Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: 3yDfPQtxMgBVojqJGYJNVqs3iPrkEFAdBPO9nGQk0VI=
Subject key identifier: DD:54:A6:A1:F0:01:1C:C9:2F:65:FA:45:79:33:62:68:82:90:FF:A4
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 019D389BBD7A76087F4D3E5D1786481AA640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: sNOhCs8RW6NfqGelmoYm24t5d9VXVOkpDyLEKT5hICg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bd:7a:76:08:7f:4d:3e:5d:17:86:48:1a:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=dd54a6a1f0011cc92f65fa45793362688290ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:7b:84:97:27:f6:d5:6c:07:6a:1d:26:81:
56:aa:f5:83:e8:d3:24:66:3f:7d:ed:28:2f:37:ab:
fc:f2:42:eb:a7:73:ac:c0:0c:67:d2:58:83:8e:ce:
97:24:ed:0c:51:52:5f:de:41:4c:dd:cf:80:88:cd:
18:5e:10:14:99:99:f8:20:27:41:68:43:c7:a2:78:
68:eb:c9:99:aa:af:ab:64:c8:48:d5:3d:21:3b:95:
7c:02:a3:70:0e:20:14:c3:49:62:95:53:e3:c4:b0:
c8:69:d9:70:f2:9a:d5:76:9c:a2:7c:eb:a5:c8:f8:
57:5d:f0:5a:02:9d:f1:9f:70:97:94:c8:49:5a:02:
ad:40:3c:78:dc:c7:29:10:3a:70:ed:cf:b4:63:79:
c9:f1:b4:aa:d9:93:5a:f4:15:c5:9b:9e:b1:64:d4:
0c:10:f2:91:5b:53:35:aa:4f:aa:cd:10:cd:91:ef:
24:7b:a0:9c:f1:01:07:1e:e4:e1:c3:4e:db:0d:af:
7b:43:f6:2e:ab:6e:54:02:c2:6e:6f:69:c1:d3:56:
6b:a1:29:af:7a:6a:e5:08:a5:97:c2:f7:2e:1d:f6:
7c:35:d3:02:79:a7:e0:ce:5d:45:28:91:b9:28:6b:
81:b7:76:d3:c8:c8:20:98:c2:dd:03:fc:82:0b:20:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:A6:A1:F0:01:1C:C9:2F:65:FA:45:79:33:62:68:82:90:FF:A4
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:05:b0:78:c0:ba:c0:66:c6:8f:85:b7:73:20:cc:b3:08:94:
52:19:38:1f:8d:79:a9:cd:c9:96:fd:47:49:fc:9c:06:0e:da:
2e:a3:34:e2:5c:43:f9:3e:22:a7:94:0d:8d:35:e9:06:cb:47:
07:4e:a3:5e:6d:d3:c9:72:7d:78:09:33:4f:1c:2b:ff:6c:f1:
02:a7:9f:45:55:41:70:80:8c:ef:2f:e4:47:ae:70:f1:6c:87:
21:d1:9c:58:39:7b:5a:af:81:1b:a3:91:03:0b:d8:cf:1b:6f:
56:94:b8:e3:7c:ff:09:0b:6f:aa:1f:ef:ee:40:d8:a6:da:65:
76:14:40:30:1d:5a:00:c1:09:dc:f6:57:83:62:79:19:70:5b:
c7:bb:31:9a:18:0c:14:83:26:71:70:c6:69:e3:59:f4:cf:53:
66:c4:ea:eb:aa:2d:a4:28:6f:8f:75:21:9e:bc:65:15:ee:e2:
ce:26:5d:e8:2c:67:8f:ab:49:e6:ba:c4:77:e8:5f:45:8d:4f:
d5:88:85:a2:f7:d3:95:cb:94:c5:42:df:38:66:ba:a5:54:ce:
03:75:f6:2a:09:0c:3b:08:86:fd:71:01:ac:82:23:bb:3d:c7:
98:a7:62:b2:ad:3b:69:f1:02:cc:0d:21:63:b7:32:ea:d9:9d:
3c:07:95:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m716dgh/TT5dF4ZIGqZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy
YjM1MzYwHhcNMjYwMzI5MDgwMDIzWhcNMjYwMzMwMDgwMDIzWjAzMTEwLwYDVQQD
EyhkZDU0YTZhMWYwMDExY2M5MmY2NWZhNDU3OTMzNjI2ODgyOTBmZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKx7hJcn9tVsB2odJoFWqvWD6NMk
Zj997SgvN6v88kLrp3OswAxn0liDjs6XJO0MUVJf3kFM3c+AiM0YXhAUmZn4ICdB
aEPHonho68mZqq+rZMhI1T0hO5V8AqNwDiAUw0lilVPjxLDIadlw8prVdpyifOul
yPhXXfBaAp3xn3CXlMhJWgKtQDx43McpEDpw7c+0Y3nJ8bSq2ZNa9BXFm56xZNQM
EPKRW1M1qk+qzRDNke8ke6Cc8QEHHuThw07bDa97Q/Yuq25UAsJub2nB01ZroSmv
emrlCKWXwvcuHfZ8NdMCeafgzl1FKJG5KGuBt3bTyMggmMLdA/yCCyAmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1UpqHwARzJL2X6RXkzYmiCkP+kMB8GA1UdIwQY
MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt
NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh
LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwwWweMC6
wGbGj4W3cyDMswiUUhk4H415qc3Jlv1HSfycBg7aLqM04lxD+T4ip5QNjTXpBstH
B06jXm3TyXJ9eAkzTxwr/2zxAqefRVVBcICM7y/kR65w8WyHIdGcWDl7Wq+BG6OR
AwvYzxtvVpS443z/CQtvqh/v7kDYptpldhRAMB1aAMEJ3PZXg2J5GXBbx7sxmhgM
FIMmcXDGaeNZ9M9TZsTq66otpChvj3UhnrxlFe7iziZd6Cxnj6tJ5rrEd+hfRY1P
1YiFovfTlcuUxULfOGa6pVTOA3X2KgkMOwiG/XEBrIIjuz3HmKdisq07afECzA0h
Y7cy6tmdPAeV0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:03 2026 by rpki-client