Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: PBlA5WJbqjHGAEtT64K4X9MGiw90BvOEItAZzSIZSSM=
Subject key identifier: D9:CF:44:E5:F4:DA:E6:B5:82:44:70:46:1F:84:65:F2:AF:82:AC:2B
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019D20944D76804966186C256760520AFAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 1885
Signing time: Tue 24 Mar 2026 16:01:23 +0000
Manifest this update: Tue 24 Mar 2026 16:01:23 +0000
Manifest next update: Wed 25 Mar 2026 16:01:23 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: FpObuXrBBBix/a/6gRwZqBZ2Gy4yEdJBbdgoMzyaa1c=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:94:4d:76:80:49:66:18:6c:25:67:60:52:0a:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Mar 24 16:01:23 2026 GMT
Not After : Mar 25 16:01:23 2026 GMT
Subject: CN=d9cf44e5f4dae6b5824470461f8465f2af82ac2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:48:f7:06:01:dd:8c:91:9c:a7:67:ae:17:
b9:36:fe:d4:74:a7:ca:12:59:67:bc:c6:81:b2:db:
92:9e:ba:40:75:37:30:5c:a6:9b:2d:c2:5b:11:17:
0a:71:19:f3:17:b5:06:b4:3f:38:27:4d:b6:c9:57:
bc:ab:ca:ff:a8:5e:eb:90:3b:31:f2:a9:15:17:bc:
9e:67:67:62:a6:10:46:58:08:91:a0:c6:bc:83:c2:
42:51:63:ef:41:c7:ef:bf:07:b2:e0:c2:d8:9e:69:
7d:c8:c7:a7:9a:76:a5:61:f4:9a:b6:b0:37:49:52:
79:64:e8:21:2b:99:04:57:f0:6b:9e:20:83:48:6f:
cf:f8:02:a3:26:3d:63:8b:f2:42:80:33:37:cc:23:
09:b7:c8:2c:b4:3e:11:3e:3a:e9:6d:10:1c:c9:95:
1f:b7:21:c0:4e:86:d7:3e:3a:2b:f2:fb:75:68:03:
09:b1:f7:98:7d:64:1c:94:90:bf:31:36:4d:e4:e6:
ea:1d:07:d9:b8:4f:2e:1c:a7:0e:3e:b2:04:c5:72:
1a:41:42:51:23:5a:e3:0a:94:0e:71:0d:1e:07:f6:
db:2f:02:f0:91:87:7a:a2:e9:d4:27:22:3f:87:b5:
b5:14:d7:cf:f2:0f:06:5b:7d:74:84:14:cd:ef:eb:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:44:E5:F4:DA:E6:B5:82:44:70:46:1F:84:65:F2:AF:82:AC:2B
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:d9:ca:1f:b7:e4:3f:77:f4:c2:c9:ee:2d:7d:ae:98:5d:
96:c6:ca:ca:c3:24:4d:27:b2:2a:bd:93:32:31:22:02:28:f0:
eb:84:86:a4:a5:a5:f1:4b:c4:47:0d:b2:f7:25:5e:b1:a4:94:
b4:3d:c4:7d:00:2a:e0:ce:b8:89:96:24:24:87:97:31:d0:7b:
00:34:37:c1:ab:1b:de:aa:ea:0f:45:cd:7b:7b:cd:d5:5c:04:
18:c4:da:13:b7:a0:1c:51:b4:e7:77:51:f3:83:02:58:a1:0a:
18:6c:4a:bd:42:ce:cf:7c:0c:a9:9b:1e:b0:5f:79:b9:3b:42:
a1:84:2d:40:e4:3f:be:25:75:76:69:3e:8a:17:39:86:f4:4d:
c4:c7:bd:50:19:86:1d:f9:31:e7:8a:a8:fa:9e:3d:f0:12:7b:
03:8f:e2:10:25:48:c1:ad:57:de:3b:ea:ab:dd:46:05:47:86:
c9:cc:f0:af:0a:ca:e0:19:65:44:e1:ca:9e:ec:dc:fc:07:d7:
cd:bf:02:69:1b:fd:54:d1:1c:f5:7c:82:47:c6:1b:9c:31:95:
3f:29:2a:1b:c1:36:dd:99:48:82:d2:7a:4b:bc:73:5d:90:38:
6a:25:d2:35:94:99:01:9d:fc:c1:e0:2f:d6:cf:35:72:3c:f2:
d0:62:3b:61
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0glE12gElmGGwlZ2BSCvrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4
YmM4NmQwHhcNMjYwMzI0MTYwMTIzWhcNMjYwMzI1MTYwMTIzWjAzMTEwLwYDVQQD
EyhkOWNmNDRlNWY0ZGFlNmI1ODI0NDcwNDYxZjg0NjVmMmFmODJhYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDZI9wYB3YyRnKdnrhe5Nv7UdKfK
EllnvMaBstuSnrpAdTcwXKabLcJbERcKcRnzF7UGtD84J022yVe8q8r/qF7rkDsx
8qkVF7yeZ2diphBGWAiRoMa8g8JCUWPvQcfvvwey4MLYnml9yMenmnalYfSatrA3
SVJ5ZOghK5kEV/BrniCDSG/P+AKjJj1ji/JCgDM3zCMJt8gstD4RPjrpbRAcyZUf
tyHATobXPjor8vt1aAMJsfeYfWQclJC/MTZN5ObqHQfZuE8uHKcOPrIExXIaQUJR
I1rjCpQOcQ0eB/bbLwLwkYd6ounUJyI/h7W1FNfP8g8GW310hBTN7+uYPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNnPROX02ua1gkRwRh+EZfKvgqwrMB8GA1UdIwQY
MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1
LTA4MGVlMGE5N2Y2YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJhL2M5ZGI1Mi1hYzkxLTQwNmEtOWY5NS0wODBlZTBhOTdm
NmEvMS8xLUYwQVJFWVlMVkg5T1BmM1gtS2x5R0NMeUcwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs3Z
yh+35D939MLJ7i19rphdlsbKysMkTSeyKr2TMjEiAijw64SGpKWl8UvERw2y9yVe
saSUtD3EfQAq4M64iZYkJIeXMdB7ADQ3wasb3qrqD0XNe3vN1VwEGMTaE7egHFG0
53dR84MCWKEKGGxKvULOz3wMqZsesF95uTtCoYQtQOQ/viV1dmk+ihc5hvRNxMe9
UBmGHfkx54qo+p498BJ7A4/iECVIwa1X3jvqq91GBUeGyczwrwrK4BllROHKnuzc
/AfXzb8CaRv9VNEc9XyCR8YbnDGVPykqG8E23ZlIgtJ6S7xzXZA4aiXSNZSZAZ38
weAv1s81cjzy0GI7YQ==
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:34:44 2026 by rpki-client