Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: CSiNpsEIax7fS+jCD3fNhm6K/OaqP8dW653LYkF8YwA=
Subject key identifier: CE:90:A9:5E:C2:28:EF:83:A0:B0:AC:92:EC:F5:05:2A:9C:FC:C0:47
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 019D3A8A5D106E3D6D52B6E1E4F38A76FAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 0372
Signing time: Sun 29 Mar 2026 17:00:39 +0000
Manifest this update: Sun 29 Mar 2026 17:00:39 +0000
Manifest next update: Mon 30 Mar 2026 17:00:39 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: uAxL3338GguZVCcqmqGf/7+jnTAma7DR25tQ1bsPuts=)
2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:5d:10:6e:3d:6d:52:b6:e1:e4:f3:8a:76:fa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Mar 29 17:00:39 2026 GMT
Not After : Mar 30 17:00:39 2026 GMT
Subject: CN=ce90a95ec228ef83a0b0ac92ecf5052a9cfcc047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:59:12:27:18:05:44:e0:d1:0e:51:d7:3e:
e7:29:c4:6e:5e:19:e3:97:f7:fb:60:21:46:f0:1f:
94:60:f3:1c:e8:5d:28:c9:ba:28:5d:b5:ac:31:fc:
36:90:f8:d0:9e:7f:a9:5d:70:ff:0e:40:42:3a:52:
c9:fb:dd:21:41:ee:79:55:38:db:79:24:39:c9:44:
b1:dc:c8:86:f2:67:81:67:70:84:1b:02:58:e0:ff:
08:c3:ca:6d:fb:80:d9:33:92:9e:c5:25:50:a0:bd:
c4:b6:4d:77:61:c2:24:a1:21:ac:56:4f:85:ae:4a:
d8:e1:d8:a4:99:7b:b3:24:18:b3:70:c4:9c:6c:3e:
bd:f0:70:4a:0b:4e:14:a8:53:fe:33:9c:b9:3c:ab:
3c:1a:4a:62:ae:df:b4:d0:0c:2e:1d:80:ef:f5:9b:
f5:58:6a:7b:93:c2:13:42:7f:a2:6d:43:c6:0d:75:
26:e5:8c:64:58:13:11:42:a1:b0:64:bd:b0:bb:fd:
2e:3d:cc:ed:7b:3b:3e:9c:a1:8c:84:78:d0:6b:71:
54:bd:40:f5:f3:b7:44:4e:ee:58:52:ff:12:cb:c2:
b4:1d:1f:47:6e:25:0a:31:52:52:8c:90:7d:e8:4e:
ee:ef:58:38:75:d0:b1:08:b8:37:bc:7e:89:58:38:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:A9:5E:C2:28:EF:83:A0:B0:AC:92:EC:F5:05:2A:9C:FC:C0:47
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2a:14:55:72:61:8f:ba:6e:e9:e7:9a:96:6b:e1:7b:5c:8f:
9b:b2:26:8d:ad:90:a7:27:e9:21:22:fe:5c:1a:3b:25:de:26:
06:da:26:27:da:b4:fd:af:3a:b2:5c:bf:6c:92:20:fb:e0:01:
ea:8c:8b:ec:d3:f2:23:98:79:2c:a8:98:a1:50:e0:d1:20:52:
c8:10:97:68:b8:9d:3e:74:35:77:f4:c1:74:de:4a:f7:7b:fc:
4a:fb:b9:5e:3c:15:00:f0:80:ce:98:dd:29:ff:ba:29:fd:f2:
00:75:71:d1:61:f6:98:b7:e2:46:34:b3:80:73:ac:d7:15:ea:
aa:14:40:33:4a:be:91:1b:d7:da:0d:7b:15:f5:f1:40:fa:75:
15:cc:88:57:d9:36:17:3f:d9:02:07:c9:08:f6:f2:3b:9a:c1:
10:77:0b:89:03:79:f0:bc:e9:0c:9a:19:ae:9c:6a:6f:69:21:
ec:8f:1f:84:64:b3:05:46:8d:82:8f:8a:13:ed:02:f1:01:0f:
c8:76:37:df:2a:ba:d0:49:14:28:27:55:06:7a:8b:4c:ed:2f:
63:6e:cf:e2:5a:22:44:07:ee:45:e4:40:ee:24:1a:46:d8:fa:
ea:94:95:a2:e1:6d:15:8c:6d:ce:b7:fd:ca:6a:18:8b:e5:5b:
66:02:7b:b8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ06il0Qbj1tUrbh5POKdvq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODdhYzdlNWIyODljZTY4MWIyNDc0YzM4Zjc5NTJjY2E5
YzBmYjgwHhcNMjYwMzI5MTcwMDM5WhcNMjYwMzMwMTcwMDM5WjAzMTEwLwYDVQQD
EyhjZTkwYTk1ZWMyMjhlZjgzYTBiMGFjOTJlY2Y1MDUyYTljZmNjMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnZZEicYBUTg0Q5R1z7nKcRuXhnj
l/f7YCFG8B+UYPMc6F0oybooXbWsMfw2kPjQnn+pXXD/DkBCOlLJ+90hQe55VTjb
eSQ5yUSx3MiG8meBZ3CEGwJY4P8Iw8pt+4DZM5KexSVQoL3Etk13YcIkoSGsVk+F
rkrY4dikmXuzJBizcMScbD698HBKC04UqFP+M5y5PKs8Gkpirt+00AwuHYDv9Zv1
WGp7k8ITQn+ibUPGDXUm5YxkWBMRQqGwZL2wu/0uPcztezs+nKGMhHjQa3FUvUD1
87dETu5YUv8Sy8K0HR9HbiUKMVJSjJB96E7u71g4ddCxCLg3vH6JWDi7dwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM6QqV7CKO+DoLCskuz1BSqc/MBHMB8GA1UdIwQY
MBaAFPiHrH5bKJzmgbJHTDj3lSzKnA+4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JZXNmbHNvbk9hQnNrZE1PUGVWTE1xY0Q3Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRh
LThkNTFkYjY1ZGI2Ni8xLzEtSWVzZmxzb25PYUJza2RNT1BlVkxNcWNEN2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ5L2NjM2FkNC1mZjFhLTQ0OTctODJkYS04ZDUxZGI2NWRi
NjYvMS8xLUllc2Zsc29uT2FCc2tkTU9QZVZMTXFjRDdnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyoU
VXJhj7pu6eealmvhe1yPm7Imja2QpyfpISL+XBo7Jd4mBtomJ9q0/a86sly/bJIg
++AB6oyL7NPyI5h5LKiYoVDg0SBSyBCXaLidPnQ1d/TBdN5K93v8Svu5XjwVAPCA
zpjdKf+6Kf3yAHVx0WH2mLfiRjSzgHOs1xXqqhRAM0q+kRvX2g17FfXxQPp1FcyI
V9k2Fz/ZAgfJCPbyO5rBEHcLiQN58LzpDJoZrpxqb2kh7I8fhGSzBUaNgo+KE+0C
8QEPyHY33yq60EkUKCdVBnqLTO0vY27P4loiRAfuReRA7iQaRtj66pSVouFtFYxt
zrf9ymoYi+VbZgJ7uA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:05 2026 by rpki-client