Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier: aRRCQEsYobMR5PyXky9ajBN60LlNyVq6hlpEuw1fVEg=
Subject key identifier: F5:18:1D:45:2D:E0:AE:27:7F:8C:7B:27:49:10:A2:24:2B:C5:E0:E7
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 019D389C2276A888F250A6788D4FC03EB344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number: 1591
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: nNQ53kVb2Iqkby4/kBZ9fQphyGvVOhquK+KEB1x7u3s=)
2: htjYZ9JBO2eJvDfIw7akHdbswEA.roa (hash: i2ODfKpZOto1cBGwXz5NxaTX+a6SvokP9Jli5HlOhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:22:76:a8:88:f2:50:a6:78:8d:4f:c0:3e:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=f5181d452de0ae277f8c7b274910a2242bc5e0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:4f:4d:8c:5f:56:7b:45:11:0a:b7:1d:30:
6f:b4:f4:cc:03:1d:be:88:17:8c:eb:93:eb:17:11:
ed:3f:42:e6:ee:87:3a:c6:d3:22:8c:8d:9a:d2:b5:
0b:9f:4a:33:01:21:4a:be:5f:86:aa:54:a3:86:01:
1e:45:c1:35:a2:47:c2:f6:9d:e4:93:3d:74:c5:4b:
9f:7d:42:0b:21:fa:75:e0:5b:45:d0:c6:6c:28:97:
0b:f6:83:38:14:73:ad:2b:87:51:1c:b3:7f:53:08:
7f:14:5a:02:5a:35:c9:de:80:ca:8f:47:bc:7e:46:
50:b4:07:a9:6a:2d:aa:d1:4b:11:01:6f:ca:18:a9:
32:0b:57:23:67:0c:f3:7c:d3:b7:dd:73:77:bb:be:
15:1d:07:75:c4:9d:93:ce:4a:37:2e:40:0c:51:ff:
e9:b8:b2:32:32:dd:26:18:08:aa:38:98:df:a1:a8:
5c:9f:91:80:ee:8f:3a:a7:be:43:3d:d6:05:b4:81:
65:1d:df:af:4c:7d:4d:a7:51:8b:d6:b3:67:80:81:
43:17:0e:74:da:4b:15:5e:bf:bf:34:fc:af:44:fa:
20:36:25:ee:90:f1:c9:40:91:2a:fc:a5:89:46:d2:
97:2b:cf:2b:79:7e:7a:88:97:79:ef:e7:cd:11:bf:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:1D:45:2D:E0:AE:27:7F:8C:7B:27:49:10:A2:24:2B:C5:E0:E7
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:b8:31:00:fe:8f:df:7c:d8:84:b4:ac:bb:d2:81:19:d8:
bf:ff:ff:0b:a8:de:c5:cd:2b:9b:42:99:47:fc:91:fc:9b:a0:
28:60:7b:4e:21:1d:6a:77:63:48:f3:2f:44:04:04:f9:06:72:
8b:73:c1:e3:b3:d3:84:a9:a0:f8:62:62:44:28:df:bd:4a:10:
9d:e6:6e:40:8d:8a:78:8b:0e:72:ef:da:47:5e:84:ce:00:d8:
58:20:02:eb:b9:ba:08:dd:ac:50:08:74:bc:62:5c:67:71:bd:
cf:82:42:a7:c6:4d:6c:66:3d:3c:54:ee:73:65:b4:73:8a:48:
f5:88:f2:23:80:eb:33:b3:95:88:67:9d:d8:62:56:97:0f:04:
83:80:64:fd:7b:2e:23:59:1d:ad:3e:4d:d0:e0:b8:20:a1:de:
5b:12:46:35:c7:0b:f3:94:f3:8f:5d:41:34:26:d6:9a:15:6b:
e0:33:8e:5b:74:2d:41:17:01:ea:fa:51:19:6a:a6:3c:6a:47:
ae:6f:13:81:8d:8f:91:11:08:b0:ae:ca:08:ef:1a:f5:4f:9e:
42:62:53:dc:0a:c7:4c:13:88:ab:d8:a2:96:8c:a5:36:cc:e1:
4e:1e:3d:1a:6c:42:08:3d:93:2a:6f:c9:a1:8e:b3:ce:7c:ad:
32:cd:18:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ04nCJ2qIjyUKZ4jU/APrNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDFmZmQ3ZGE1ZWU0NTBmY2IxYTY1NmFiZmM2ZTBiMWIy
MWMzNjUwHhcNMjYwMzI5MDgwMDQ5WhcNMjYwMzMwMDgwMDQ5WjAzMTEwLwYDVQQD
EyhmNTE4MWQ0NTJkZTBhZTI3N2Y4YzdiMjc0OTEwYTIyNDJiYzVlMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs19PTYxfVntFEQq3HTBvtPTMAx2+
iBeM65PrFxHtP0Lm7oc6xtMijI2a0rULn0ozASFKvl+GqlSjhgEeRcE1okfC9p3k
kz10xUuffUILIfp14FtF0MZsKJcL9oM4FHOtK4dRHLN/Uwh/FFoCWjXJ3oDKj0e8
fkZQtAepai2q0UsRAW/KGKkyC1cjZwzzfNO33XN3u74VHQd1xJ2Tzko3LkAMUf/p
uLIyMt0mGAiqOJjfoahcn5GA7o86p75DPdYFtIFlHd+vTH1Np1GL1rNngIFDFw50
2ksVXr+/NPyvRPogNiXukPHJQJEq/KWJRtKXK88reX56iJd57+fNEb8WUwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPUYHUUt4K4nf4x7J0kQoiQrxeDnMB8GA1UdIwQY
MBaAFPsB/9faXuRQ/LGmVqv8bgsbIcNlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SF8xOXBlNUZEOHNhWldxX3h1Q3hzaHcyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTI2Y2VhLWY2NjAtNDhhMy04NjJm
LTkwNTAxYWJmNTM5MS8xLzEtd0hfMTlwZTVGRDhzYVpXcV94dUN4c2h3MlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI5L2UyNmNlYS1mNjYwLTQ4YTMtODYyZi05MDUwMWFiZjUz
OTEvMS8xLXdIXzE5cGU1RkQ4c2FaV3FfeHVDeHNodzJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEga4
MQD+j9982IS0rLvSgRnYv///C6jexc0rm0KZR/yR/JugKGB7TiEdandjSPMvRAQE
+QZyi3PB47PThKmg+GJiRCjfvUoQneZuQI2KeIsOcu/aR16EzgDYWCAC67m6CN2s
UAh0vGJcZ3G9z4JCp8ZNbGY9PFTuc2W0c4pI9YjyI4DrM7OViGed2GJWlw8Eg4Bk
/XsuI1kdrT5N0OC4IKHeWxJGNccL85Tzj11BNCbWmhVr4DOOW3QtQRcB6vpRGWqm
PGpHrm8TgY2PkREIsK7KCO8a9U+eQmJT3ArHTBOIq9iiloylNszhTh49GmxCCD2T
Km/JoY6zznytMs0YeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:10 2026 by rpki-client