Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: eHJtJgQN1X2+2Ijgfg2xVvMO072+Hbl09NeGrST6U/Q=
Subject key identifier: DE:BB:FE:78:9F:84:22:99:C7:6A:66:01:61:11:7F:57:5F:31:1B:5A
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019D394148A1BE6ECEF4467E06BB863CB6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 0523
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: zuPS0OVwpCY4gyLQRzZX9W9A0Z8bHmAftuQq3yNdPj8=)
2: IebKw_yiTfK_V4_z25ukLjaMeWQ.roa (hash: MAvIvWJqafppESV+KP67qNLbvZAyKKXSx7PlRQfGNY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:48:a1:be:6e:ce:f4:46:7e:06:bb:86:3c:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=debbfe789f842299c76a660161117f575f311b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:32:ea:17:c6:e3:19:51:e0:c6:a4:61:19:
d5:d4:ca:f9:26:4c:7e:53:7f:e6:02:e3:1e:25:2f:
39:e8:ca:58:4f:32:79:d1:d5:83:9e:ba:31:fd:d7:
03:2b:5c:ee:a1:e2:01:b7:2f:bc:e4:7b:e0:01:ff:
e9:d7:27:66:b4:10:16:e1:20:b7:7d:b6:12:0a:5c:
9e:4f:6d:1c:10:41:86:fc:96:f7:c3:6a:71:f3:a0:
8e:83:29:00:66:b4:b2:67:d6:33:62:fd:24:10:b4:
84:f4:16:1a:63:b5:88:e8:f4:eb:4d:4f:9d:f3:f4:
3b:65:75:57:97:29:15:29:fd:2f:b1:fd:65:4e:b9:
4b:d6:35:c5:97:5f:f9:78:61:4c:2d:37:fa:93:03:
67:21:85:81:0e:8d:e1:09:0f:5b:e8:1d:6d:b1:e8:
54:e6:0b:d7:8e:0e:ce:f4:b2:0b:a5:e0:8c:05:57:
20:d5:d2:83:e9:b8:e8:d9:97:3b:8e:67:17:17:d2:
f5:b3:e0:c2:a9:d7:94:fb:a7:ef:5f:b1:f5:62:eb:
80:55:d2:bc:86:0b:da:29:46:6a:54:e4:30:f1:3b:
63:cd:b4:7d:8c:31:11:e5:d3:cb:e5:72:c5:6f:3d:
4d:2d:9c:cb:a1:52:05:c5:3d:d3:94:42:b6:9f:63:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:FE:78:9F:84:22:99:C7:6A:66:01:61:11:7F:57:5F:31:1B:5A
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:9f:6d:f7:2a:83:76:f7:cc:35:b2:f5:f3:6d:cc:d6:b0:
36:28:14:23:cc:0f:6a:14:16:bf:67:58:d9:a9:2c:73:09:21:
51:5f:a4:67:70:3e:c9:43:7b:2d:4b:44:44:0d:3a:5d:bb:d5:
2d:e8:31:1f:5d:6f:01:f9:1e:3f:a7:35:6a:10:46:f7:74:a3:
ea:48:21:91:58:61:10:74:58:c8:92:c1:18:74:6e:00:24:cd:
5b:d3:21:5f:17:df:87:ac:9a:5d:bf:8f:15:90:ab:00:9e:c1:
a9:a2:ee:4b:d6:4d:c6:91:a6:28:d4:c8:a0:31:63:a5:78:a7:
6c:49:86:d2:51:3a:ad:87:8c:fd:41:ba:94:58:6b:35:cd:f6:
4d:00:5d:a5:b3:38:74:b4:2e:a6:98:86:25:26:3f:20:f0:a8:
38:a3:ae:ec:05:d6:bd:88:c3:b6:4e:4c:54:dd:70:6f:00:11:
41:ea:02:52:1b:e5:ec:12:df:66:c7:38:83:35:98:d0:71:9b:
30:15:98:3f:d7:36:eb:5e:cd:2a:f4:f9:36:ad:3b:8f:7b:16:
40:b3:23:75:ad:aa:14:77:77:fa:2f:58:71:5c:e6:e7:f4:6c:
5a:88:66:83:b3:ee:e2:3a:14:cf:7b:f8:5c:4e:db:cf:d8:e3:
c6:26:a6:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUihvm7O9EZ+BruGPLb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjQzNDVhMmFmNmI1NDRjZDFiOGU3OGQ3M2VjMDJiODg5
NTU0NmQwHhcNMjYwMzI5MTEwMTEyWhcNMjYwMzMwMTEwMTEyWjAzMTEwLwYDVQQD
EyhkZWJiZmU3ODlmODQyMjk5Yzc2YTY2MDE2MTExN2Y1NzVmMzExYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWAy6hfG4xlR4MakYRnV1Mr5Jkx+
U3/mAuMeJS856MpYTzJ50dWDnrox/dcDK1zuoeIBty+85HvgAf/p1ydmtBAW4SC3
fbYSClyeT20cEEGG/Jb3w2px86COgykAZrSyZ9YzYv0kELSE9BYaY7WI6PTrTU+d
8/Q7ZXVXlykVKf0vsf1lTrlL1jXFl1/5eGFMLTf6kwNnIYWBDo3hCQ9b6B1tsehU
5gvXjg7O9LILpeCMBVcg1dKD6bjo2Zc7jmcXF9L1s+DCqdeU+6fvX7H1YuuAVdK8
hgvaKUZqVOQw8TtjzbR9jDER5dPL5XLFbz1NLZzLoVIFxT3TlEK2n2OU9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN67/nifhCKZx2pmAWERf1dfMRtaMB8GA1UdIwQY
MBaAFNX0NFoq9rVEzRuOeNc+wCuIlVRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGIt
MjViYjlmYjE5NzIwLzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZWRmOTEtMzczNi00YmY5LWEzOGItMjViYjlmYjE5NzIw
LzEvMWZRMFdpcjJ0VVRORzQ1NDF6N0FLNGlWVkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIOfbfcq
g3b3zDWy9fNtzNawNigUI8wPahQWv2dY2akscwkhUV+kZ3A+yUN7LUtERA06XbvV
LegxH11vAfkeP6c1ahBG93Sj6kghkVhhEHRYyJLBGHRuACTNW9MhXxffh6yaXb+P
FZCrAJ7BqaLuS9ZNxpGmKNTIoDFjpXinbEmG0lE6rYeM/UG6lFhrNc32TQBdpbM4
dLQuppiGJSY/IPCoOKOu7AXWvYjDtk5MVN1wbwARQeoCUhvl7BLfZsc4gzWY0HGb
MBWYP9c2617NKvT5Nq07j3sWQLMjda2qFHd3+i9YcVzm5/RsWohmg7Pu4joUz3v4
XE7bz9jjxiamiA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:08 2026 by rpki-client