Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: EeqtwdFRihOVcqGW68dRBHxXwt7syLWpP0NbBtIb5BY=
Subject key identifier: 47:35:01:07:E2:00:C7:5A:59:0D:4F:12:CF:7B:BE:A2:5B:B1:35:F3
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019CBF96B09270A31DA03335E936DC9BF2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0A9F
Signing time: Thu 05 Mar 2026 20:00:49 +0000
Manifest this update: Thu 05 Mar 2026 20:00:49 +0000
Manifest next update: Fri 06 Mar 2026 20:00:49 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: ZFjl10q2C+f+Atu35RBd+XpahFPon6nPqjQZ+KFzw3Q=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:96:b0:92:70:a3:1d:a0:33:35:e9:36:dc:9b:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Mar 5 20:00:49 2026 GMT
Not After : Mar 6 20:00:49 2026 GMT
Subject: CN=47350107e200c75a590d4f12cf7bbea25bb135f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:ed:9e:e8:f2:4a:f0:43:2d:52:81:fd:30:
14:1c:9c:a2:29:6a:4e:d5:30:be:11:b2:0a:16:7c:
ea:da:13:d5:f0:d1:e4:74:fd:58:80:a2:5a:23:65:
b2:5a:17:31:d7:05:24:9b:1e:90:fe:bd:49:56:19:
ce:31:bb:d1:a4:38:63:52:ff:4f:5a:72:7a:ab:8e:
6d:c0:a0:46:9a:59:2b:ee:e6:32:af:79:5c:9a:f7:
e6:5a:cd:89:b9:35:11:1e:eb:d1:de:62:53:01:df:
e1:09:d1:54:f1:29:6a:a7:c1:9e:69:a3:81:75:b9:
58:d3:41:43:05:3d:84:57:54:bf:cd:09:65:eb:b1:
92:b2:3f:bc:36:4f:02:a8:37:70:b1:88:21:90:17:
fb:f7:e2:07:0e:73:b2:57:11:63:fb:ad:02:3d:e0:
44:01:f7:c8:02:c0:3c:32:c6:71:f3:93:4a:18:ab:
52:b8:d9:49:92:75:31:c8:7e:ee:16:69:48:a1:58:
a0:af:ba:d3:05:4e:d0:e9:07:18:c4:f5:8c:4c:0e:
0b:71:7b:6c:b4:92:96:ae:d9:c7:e6:9e:31:81:50:
8b:96:31:97:87:96:59:a0:ff:9a:10:78:cb:5e:1f:
a9:26:11:9c:ae:a8:e3:15:b1:de:39:0b:c3:33:b9:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:01:07:E2:00:C7:5A:59:0D:4F:12:CF:7B:BE:A2:5B:B1:35:F3
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:b2:eb:22:76:56:c9:14:8e:27:ba:70:33:d3:52:6e:b3:
7b:c7:22:2d:2b:b9:0b:8d:6c:84:42:af:bd:0c:cf:aa:35:08:
57:4b:0f:aa:88:27:4d:1a:25:a8:d4:81:34:94:93:76:f4:61:
ac:e7:1f:6c:7a:94:48:e2:c4:c0:25:61:22:96:36:8a:52:18:
58:bb:c5:c8:32:c6:81:83:f8:90:94:97:ca:cd:b0:e9:34:83:
df:32:3c:ca:8e:be:18:82:63:9a:47:cb:08:f0:9d:46:00:68:
7d:12:0a:03:52:9c:f6:41:a4:e5:f4:2a:ff:5d:28:d0:29:0d:
70:f9:a3:51:e9:e5:aa:3c:97:44:68:ac:1b:2f:ef:d3:69:79:
c0:cf:76:39:82:a9:62:e0:de:03:13:1d:cd:65:5d:94:0c:14:
97:0e:ff:ad:f6:e5:ca:9e:41:e0:95:36:fc:af:44:33:e7:08:
b5:dc:6f:01:9b:5d:4e:f9:22:3e:8f:8d:8a:c3:2d:09:b8:3f:
1d:fb:08:65:7a:27:df:b4:17:36:9f:8d:3b:55:7b:07:a0:dd:
f5:a9:1c:3f:c6:34:3b:3e:75:45:21:25:da:d9:73:57:8f:c3:
e4:d6:4e:ba:f0:3e:5f:5a:9e:34:3a:41:9a:90:9c:4d:38:e4:
bd:0d:3d:32
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZy/lrCScKMdoDM16Tbcm/L5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjYwMzA1MjAwMDQ5WhcNMjYwMzA2MjAwMDQ5WjAzMTEwLwYDVQQD
Eyg0NzM1MDEwN2UyMDBjNzVhNTkwZDRmMTJjZjdiYmVhMjViYjEzNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ftnujySvBDLVKB/TAUHJyiKWpO
1TC+EbIKFnzq2hPV8NHkdP1YgKJaI2WyWhcx1wUkmx6Q/r1JVhnOMbvRpDhjUv9P
WnJ6q45twKBGmlkr7uYyr3lcmvfmWs2JuTURHuvR3mJTAd/hCdFU8Slqp8GeaaOB
dblY00FDBT2EV1S/zQll67GSsj+8Nk8CqDdwsYghkBf79+IHDnOyVxFj+60CPeBE
AffIAsA8MsZx85NKGKtSuNlJknUxyH7uFmlIoVigr7rTBU7Q6QcYxPWMTA4LcXts
tJKWrtnH5p4xgVCLljGXh5ZZoP+aEHjLXh+pJhGcrqjjFbHeOQvDM7maEQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEc1AQfiAMdaWQ1PEs97vqJbsTXzMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk
YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCqy
6yJ2VskUjie6cDPTUm6ze8ciLSu5C41shEKvvQzPqjUIV0sPqognTRolqNSBNJST
dvRhrOcfbHqUSOLEwCVhIpY2ilIYWLvFyDLGgYP4kJSXys2w6TSD3zI8yo6+GIJj
mkfLCPCdRgBofRIKA1Kc9kGk5fQq/10o0CkNcPmjUenlqjyXRGisGy/v02l5wM92
OYKpYuDeAxMdzWVdlAwUlw7/rfblyp5B4JU2/K9EM+cItdxvAZtdTvkiPo+NisMt
Cbg/HfsIZXon37QXNp+NO1V7B6Dd9akcP8Y0Oz51RSEl2tlzV4/D5NZOuvA+X1qe
NDpBmpCcTTjkvQ09Mg==
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:27:35 2026 by rpki-client