Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: BUcbl8Zrj7WUvcCEffAHKEZ/S9nBuqiiKuwiDIrqtNc=
Subject key identifier: FB:88:26:93:FA:C0:E6:BF:F2:DE:62:8E:F9:BD:C8:AB:61:3C:F0:6C
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019D382E60C02EB43D4E9B246BFB7A5507BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 12AF
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: P2xcA6bZpCYUxDV97dnPZj5MXPSVAXfXdaieezogIVk=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:60:c0:2e:b4:3d:4e:9b:24:6b:fb:7a:55:07:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=fb882693fac0e6bff2de628ef9bdc8ab613cf06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:a6:6d:20:b2:65:0f:78:aa:44:ec:5d:7a:
4f:92:c9:b7:30:a3:f6:0a:ba:bd:e6:4c:7d:7d:9e:
fd:d2:e5:bc:8f:64:0c:fd:62:b1:a3:86:87:69:b2:
33:82:73:14:c8:ea:65:84:9d:ba:b1:44:06:a0:ee:
d0:3e:71:ca:13:e5:74:80:75:7f:e3:2e:fa:96:72:
0d:31:fc:22:b7:63:b7:74:e0:17:de:81:59:d5:9a:
ad:f4:af:fb:ef:6f:45:87:04:17:f8:2a:a5:49:41:
b9:89:57:2d:a7:4a:45:54:00:60:51:ca:74:dd:24:
d5:9d:ee:0a:85:96:bf:dd:bb:1a:ee:98:bc:5b:6e:
b3:e9:83:ac:14:a5:4d:2e:f9:e9:02:38:28:4a:03:
23:87:05:a5:27:ec:78:9b:f2:6b:1e:ab:64:71:f4:
25:91:20:1e:a5:ea:be:fb:96:d1:d7:fb:f4:57:2e:
9f:18:8c:6e:4d:26:1e:f5:89:43:d8:3f:43:e2:96:
ac:e9:5c:2b:38:2a:a5:e4:22:48:0a:e8:cf:09:0d:
3c:9b:f3:d0:f6:3d:ba:2e:b1:17:35:7a:0c:c4:34:
f0:8b:9e:c0:a7:68:24:56:b9:87:7b:29:f5:da:9a:
a6:7e:44:65:2f:04:bd:6c:72:8c:e2:5a:fd:d7:d2:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:26:93:FA:C0:E6:BF:F2:DE:62:8E:F9:BD:C8:AB:61:3C:F0:6C
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8f:cf:11:6c:de:c0:12:76:71:92:37:cd:40:cb:5d:76:83:
bc:b4:84:06:da:7a:59:6e:b0:20:0f:6f:47:28:89:e3:67:cd:
b5:90:2c:eb:4e:67:d8:ed:de:7d:fd:1b:12:1d:be:4a:cc:31:
92:e0:50:01:36:1b:a2:9c:b4:5a:59:01:3e:81:44:78:a5:cf:
d2:e6:2b:20:17:03:1a:04:be:87:ad:2f:ad:3c:19:f0:0f:04:
34:5d:09:91:19:0f:91:cb:a2:da:34:af:bd:60:ca:98:81:e9:
24:16:b3:2c:62:31:1c:d1:e6:d1:46:09:af:ce:d7:1e:ba:2a:
a0:26:d5:e4:7d:da:48:18:dc:36:91:b4:25:9a:5d:10:06:0c:
27:82:c3:e3:b1:88:3e:2f:0c:eb:30:4d:9b:08:80:68:72:f7:
ca:34:07:3f:bb:7a:b3:cb:61:63:e1:dc:25:44:bc:2d:97:5d:
62:6e:d6:24:1a:16:bd:c1:78:c2:93:58:39:b1:51:b8:e7:96:
b9:4e:a6:78:ca:57:6c:75:1f:eb:59:78:be:65:7d:57:c8:56:
d5:7e:2a:42:bd:39:d2:af:d7:e2:4a:79:83:ed:18:20:23:c2:
2f:10:cf:50:b7:30:6d:d5:85:d7:a7:e7:63:ee:cb:1a:f4:e3:
39:e5:1a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmDALrQ9Tpska/t6VQe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjYwMzI5MDYwMDU2WhcNMjYwMzMwMDYwMDU2WjAzMTEwLwYDVQQD
EyhmYjg4MjY5M2ZhYzBlNmJmZjJkZTYyOGVmOWJkYzhhYjYxM2NmMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMimbSCyZQ94qkTsXXpPksm3MKP2
Crq95kx9fZ790uW8j2QM/WKxo4aHabIzgnMUyOplhJ26sUQGoO7QPnHKE+V0gHV/
4y76lnINMfwit2O3dOAX3oFZ1Zqt9K/7729FhwQX+CqlSUG5iVctp0pFVABgUcp0
3STVne4KhZa/3bsa7pi8W26z6YOsFKVNLvnpAjgoSgMjhwWlJ+x4m/JrHqtkcfQl
kSAepeq++5bR1/v0Vy6fGIxuTSYe9YlD2D9D4pas6VwrOCql5CJICujPCQ08m/PQ
9j26LrEXNXoMxDTwi57Ap2gkVrmHeyn12pqmfkRlLwS9bHKM4lr919JVBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuIJpP6wOa/8t5ijvm9yKthPPBsMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI/PEWze
wBJ2cZI3zUDLXXaDvLSEBtp6WW6wIA9vRyiJ42fNtZAs605n2O3eff0bEh2+Sswx
kuBQATYbopy0WlkBPoFEeKXP0uYrIBcDGgS+h60vrTwZ8A8ENF0JkRkPkcui2jSv
vWDKmIHpJBazLGIxHNHm0UYJr87XHroqoCbV5H3aSBjcNpG0JZpdEAYMJ4LD47GI
Pi8M6zBNmwiAaHL3yjQHP7t6s8thY+HcJUS8LZddYm7WJBoWvcF4wpNYObFRuOeW
uU6meMpXbHUf61l4vmV9V8hW1X4qQr050q/X4kp5g+0YICPCLxDPULcwbdWF16fn
Y+7LGvTjOeUaYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:57 2026 by rpki-client