Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: OfTxBLDHR1uP9xzKoNc9DNkoFzE/XHizlDuTU2Thjwo=
Subject key identifier: 1C:22:98:A4:A2:B1:A4:3E:3C:59:29:D9:7B:E6:50:59:6E:F2:CD:A0
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019D37C0D4DDBF3F599D969D38FC95C7E124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: Ssu5+Bh4grUEAx6EThAv2ser0omEHBl6Hlh38MuSrPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d4:dd:bf:3f:59:9d:96:9d:38:fc:95:c7:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=1c2298a4a2b1a43e3c5929d97be650596ef2cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:ee:44:d5:86:1c:b9:2c:df:dd:48:85:5d:
7e:49:bf:12:f2:a0:d7:c5:75:45:f2:b7:7a:06:51:
b7:1a:8e:bc:b8:d0:b3:9b:7b:3c:15:11:7c:ac:8f:
64:06:ae:57:b7:f2:64:dd:ec:47:fe:8d:28:29:9e:
0f:a2:c8:32:7d:3e:9a:fc:30:e3:38:19:1b:38:ff:
d0:98:58:97:5c:45:6c:4d:97:ba:66:37:cc:b8:64:
e2:1a:98:9d:40:f0:1f:e6:17:89:2f:d7:fc:9e:41:
44:df:cc:df:7c:b2:43:11:3b:37:2c:eb:0c:36:b9:
87:33:cf:8b:93:e3:c2:5f:b6:15:48:70:76:3f:df:
f0:46:33:50:fa:3a:be:7f:9f:62:3e:0d:91:20:bc:
33:4a:d5:29:ca:d4:fc:d3:d5:23:49:8f:9f:06:4b:
e5:ca:53:72:f0:5a:c0:75:e1:ee:ca:73:b7:12:96:
c2:2c:9c:3b:df:bd:7a:ea:8e:76:6d:ae:1e:15:75:
e1:49:63:51:77:3f:09:f4:c1:85:2e:c7:d7:32:d1:
9d:dd:52:b1:1a:a2:1f:71:70:91:36:bb:c6:3c:a1:
d3:13:62:91:7b:20:57:31:1b:90:60:1f:4f:73:ec:
f4:38:f6:86:3a:63:db:08:a3:e1:e8:8e:1a:c0:3a:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:98:A4:A2:B1:A4:3E:3C:59:29:D9:7B:E6:50:59:6E:F2:CD:A0
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:c1:50:be:d0:48:98:1c:3d:ff:f9:57:93:17:c4:e3:ea:
ec:48:f8:c5:a8:f4:31:f0:9c:23:f5:12:ad:4d:c9:3c:81:1d:
a4:b8:61:3e:f5:5a:9f:e9:1a:26:32:e3:06:57:60:5e:7a:2f:
fe:11:01:b3:8c:15:b8:b4:02:fa:c3:87:5f:8d:a9:d1:a2:35:
34:74:ae:e2:e2:25:01:67:f1:ca:f2:42:7e:9a:67:57:64:28:
0d:82:8b:ab:7a:f3:7c:f2:ff:e5:a3:dd:d2:b4:52:14:af:aa:
79:b2:06:01:fd:02:3a:c7:52:76:10:bf:a4:bc:9d:87:6c:c3:
b0:ed:e7:6f:f5:b0:31:ea:20:27:af:b5:bc:f4:aa:cd:65:7a:
13:1b:29:4b:7a:08:b1:4c:b7:31:6e:11:69:86:4c:bf:42:67:
85:31:11:9e:78:36:b1:fb:1d:2c:e1:69:49:da:ae:cc:5f:0c:
d0:cb:0b:91:0f:ae:20:f6:a8:ab:a3:2b:80:0e:96:3c:9f:56:
29:16:8c:aa:a2:fc:48:f7:c2:91:f5:51:e0:e6:1b:44:3e:b4:
32:ef:e7:45:08:0f:10:3a:4e:4a:d8:c1:e7:d1:77:b0:67:30:
04:ae:2a:75:5c:c4:a0:66:ec:4e:87:aa:64:31:76:b0:37:89:
aa:00:3d:32
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03wNTdvz9ZnZadOPyVx+EkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjYwMzI5MDQwMTE3WhcNMjYwMzMwMDQwMTE3WjAzMTEwLwYDVQQD
EygxYzIyOThhNGEyYjFhNDNlM2M1OTI5ZDk3YmU2NTA1OTZlZjJjZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVruRNWGHLks391IhV1+Sb8S8qDX
xXVF8rd6BlG3Go68uNCzm3s8FRF8rI9kBq5Xt/Jk3exH/o0oKZ4PosgyfT6a/DDj
OBkbOP/QmFiXXEVsTZe6ZjfMuGTiGpidQPAf5heJL9f8nkFE38zffLJDETs3LOsM
NrmHM8+Lk+PCX7YVSHB2P9/wRjNQ+jq+f59iPg2RILwzStUpytT809UjSY+fBkvl
ylNy8FrAdeHuynO3EpbCLJw737166o52ba4eFXXhSWNRdz8J9MGFLsfXMtGd3VKx
GqIfcXCRNrvGPKHTE2KReyBXMRuQYB9Pc+z0OPaGOmPbCKPh6I4awDrthwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBwimKSisaQ+PFkp2XvmUFlu8s2gMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbPB
UL7QSJgcPf/5V5MXxOPq7Ej4xaj0MfCcI/USrU3JPIEdpLhhPvVan+kaJjLjBldg
Xnov/hEBs4wVuLQC+sOHX42p0aI1NHSu4uIlAWfxyvJCfppnV2QoDYKLq3rzfPL/
5aPd0rRSFK+qebIGAf0COsdSdhC/pLydh2zDsO3nb/WwMeogJ6+1vPSqzWV6Exsp
S3oIsUy3MW4RaYZMv0JnhTERnng2sfsdLOFpSdquzF8M0MsLkQ+uIPaoq6MrgA6W
PJ9WKRaMqqL8SPfCkfVR4OYbRD60Mu/nRQgPEDpOStjB59F3sGcwBK4qdVzEoGbs
ToeqZDF2sDeJqgA9Mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:50 2026 by rpki-client