Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: vjiYsfxwS+RRAhH2FUJ4jUafwxszPzxgkehLILnPGrk=
Subject key identifier: C3:B8:D9:E1:80:0D:C4:CC:8F:DB:D6:E6:58:A2:EC:90:DC:21:78:A2
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 019D3977F0DBAF4F5BFC678244B3F2F8EBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 01E0
Signing time: Sun 29 Mar 2026 12:00:54 +0000
Manifest this update: Sun 29 Mar 2026 12:00:54 +0000
Manifest next update: Mon 30 Mar 2026 12:00:54 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: C6QZQp3MM2bBZUsRZZrC28t1CNZ4eQQPDP1vUqM7tno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f0:db:af:4f:5b:fc:67:82:44:b3:f2:f8:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Mar 29 12:00:54 2026 GMT
Not After : Mar 30 12:00:54 2026 GMT
Subject: CN=c3b8d9e1800dc4cc8fdbd6e658a2ec90dc2178a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:70:bf:0d:7a:81:79:7f:31:e7:ec:5c:cf:
7e:c8:94:7e:4b:55:67:33:b3:7b:db:f5:dd:bc:66:
91:b0:37:26:5f:a6:88:34:79:94:73:91:fb:a0:ee:
b6:71:88:09:0c:32:4b:0c:fc:1c:f8:bf:1e:68:03:
90:c3:61:3d:f3:94:41:47:03:15:91:da:18:60:1b:
b4:98:5f:5c:fa:f9:26:69:38:b9:5b:66:46:97:1a:
c9:fe:13:e0:b8:62:4e:1d:b2:91:b7:01:3a:9a:21:
78:a2:48:8b:76:f1:94:e0:10:6d:52:b0:4c:ff:1e:
17:bf:ed:4b:ee:64:d2:64:98:0c:98:a8:e3:f8:ac:
4a:6a:23:53:fd:82:54:ae:e5:a0:a9:ac:23:43:22:
9a:9b:a1:e8:af:37:7b:c7:50:0b:2e:43:cf:e3:c3:
06:eb:a8:b5:32:49:02:30:7a:24:0a:db:6b:c9:da:
18:6c:88:85:76:c9:3b:a5:3c:4b:6e:d8:67:8f:5b:
3a:d4:58:3b:22:94:8e:98:76:38:b1:80:b2:f0:d8:
bd:b6:fc:1c:1f:aa:16:09:39:b5:0a:98:78:da:b0:
1b:46:b5:d7:6c:7e:27:80:98:60:d7:02:12:8c:2a:
1d:e4:a0:3c:f8:b2:36:a7:cf:b3:2a:fd:0d:57:59:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:D9:E1:80:0D:C4:CC:8F:DB:D6:E6:58:A2:EC:90:DC:21:78:A2
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:42:ea:f0:16:a6:9b:10:c0:7d:df:9d:62:e1:d3:37:6e:82:
1f:e0:db:41:40:ae:f1:a1:fb:14:67:bd:d0:40:85:27:bb:1e:
d9:2f:f7:ff:75:d8:ec:c6:43:9e:25:b0:6f:ad:7f:0f:d9:b6:
d6:bb:22:29:f3:b8:04:84:85:0f:14:da:a6:6d:95:cf:8a:7b:
66:4d:37:80:b6:54:de:c3:84:d4:c9:4f:ce:e0:81:af:8c:8a:
e2:71:d7:6b:b5:ee:32:72:b1:7d:cd:df:1f:70:b7:9b:94:4b:
5d:27:51:9c:42:1c:3e:ba:38:a1:a7:a5:c3:06:9e:9f:72:81:
52:80:f1:0b:d4:f1:ed:f2:8b:f0:d7:db:72:85:2b:40:5a:54:
2c:71:8f:83:04:2b:38:54:70:11:95:b7:6d:0b:2f:56:37:c9:
2a:6f:73:89:59:b8:94:35:49:bf:3e:77:4f:e0:11:9b:2e:f6:
d0:cb:e6:e2:8b:40:66:fa:4c:9e:b6:1a:2b:b4:b3:ee:e3:74:
0c:a7:13:81:3c:f6:42:43:0c:d2:1d:3d:cb:bd:7a:73:ff:a3:
0b:34:f8:6f:bc:36:aa:42:11:a6:af:db:61:0f:5c:e9:94:17:
74:a3:49:83:d6:d1:df:49:88:28:ed:68:f5:87:2a:c5:77:a4:
7f:0f:60:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05d/Dbr09b/GeCRLPy+OvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZjdmODZjNmNlNzNkNWQ3NjM0MDNmNDk4ZWViMzJmNzBj
NDc0YWUwHhcNMjYwMzI5MTIwMDU0WhcNMjYwMzMwMTIwMDU0WjAzMTEwLwYDVQQD
EyhjM2I4ZDllMTgwMGRjNGNjOGZkYmQ2ZTY1OGEyZWM5MGRjMjE3OGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBwvw16gXl/MefsXM9+yJR+S1Vn
M7N72/XdvGaRsDcmX6aINHmUc5H7oO62cYgJDDJLDPwc+L8eaAOQw2E985RBRwMV
kdoYYBu0mF9c+vkmaTi5W2ZGlxrJ/hPguGJOHbKRtwE6miF4okiLdvGU4BBtUrBM
/x4Xv+1L7mTSZJgMmKjj+KxKaiNT/YJUruWgqawjQyKam6Horzd7x1ALLkPP48MG
66i1MkkCMHokCttrydoYbIiFdsk7pTxLbthnj1s61Fg7IpSOmHY4sYCy8Ni9tvwc
H6oWCTm1Cph42rAbRrXXbH4ngJhg1wISjCod5KA8+LI2p8+zKv0NV1lG8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMO42eGADcTMj9vW5lii7JDcIXiiMB8GA1UdIwQY
MBaAFPn3+Gxs5z1ddjQD9Jjusy9wxHSuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1mZjRiR3puUFYxMk5BUDBtTzZ6TDNERWRLNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZDY5ZDU4LWMyMjktNGMyYi1iZjU1
LTQ1NjM0NTMzMmY4Yi8xLzEtZmY0Ykd6blBWMTJOQVAwbU82ekwzREVkSzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2Q2OWQ1OC1jMjI5LTRjMmItYmY1NS00NTYzNDUzMzJm
OGIvMS8xLWZmNGJHem5QVjEyTkFQMG1PNnpMM0RFZEs0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADELq
8BammxDAfd+dYuHTN26CH+DbQUCu8aH7FGe90ECFJ7se2S/3/3XY7MZDniWwb61/
D9m21rsiKfO4BISFDxTapm2Vz4p7Zk03gLZU3sOE1MlPzuCBr4yK4nHXa7XuMnKx
fc3fH3C3m5RLXSdRnEIcPro4oaelwwaen3KBUoDxC9Tx7fKL8NfbcoUrQFpULHGP
gwQrOFRwEZW3bQsvVjfJKm9ziVm4lDVJvz53T+ARmy720Mvm4otAZvpMnrYaK7Sz
7uN0DKcTgTz2QkMM0h09y716c/+jCzT4b7w2qkIRpq/bYQ9c6ZQXdKNJg9bR30mI
KO1o9YcqxXekfw9gng==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:15 2026 by rpki-client