:5b:ca:d0:c9:5d:a3:2e:b3:
fe:5d:04:b1:4e:ea:4b:51:c9:f1:da:33:7d:a3:1d:
44:1e:90:7c:29:a9:32:8e:46:41:7a:30:e6:5c:01:
60:14:eb:63:c5:07:a8:54:f3:b1:0c:72:58:df:e5:
24:74:47:be:d8:02:4e:6f:08:a7:24:68:70:51:6b:
57:45:f5:d6:dc:87:03:de:a1:c3:8e:f9:06:db:5c:
c1:b7:8e:dc:a0:23:77:24:48:a4:51:73:65:fa:8b:
46:da:fb:d2:19:8d:ef:8a:a8:42:68:7d:40:17:5b:
e4:01:94:84:f4:e0:e8:22:17:5a:8c:60:34:d4:89:
a7:66:ef:cf:37:32:c5:8d:09:cf:37:d7:04:c3:d0:
87:98:ad:36:53:ea:4b:e7:7f:cc:51:37:cb:0b:44:
81:d4:86:7b:3e:94:e9:32:78:a4:5c:09:ca:04:a5:
be:3f:da:a9:dc:38:12:64:4a:1e:c9:13:58:89:5f:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:9D:D9:AA:35:27:B8:15:29:D8:6C:EE:E8:A6:F5:04:90:01:A4
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:77:05:cd:00:85:ab:c1:1c:3d:5e:40:a1:17:5b:4a:f4:
cb:88:a2:e8:a1:33:70:ce:9e:24:6d:3a:f5:b0:68:75:1b:0b:
65:dc:3c:2b:92:03:ed:ee:ac:57:34:5e:5c:36:b8:00:19:2d:
bc:b4:47:d2:de:f5:45:cb:7f:e1:ee:96:15:a9:a9:6d:4f:59:
78:7a:d7:d5:8b:3e:8e:2d:18:a1:0f:50:c7:29:ff:bb:a5:22:
cf:84:bb:af:64:ac:77:38:25:07:85:43:71:4e:31:06:4e:d5:
19:19:c4:4a:7e:88:97:94:ff:82:4e:bd:2e:de:a2:01:17:ab:
1e:af:ae:02:8e:38:c3:af:b5:79:65:93:00:53:35:d3:0f:ed:
0a:73:99:96:85:28:97:32:30:ac:86:31:69:80:a0:9a:ea:a3:
e0:24:db:2f:1e:5b:ef:dc:65:5b:4c:e3:55:df:51:08:60:c2:
5a:16:20:32:39:da:9c:b8:fc:1f:d4:b7:1a:c4:78:62:da:6e:
a7:fd:3a:bc:01:04:17:19:b6:45:4f:4d:ff:52:3e:fd:db:e2:
c3:69:99:a6:d7:a7:47:fd:86:83:fe:aa:72:a6:3e:71:9d:c0:
45:43:e2:3f:78:7e:02:33:4a:b6:69:ab:d7:d5:65:d9:5a:df:
fd:63:44:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400uT41BQv7R/2q8rw7I3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTU5MzI5NjBmM2MxNzRkNDk1N2FiZTlmNWFiMjk1MjY0
ZDU0NTMwHhcNMjYwMzI5MDkwMTA0WhcNMjYwMzMwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg1NzgyOWRkOWFhMzUyN2I4MTUyOWQ4NmNlZWU4YTZmNTA0OTAwMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPeDj5Vu8ncw40LBDRY//QA8gPy1
+aEV+ukYjoCozBDOiVdX7comBjrZy9bn5SWV1o/EojSfDuyYy6INvjOoXabbW8rQ
yV2jLrP+XQSxTupLUcnx2jN9ox1EHpB8KakyjkZBejDmXAFgFOtjxQeoVPOxDHJY
3+UkdEe+2AJObwinJGhwUWtXRfXW3IcD3qHDjvkG21zBt47coCN3JEikUXNl+otG
2vvSGY3viqhCaH1AF1vkAZSE9ODoIhdajGA01ImnZu/PNzLFjQnPN9cEw9CHmK02
U+pL53/MUTfLC0SB1IZ7PpTpMnikXAnKBKW+P9qp3DgSZEoeyRNYiV8rkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeCndmqNSe4FSnYbO7opvUEkAGkMB8GA1UdIwQY
MBaAFNUVkylg88F01JV6vp9aspUmTVRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjkt
MTNmNjViNTQzY2M0LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjktMTNmNjViNTQzY2M0
LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBl3Bc0A
havBHD1eQKEXW0r0y4ii6KEzcM6eJG069bBodRsLZdw8K5ID7e6sVzReXDa4ABkt
vLRH0t71Rct/4e6WFampbU9ZeHrX1Ys+ji0YoQ9Qxyn/u6Uiz4S7r2SsdzglB4VD
cU4xBk7VGRnESn6Il5T/gk69Lt6iARerHq+uAo44w6+1eWWTAFM10w/tCnOZloUo
lzIwrIYxaYCgmuqj4CTbLx5b79xlW0zjVd9RCGDCWhYgMjnanLj8H9S3GsR4Ytpu
p/06vAEEFxm2RU9N/1I+/dviw2mZptenR/2Gg/6qcqY+cZ3ARUPiP3h+AjNKtmmr
19Vl2Vrf/WNESQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:03 2026 by rpki-client