Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: KqsNsWILIcf05QbvADkqPKnRkuJhDsIUtdADwphdxxs=
Subject key identifier: 2F:82:57:9D:0D:21:F9:FA:22:0C:50:63:EA:5E:45:BE:4C:1E:0E:F4
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 019D394106C74EFAB86ED40F8304D6FA12CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 17C8
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: MXtd4gW0fnm4Y9ZCp89BF8wxYnSevM8lDSd0nzgLCRU=)
2: 58jG5a4etI7HLIjlMWRu8EZHcBI.roa (hash: h6AjzB3AJvNdpXgK77pPU3V49NDZDTYGpMVhHidUW8I=)
3: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (hash: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:06:c7:4e:fa:b8:6e:d4:0f:83:04:d6:fa:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=2f82579d0d21f9fa220c5063ea5e45be4c1e0ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:cb:5d:e9:60:63:84:6e:4c:14:57:35:c1:
96:ec:1c:bb:94:d2:89:ac:5e:5d:79:0b:c1:60:d2:
52:1d:9a:e1:99:7c:50:99:83:68:1f:5d:8c:9d:11:
fb:fc:ed:da:d4:5d:07:24:77:40:97:4e:46:66:e4:
1f:f8:68:ba:49:ed:13:11:ce:78:b1:a4:76:aa:b9:
d0:20:9d:ef:36:59:9d:d3:fc:ac:f8:22:f8:bb:f2:
9e:1d:14:a7:75:eb:37:f9:a7:44:cf:2e:08:f6:5d:
d3:20:87:94:ce:30:43:74:35:fb:f2:7a:3c:09:8b:
a1:7a:d0:4e:2f:58:fd:71:3d:fd:ec:e0:d9:8b:0f:
2f:82:71:bb:d9:90:d2:1e:cd:f0:ef:3f:92:65:82:
b1:c5:1f:e7:7c:60:d9:48:6c:f7:59:24:77:ec:f9:
60:dc:28:ac:2b:74:ed:db:0a:8e:4c:ec:3f:56:33:
d9:a6:34:1c:38:25:64:26:44:70:da:a5:b9:ab:2e:
3d:b5:e1:59:cb:eb:07:1d:70:e8:8e:3f:2f:11:0c:
aa:6e:8a:37:ee:75:70:69:4e:d9:3c:19:63:5c:a9:
de:c8:7e:bf:1f:dc:b7:bc:83:73:69:2f:49:48:e8:
81:d1:93:83:cc:37:5e:88:ef:22:13:1e:d1:91:7f:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:57:9D:0D:21:F9:FA:22:0C:50:63:EA:5E:45:BE:4C:1E:0E:F4
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:15:a1:94:56:ca:11:3b:4b:f7:1c:0a:9e:6a:99:51:e4:13:
65:db:07:c9:e7:9b:93:45:ec:9e:bf:f6:b0:69:0a:7d:1a:ef:
ec:c8:23:cb:3e:fe:1e:7e:bd:27:40:f9:9d:f6:d2:32:52:0f:
82:38:40:5e:df:c5:08:6e:95:78:05:8f:61:13:0b:49:df:ee:
9c:75:f5:df:e4:0a:46:dc:fd:30:74:17:02:36:b6:dc:51:eb:
6d:df:22:86:8a:e9:f9:65:6d:3e:3a:14:34:15:62:1a:e6:da:
c0:69:34:b6:3c:47:ed:58:1d:b8:d8:f7:0c:11:e8:f7:d8:d0:
52:ab:20:2e:50:b9:e7:3d:a2:d2:cb:67:e6:b0:ee:21:04:a1:
39:a1:00:27:ea:f0:41:ea:83:77:96:55:7e:b3:35:b5:d7:4c:
79:61:2b:96:57:24:c2:7e:ac:31:12:6d:88:81:5c:b1:15:a7:
b1:13:73:d5:38:41:46:b6:c0:c3:31:ed:0a:32:79:ad:4f:3c:
80:dc:ae:3a:1e:ab:3f:89:d2:55:1d:87:d6:9d:56:de:cc:67:
40:f6:ae:5d:46:9c:08:3b:77:65:3a:15:23:0c:00:be:16:a9:
b0:b2:95:e5:b4:b9:9d:46:7c:b4:9c:3c:9a:8e:b5:64:32:b4:
36:70:82:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QQbHTvq4btQPgwTW+hLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmFjMzk2N2VhOTg1OTIyN2Q5ZjdiZTc0NGUyYTZlYTQ4
NmUxMTcwHhcNMjYwMzI5MTEwMDU1WhcNMjYwMzMwMTEwMDU1WjAzMTEwLwYDVQQD
EygyZjgyNTc5ZDBkMjFmOWZhMjIwYzUwNjNlYTVlNDViZTRjMWUwZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLzLXelgY4RuTBRXNcGW7By7lNKJ
rF5deQvBYNJSHZrhmXxQmYNoH12MnRH7/O3a1F0HJHdAl05GZuQf+Gi6Se0TEc54
saR2qrnQIJ3vNlmd0/ys+CL4u/KeHRSndes3+adEzy4I9l3TIIeUzjBDdDX78no8
CYuhetBOL1j9cT397ODZiw8vgnG72ZDSHs3w7z+SZYKxxR/nfGDZSGz3WSR37Plg
3CisK3Tt2wqOTOw/VjPZpjQcOCVkJkRw2qW5qy49teFZy+sHHXDojj8vEQyqboo3
7nVwaU7ZPBljXKneyH6/H9y3vINzaS9JSOiB0ZODzDdeiO8iEx7RkX+R3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+CV50NIfn6IgxQY+peRb5MHg70MB8GA1UdIwQY
MBaAFNb6w5Z+qYWSJ9n3vnROKm6khuEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZyRGxuNnBoWkluMmZlLWRFNHFicVNHNFJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xNmZiODQtZmEyOS00MWIyLThkYmIt
NTlkZWNkOGQ1YTBjLzEvMXZyRGxuNnBoWkluMmZlLWRFNHFicVNHNFJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xNmZiODQtZmEyOS00MWIyLThkYmItNTlkZWNkOGQ1YTBj
LzEvMXZyRGxuNnBoWkluMmZlLWRFNHFicVNHNFJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRWhlFbK
ETtL9xwKnmqZUeQTZdsHyeebk0Xsnr/2sGkKfRrv7Mgjyz7+Hn69J0D5nfbSMlIP
gjhAXt/FCG6VeAWPYRMLSd/unHX13+QKRtz9MHQXAja23FHrbd8ihorp+WVtPjoU
NBViGubawGk0tjxH7VgduNj3DBHo99jQUqsgLlC55z2i0stn5rDuIQShOaEAJ+rw
QeqDd5ZVfrM1tddMeWErllckwn6sMRJtiIFcsRWnsRNz1ThBRrbAwzHtCjJ5rU88
gNyuOh6rP4nSVR2H1p1W3sxnQPauXUacCDt3ZToVIwwAvhapsLKV5bS5nUZ8tJw8
mo61ZDK0NnCCSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:59 2026 by rpki-client