Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: 4ET1SsJtISNdCTEq1T0G0oe0mIfmd3pkFtwXGCgc5pw=
Subject key identifier: C6:BA:9F:3B:0D:57:90:AF:64:EB:B0:E6:4F:C2:5B:CF:E5:8A:55:A7
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019CEDB8B816C573681370CD2674764C50BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 72
Signing time: Sat 14 Mar 2026 19:00:31 +0000
Manifest this update: Sat 14 Mar 2026 19:00:31 +0000
Manifest next update: Sun 15 Mar 2026 19:00:31 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: WkBzZtLDBcH82KvNyQlWAdvubqr//Cnr8Nj+jZpDkpE=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:b8:b8:16:c5:73:68:13:70:cd:26:74:76:4c:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Mar 14 19:00:31 2026 GMT
Not After : Mar 15 19:00:31 2026 GMT
Subject: CN=c6ba9f3b0d5790af64ebb0e64fc25bcfe58a55a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:81:06:90:ff:1a:17:af:1d:dd:91:ad:bd:
53:dc:15:17:77:f7:ed:3a:a1:42:8b:38:d7:ac:c1:
e9:29:79:48:a1:fa:94:6f:d7:4b:37:c4:93:63:4e:
79:93:21:44:83:bb:65:48:2b:48:84:a8:8b:a9:9b:
7d:d1:fc:39:8a:72:cd:ea:62:3d:76:14:bf:30:70:
f8:e7:ef:17:fb:57:32:d5:09:c6:f5:4b:92:94:bb:
8b:39:29:ae:b0:d7:20:51:59:12:33:91:f5:fd:64:
f9:bd:05:75:a1:ef:13:bf:06:c6:b6:84:55:d8:dd:
f1:aa:e7:c0:74:4a:a8:20:7d:17:ab:f0:40:9a:94:
b3:d8:b3:b2:fe:be:2d:99:a6:1f:98:a2:a0:0a:0d:
e9:6d:ed:63:b0:59:c8:a3:ec:2e:19:c3:82:8d:18:
7a:24:77:f0:78:22:e8:3a:b7:59:b0:b9:18:f6:3b:
d2:58:b0:67:21:c1:6e:0b:7a:be:f9:07:4b:91:95:
0f:61:f3:5a:39:0a:f1:73:d6:cb:11:28:04:05:7e:
43:69:3b:99:65:b3:40:54:6b:74:30:7d:c2:54:c0:
9d:bc:4f:16:1d:08:e0:e1:e0:3f:47:be:7d:e8:15:
c1:6a:78:1e:02:33:85:3b:82:f8:2a:f2:e5:8c:88:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BA:9F:3B:0D:57:90:AF:64:EB:B0:E6:4F:C2:5B:CF:E5:8A:55:A7
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:ac:28:e4:82:2b:e4:a8:57:6a:bb:1e:84:96:4d:3e:e8:
a6:e0:fd:51:eb:d6:69:0d:a6:1e:ea:44:b7:2b:a1:27:c1:99:
2f:d9:a7:e5:88:6a:84:53:6b:c7:05:d8:5f:c3:b7:ef:5a:c5:
ae:ea:db:42:4d:99:a0:84:6e:9d:c5:7c:e5:00:f7:57:ca:db:
54:2e:27:08:05:33:8a:06:4a:08:9e:52:51:45:cf:47:96:eb:
94:b8:41:eb:7f:5f:15:17:f5:cf:28:85:a1:41:71:b4:40:45:
69:17:6a:5e:f5:66:6d:86:4b:5e:db:b2:d0:18:71:2c:12:37:
a7:ff:56:69:97:53:9c:60:37:b1:0c:fb:ed:b3:bd:00:4d:c3:
44:a6:13:65:c7:3b:3f:51:ba:6d:37:4b:e9:db:98:5e:7f:7a:
58:92:47:0c:2b:b5:42:af:3b:8d:cf:36:24:6f:4a:eb:42:40:
ef:9b:77:11:84:b2:ad:20:68:5c:4a:00:55:f6:e6:57:27:b5:
bd:7d:48:af:ee:62:d6:42:c5:1c:00:3c:5c:b1:a1:73:9c:0c:
26:d2:16:2d:87:0e:3d:a3:82:15:02:e6:87:e7:ea:e5:57:81:
86:17:42:7a:45:2c:32:96:e6:9c:60:3e:d9:59:85:e0:53:67:
ab:61:47:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZztuLgWxXNoE3DNJnR2TFC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjgzNjg1NzM5OTg2ZGNkNDUxNDQ4MzM1NTczMDE0ZGI0
MzlhMjMwHhcNMjYwMzE0MTkwMDMxWhcNMjYwMzE1MTkwMDMxWjAzMTEwLwYDVQQD
EyhjNmJhOWYzYjBkNTc5MGFmNjRlYmIwZTY0ZmMyNWJjZmU1OGE1NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7yBBpD/GhevHd2Rrb1T3BUXd/ft
OqFCizjXrMHpKXlIofqUb9dLN8STY055kyFEg7tlSCtIhKiLqZt90fw5inLN6mI9
dhS/MHD45+8X+1cy1QnG9UuSlLuLOSmusNcgUVkSM5H1/WT5vQV1oe8TvwbGtoRV
2N3xqufAdEqoIH0Xq/BAmpSz2LOy/r4tmaYfmKKgCg3pbe1jsFnIo+wuGcOCjRh6
JHfweCLoOrdZsLkY9jvSWLBnIcFuC3q++QdLkZUPYfNaOQrxc9bLESgEBX5DaTuZ
ZbNAVGt0MH3CVMCdvE8WHQjg4eA/R7596BXBangeAjOFO4L4KvLljIgkaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMa6nzsNV5CvZOuw5k/CW8/lilWnMB8GA1UdIwQY
MBaAFPq4NoVzmYbc1FFEgzVXMBTbQ5ojMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZzJoWE9aaHR6VVVVU0ROVmN3Rk50RG1pTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNjZjMDI5LTY4ZGUtNDMzNC1iOTJj
LTVlMTdhNjIyMzFiNS8xLzEtcmcyaFhPWmh0elVVVVNETlZjd0ZOdERtaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzY2YzAyOS02OGRlLTQzMzQtYjkyYy01ZTE3YTYyMjMx
YjUvMS8xLXJnMmhYT1podHpVVVVTRE5WY3dGTnREbWlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8is
KOSCK+SoV2q7HoSWTT7opuD9UevWaQ2mHupEtyuhJ8GZL9mn5YhqhFNrxwXYX8O3
71rFrurbQk2ZoIRuncV85QD3V8rbVC4nCAUzigZKCJ5SUUXPR5brlLhB639fFRf1
zyiFoUFxtEBFaRdqXvVmbYZLXtuy0BhxLBI3p/9WaZdTnGA3sQz77bO9AE3DRKYT
Zcc7P1G6bTdL6duYXn96WJJHDCu1Qq87jc82JG9K60JA75t3EYSyrSBoXEoAVfbm
Vye1vX1Ir+5i1kLFHAA8XLGhc5wMJtIWLYcOPaOCFQLmh+fq5VeBhhdCekUsMpbm
nGA+2VmF4FNnq2FHsw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 23:41:47 2026 by rpki-client