Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: Froj53GFomePwQxOh5T3vdTJpTYPDihUMisMtz5s/DQ=
Subject key identifier: 2B:13:F9:79:03:CD:6B:05:9D:E4:D2:35:AA:E2:D4:D9:D5:3B:E6:5F
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 019D39780976AC34C7B99BB72B4A89402D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: 022F
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: KKA6RrBz9Zcg3Sbtl1J8+gDtU2v6y0xF28y3L+n/48A=)
2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:09:76:ac:34:c7:b9:9b:b7:2b:4a:89:40:2d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=2b13f97903cd6b059de4d235aae2d4d9d53be65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:ab:5d:2e:f0:6f:e8:c3:db:21:a5:fb:6a:
0f:83:7b:96:98:b9:30:3d:d8:33:cc:bd:93:7e:65:
df:c4:af:9b:15:c2:5d:1b:0a:8a:dd:e9:65:f4:38:
d4:3c:a5:1f:70:b8:e8:d9:40:4e:88:5a:bf:7a:78:
6d:1c:80:1a:49:64:d3:42:8f:0d:8c:1d:5a:13:23:
44:24:bd:97:77:2b:2e:3b:59:1b:c9:13:9f:2d:a3:
33:43:f1:e5:4a:0b:13:52:07:ae:6c:eb:55:2b:52:
e7:52:d6:c8:2e:50:6d:0c:5d:1c:e3:4e:72:d9:31:
a3:0d:0d:4c:6f:88:cf:2e:56:a3:e3:21:24:ff:af:
ca:61:91:14:e8:81:cb:af:fa:93:18:06:f3:d0:6a:
86:e7:4b:8f:29:8c:4f:6d:89:2b:1d:0f:7f:03:ef:
db:a0:c5:82:03:02:2a:69:25:22:eb:2c:9d:f5:3c:
c6:eb:9c:15:3e:05:b1:5b:b5:86:c0:34:54:29:a6:
88:f8:91:77:9b:a8:3d:b4:6c:a0:c2:29:73:26:5a:
1d:10:56:9c:a1:56:e5:49:20:46:b1:c0:fd:38:02:
1a:6b:ad:6d:86:23:3d:8f:4f:9b:93:c3:b6:5c:13:
57:01:e4:86:23:ba:c9:24:d4:05:6d:ff:f7:29:6b:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:F9:79:03:CD:6B:05:9D:E4:D2:35:AA:E2:D4:D9:D5:3B:E6:5F
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:43:3d:0c:ff:fd:b1:4b:96:af:4a:0f:35:a0:0e:01:5f:df:
be:30:45:3f:50:61:0a:a3:64:46:95:0f:23:09:7d:da:fa:8e:
aa:2f:9f:44:51:10:43:ca:d2:f6:32:70:5e:5b:c7:27:b4:ab:
f6:f7:b7:3b:01:13:03:b6:28:8f:5a:3d:9e:47:fa:55:66:18:
97:26:ff:d5:70:ed:c1:f4:a6:65:9c:88:d0:51:a1:26:4e:d9:
ce:cf:c9:a6:ab:ff:42:4e:c8:9f:36:0d:17:51:51:a3:20:45:
d3:39:ca:1f:d9:27:68:3a:63:a7:af:d5:96:c0:42:c8:47:64:
47:40:f8:67:07:30:a2:8c:f4:ba:2d:a1:38:e5:4b:5e:31:9c:
ba:ef:ae:7e:09:92:71:03:e2:2c:9c:ea:78:7f:38:5d:f7:9b:
c8:f7:ae:2e:c6:e6:bf:a6:31:5f:89:e1:56:82:05:78:8e:26:
15:9b:f6:a5:8d:58:7d:f6:b6:d6:04:d7:f8:f0:af:77:81:c1:
64:5e:93:37:fb:fb:73:b7:96:d3:f3:e3:a6:4f:b9:21:0b:94:
11:a4:94:c0:d1:38:5e:35:ee:82:ab:08:09:8a:22:10:5a:2d:
a1:d9:91:6b:81:62:4a:a2:62:35:5d:d2:35:13:40:16:1f:54:
dd:ca:82:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eAl2rDTHuZu3K0qJQC1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZWMzYzAyODViYzQ1ODMzMmRlODE1MDM2NGFiMmEyMTli
YTYxZTIwHhcNMjYwMzI5MTIwMTAxWhcNMjYwMzMwMTIwMTAxWjAzMTEwLwYDVQQD
EygyYjEzZjk3OTAzY2Q2YjA1OWRlNGQyMzVhYWUyZDRkOWQ1M2JlNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSrXS7wb+jD2yGl+2oPg3uWmLkw
PdgzzL2TfmXfxK+bFcJdGwqK3ell9DjUPKUfcLjo2UBOiFq/enhtHIAaSWTTQo8N
jB1aEyNEJL2XdysuO1kbyROfLaMzQ/HlSgsTUgeubOtVK1LnUtbILlBtDF0c405y
2TGjDQ1Mb4jPLlaj4yEk/6/KYZEU6IHLr/qTGAbz0GqG50uPKYxPbYkrHQ9/A+/b
oMWCAwIqaSUi6yyd9TzG65wVPgWxW7WGwDRUKaaI+JF3m6g9tGygwilzJlodEFac
oVblSSBGscD9OAIaa61thiM9j0+bk8O2XBNXAeSGI7rJJNQFbf/3KWvvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsT+XkDzWsFneTSNari1NnVO+ZfMB8GA1UdIwQY
MBaAFNfsPAKFvEWDMt6BUDZKsqIZumHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEt
MWIzMzc5YWZmNTFkLzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEtMWIzMzc5YWZmNTFk
LzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkM9DP/9
sUuWr0oPNaAOAV/fvjBFP1BhCqNkRpUPIwl92vqOqi+fRFEQQ8rS9jJwXlvHJ7Sr
9ve3OwETA7Yoj1o9nkf6VWYYlyb/1XDtwfSmZZyI0FGhJk7Zzs/Jpqv/Qk7InzYN
F1FRoyBF0znKH9knaDpjp6/VlsBCyEdkR0D4Zwcwooz0ui2hOOVLXjGcuu+ufgmS
cQPiLJzqeH84XfebyPeuLsbmv6YxX4nhVoIFeI4mFZv2pY1Yffa21gTX+PCvd4HB
ZF6TN/v7c7eW0/Pjpk+5IQuUEaSUwNE4XjXugqsICYoiEFotodmRa4FiSqJiNV3S
NRNAFh9U3cqCfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:12 2026 by rpki-client