Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: szO4GR6VZePgWPhOzSzXrNN2HnWWCVpyBo4MQ6LMEiU=
Subject key identifier: D3:3C:34:52:99:DE:38:FE:4E:AF:77:BA:F2:C4:1C:E7:B7:66:62:79
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 019D37C0AF96FD9F649AD43231E26CF6007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: 7wxL0d9RR08Gev0sqEi//rmhVrThk5n16lWLQkn1LiA=)
2: ih0pzXO8mqkzc3x2UoefcFyc-tM.roa (hash: Uy5EOXK7Ia8DPFixLWpbgwz0Q6FOdgA2l57Zdh/p9Kk=)
3: mATboytCwcfVcr9XMxZhnCNuehM.roa (hash: CSLxUhKEA5+LpJXjF03TzcnktKHmPFZOf51CwhIx1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:af:96:fd:9f:64:9a:d4:32:31:e2:6c:f6:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=d33c345299de38fe4eaf77baf2c41ce7b7666279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:2e:18:72:ad:85:d5:45:91:33:7a:e0:69:
fd:ee:57:11:89:72:e5:20:f2:9f:36:8b:d5:3f:ca:
b0:2b:cc:51:9b:88:c4:9d:84:9a:f5:29:65:b8:a6:
63:ed:91:92:26:07:50:f4:14:ce:86:a9:8d:10:5d:
f5:71:ad:9c:b1:eb:15:e6:38:b7:a0:b7:cf:98:ec:
d2:10:3f:d0:42:dc:47:46:8c:82:0b:70:fd:b1:d8:
83:aa:a3:0d:e6:91:25:b4:27:d9:33:99:fd:60:01:
5f:3a:6c:16:5e:8d:e0:0d:c0:ec:33:42:8d:15:31:
b4:50:77:48:ac:50:ff:82:97:1b:57:58:40:dc:ce:
68:74:c6:f9:40:18:d9:6b:8f:0e:a0:e7:0a:04:95:
8d:93:b1:d1:46:a6:d5:8e:4c:cc:70:5f:cc:04:7c:
ff:a9:4f:fb:4e:5f:81:50:8d:b9:02:0d:33:78:46:
5b:d0:9d:3c:65:46:d7:3e:9a:9e:7a:b0:e9:e2:8d:
a5:b4:39:6a:e8:7e:98:d9:b9:de:87:2f:08:7e:f4:
d7:2c:2e:a1:cb:0e:aa:46:2a:95:f3:fb:19:54:b5:
a4:b9:92:26:cf:11:fc:10:f6:e4:6b:cd:6b:57:5f:
46:df:37:47:5e:66:eb:00:4e:21:04:78:b5:92:c9:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3C:34:52:99:DE:38:FE:4E:AF:77:BA:F2:C4:1C:E7:B7:66:62:79
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:00:ef:b6:49:12:e5:9d:2a:75:58:f2:7a:41:32:57:d3:f5:
f0:57:5a:42:e3:19:74:5b:c3:46:a4:05:d6:95:94:f5:ed:61:
2c:b0:2f:f5:2a:34:34:a9:0e:46:4b:1b:56:92:fd:cb:a6:a5:
f9:1e:4f:27:cd:91:18:30:08:78:e2:2c:15:74:39:b4:22:ef:
0b:ce:ac:fc:7f:1d:0a:99:18:7f:b4:78:93:72:6c:0d:04:27:
57:97:ed:1e:aa:ec:f6:20:55:e5:d8:87:e7:c5:28:93:83:a1:
48:9b:3c:bd:be:ba:bb:1c:9a:c7:53:02:7a:47:87:1e:79:f6:
6d:62:cf:e9:76:b7:1b:2a:89:4c:f3:67:b7:b6:84:66:37:71:
96:3b:56:f6:12:34:96:c2:95:91:3a:1d:12:1b:e2:10:41:84:
15:ac:e0:59:c4:66:68:07:35:19:d7:04:3e:cc:4f:02:3f:35:
a0:b2:25:2c:3c:be:15:97:15:50:a8:d6:3e:d5:69:5d:66:2a:
c3:ee:15:e8:45:c4:ad:7f:7a:d8:82:8d:2f:bd:06:c0:85:25:
df:7b:71:ff:a1:d9:11:49:78:b7:57:bf:7e:dc:27:5e:9b:8b:
fa:fd:30:00:8f:54:57:7e:6d:c2:ff:f2:56:c0:d3:21:54:09:
f6:61:1c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wK+W/Z9kmtQyMeJs9gB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh
MTZlN2IwHhcNMjYwMzI5MDQwMTA3WhcNMjYwMzMwMDQwMTA3WjAzMTEwLwYDVQQD
EyhkMzNjMzQ1Mjk5ZGUzOGZlNGVhZjc3YmFmMmM0MWNlN2I3NjY2Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsscuGHKthdVFkTN64Gn97lcRiXLl
IPKfNovVP8qwK8xRm4jEnYSa9SlluKZj7ZGSJgdQ9BTOhqmNEF31ca2csesV5ji3
oLfPmOzSED/QQtxHRoyCC3D9sdiDqqMN5pEltCfZM5n9YAFfOmwWXo3gDcDsM0KN
FTG0UHdIrFD/gpcbV1hA3M5odMb5QBjZa48OoOcKBJWNk7HRRqbVjkzMcF/MBHz/
qU/7Tl+BUI25Ag0zeEZb0J08ZUbXPpqeerDp4o2ltDlq6H6Y2bnehy8IfvTXLC6h
yw6qRiqV8/sZVLWkuZImzxH8EPbka81rV19G3zdHXmbrAE4hBHi1ksnpsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM8NFKZ3jj+Tq93uvLEHOe3ZmJ5MB8GA1UdIwQY
MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt
NzU1MDUyOWQ4NDdhLzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh
LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQDvtkkS
5Z0qdVjyekEyV9P18FdaQuMZdFvDRqQF1pWU9e1hLLAv9So0NKkORksbVpL9y6al
+R5PJ82RGDAIeOIsFXQ5tCLvC86s/H8dCpkYf7R4k3JsDQQnV5ftHqrs9iBV5diH
58Uok4OhSJs8vb66uxyax1MCekeHHnn2bWLP6Xa3GyqJTPNnt7aEZjdxljtW9hI0
lsKVkTodEhviEEGEFazgWcRmaAc1GdcEPsxPAj81oLIlLDy+FZcVUKjWPtVpXWYq
w+4V6EXErX962IKNL70GwIUl33tx/6HZEUl4t1e/ftwnXpuL+v0wAI9UV35twv/y
VsDTIVQJ9mEcVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client