Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: yl8rK7zU44iuXLe5lxwt4Y7x4MHQkYlmHktqM8pQCWM=
Subject key identifier: 02:39:37:C4:16:44:0E:D7:FC:90:88:40:44:8B:DE:DB:E2:2E:99:3A
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 019D3977EBE1F9D05DEE1DBA834758D14F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 0616
Signing time: Sun 29 Mar 2026 12:00:53 +0000
Manifest this update: Sun 29 Mar 2026 12:00:53 +0000
Manifest next update: Mon 30 Mar 2026 12:00:53 +0000
Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: SX4suRSXKGWzoT+UtqeNPLU2fxErhlE7d9g2HVbOOow=)
2: fz-rvWQsVYjo3OqyUy9lM_fX5Ww.roa (hash: m87pe4kWn6CXoDHZ+RYNhWqFQvvF86Ib8ZOI9K0cWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:eb:e1:f9:d0:5d:ee:1d:ba:83:47:58:d1:4f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Mar 29 12:00:53 2026 GMT
Not After : Mar 30 12:00:53 2026 GMT
Subject: CN=023937c416440ed7fc908840448bdedbe22e993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c3:52:37:43:2e:b7:5a:98:1f:03:b4:1e:ab:
e7:b7:27:b5:db:3f:1e:31:02:91:6d:ea:fa:c1:3a:
d4:c4:9c:d1:2d:aa:1f:97:79:b4:5b:b2:2e:eb:d4:
14:17:22:73:7e:69:b7:52:df:9b:06:7f:52:50:59:
69:4a:dd:20:32:eb:05:09:ea:0b:88:15:24:fe:f7:
88:97:37:be:20:83:f9:7e:d2:04:6f:a3:a8:88:84:
81:ea:2d:a3:bc:3e:ed:1d:10:7c:4d:50:cf:8b:b3:
31:67:08:f4:de:03:e5:42:f1:f6:80:8f:ec:ca:72:
9e:20:28:35:80:66:43:e6:57:66:2a:75:e4:16:bb:
5b:8a:1c:40:c6:7a:9b:47:3e:59:83:ea:0d:b8:1f:
a1:52:43:ad:c4:1e:e3:fe:31:1d:3d:33:81:99:2d:
b6:50:f8:16:ad:39:5d:ba:4d:9f:e4:f6:ec:4f:8b:
77:b7:9b:f8:77:3e:7b:18:ad:ea:4a:af:86:18:4c:
39:ba:02:06:34:76:99:30:97:c3:f4:bb:1a:40:44:
81:b5:69:01:47:50:a0:ec:0f:7e:eb:c7:89:1d:03:
25:6f:ff:ab:68:bc:7d:c0:95:35:16:7a:69:c5:11:
21:5a:bb:e9:fb:be:ce:89:db:64:e2:22:40:15:c1:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:37:C4:16:44:0E:D7:FC:90:88:40:44:8B:DE:DB:E2:2E:99:3A
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:42:02:24:24:9a:4f:00:09:ee:9b:db:de:a7:ac:8b:b8:
5c:05:17:7c:cb:bd:16:49:77:54:55:22:0a:5c:62:8f:58:27:
ba:06:0a:36:3c:18:0b:81:4d:0a:0c:91:ee:84:98:7e:aa:af:
79:aa:b3:36:b9:1a:12:96:76:67:70:9d:63:60:8e:dc:28:b1:
0e:fe:1d:6a:fa:5c:22:b6:11:2d:03:fa:12:1a:f8:71:57:75:
e7:f7:27:e1:53:d3:e9:12:92:c9:15:41:a8:a1:4d:e1:de:f3:
2b:aa:23:7e:5e:ee:72:b6:cf:f7:0f:e8:46:45:60:d6:7c:f2:
0d:00:8c:ba:89:f8:24:93:cf:fa:55:0e:78:25:39:11:cc:f3:
da:9a:ff:f0:92:b7:23:8b:3a:19:0b:5b:20:fd:9f:98:7b:a0:
2a:4c:b8:91:0d:49:a1:be:f5:4c:6c:b1:68:77:c8:f2:66:2b:
47:e4:15:83:73:4c:f1:01:02:2e:58:e4:37:c9:ea:67:cf:0e:
ba:92:72:d9:eb:ed:ce:0a:ac:df:a0:97:7b:5f:73:22:12:24:
03:54:58:93:0b:84:fe:b6:37:8f:c4:d6:3f:e1:52:d4:df:a8:
1e:a9:45:f2:9b:8a:b9:dd:c2:c9:7d:3f:fb:97:18:3d:49:d9:
e9:55:14:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d+vh+dBd7h26g0dY0U95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNThhOThkYjc3N2NiOTE2Y2E1NjM5N2VjM2Q4N2M5ODYz
NjczMTAwHhcNMjYwMzI5MTIwMDUzWhcNMjYwMzMwMTIwMDUzWjAzMTEwLwYDVQQD
EygwMjM5MzdjNDE2NDQwZWQ3ZmM5MDg4NDA0NDhiZGVkYmUyMmU5OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68NSN0Mut1qYHwO0Hqvntye12z8e
MQKRber6wTrUxJzRLaofl3m0W7Iu69QUFyJzfmm3Ut+bBn9SUFlpSt0gMusFCeoL
iBUk/veIlze+IIP5ftIEb6OoiISB6i2jvD7tHRB8TVDPi7MxZwj03gPlQvH2gI/s
ynKeICg1gGZD5ldmKnXkFrtbihxAxnqbRz5Zg+oNuB+hUkOtxB7j/jEdPTOBmS22
UPgWrTlduk2f5PbsT4t3t5v4dz57GK3qSq+GGEw5ugIGNHaZMJfD9LsaQESBtWkB
R1Cg7A9+68eJHQMlb/+raLx9wJU1FnppxREhWrvp+77Oidtk4iJAFcHBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI5N8QWRA7X/JCIQESL3tviLpk6MB8GA1UdIwQY
MBaAFP9YqY23d8uRbKVjl+w9h8mGNnMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2Ut
MmQ2ZWVmOTA1NjA3LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MzA1YzgtYzZhOC00MGUzLWI0M2UtMmQ2ZWVmOTA1NjA3
LzEvXzFpcGpiZDN5NUZzcFdPWDdEMkh5WVkyY3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHpCAiQk
mk8ACe6b296nrIu4XAUXfMu9Fkl3VFUiClxij1gnugYKNjwYC4FNCgyR7oSYfqqv
eaqzNrkaEpZ2Z3CdY2CO3CixDv4davpcIrYRLQP6Ehr4cVd15/cn4VPT6RKSyRVB
qKFN4d7zK6ojfl7ucrbP9w/oRkVg1nzyDQCMuon4JJPP+lUOeCU5Eczz2pr/8JK3
I4s6GQtbIP2fmHugKky4kQ1Job71TGyxaHfI8mYrR+QVg3NM8QECLljkN8nqZ88O
upJy2evtzgqs36CXe19zIhIkA1RYkwuE/rY3j8TWP+FS1N+oHqlF8puKud3CyX0/
+5cYPUnZ6VUUEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:57 2026 by rpki-client