Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: ZQymVtVwAEAGIcMsqMPUtE0fOUGRGGoAfMMPcLGT8b0=
Subject key identifier: 03:AB:73:29:88:79:D6:3E:F5:50:C2:B4:D0:8E:4B:D4:9F:5E:A4:E7
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019D3940F6F5F813F3323E04AC85BF11864C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 15CD
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: eIuuReJkXasGICXzO1UDB/M3p8gdVZlgEJegJOubMLQ=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f6:f5:f8:13:f3:32:3e:04:ac:85:bf:11:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=03ab73298879d63ef550c2b4d08e4bd49f5ea4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:58:e0:b6:06:d3:10:d8:77:31:f0:02:bb:
37:96:ab:05:0c:d5:d3:50:0f:c7:10:77:01:83:15:
6b:15:79:b9:6e:53:84:4f:79:f3:fd:cc:8b:15:6f:
e1:31:53:ee:3a:04:f9:8a:69:85:09:c1:39:95:43:
a5:c3:7d:75:30:9a:61:b3:25:07:6b:be:d0:22:94:
00:30:eb:8e:ad:4a:d7:9f:b7:48:79:c1:78:48:04:
dd:61:63:53:a9:3c:d3:3a:5d:0f:ba:4c:21:bf:ec:
84:c1:95:18:f4:cc:ab:d7:12:c5:24:16:b4:8f:a5:
7a:66:60:78:b2:49:00:48:e9:57:78:d4:41:76:d4:
45:13:a0:28:18:3c:4f:98:39:f0:fa:1f:25:5a:3e:
31:a3:6a:48:03:d7:ed:7e:72:5e:db:af:e2:fd:be:
b1:2a:ff:4c:0c:92:84:08:01:8a:8a:b6:ef:d6:97:
bd:b7:6c:3a:7c:d1:f3:06:dc:65:78:22:46:ba:e4:
c1:8a:d4:cf:98:37:7b:34:0e:96:62:d0:7c:01:b5:
80:80:a4:7c:a6:d3:da:7f:97:6f:de:68:b9:05:38:
a8:f7:eb:ea:9b:5f:87:7a:7c:ab:9b:a7:9e:88:06:
1c:64:f9:6d:26:7b:98:32:e1:2d:f7:51:30:4b:dc:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:73:29:88:79:D6:3E:F5:50:C2:B4:D0:8E:4B:D4:9F:5E:A4:E7
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:23:a0:94:f7:20:92:c4:f2:85:9c:9a:4d:52:10:67:43:
18:bb:69:5c:76:74:b4:2b:6e:1e:0d:9f:9e:b1:f3:4b:c9:35:
5c:8d:30:0d:03:6b:d2:af:05:5d:1c:49:8c:e2:a0:ac:b9:fe:
33:04:03:7a:9b:d2:48:38:36:fb:b7:44:31:f8:94:69:fe:0e:
e8:e6:2c:78:de:8c:6e:02:81:43:ec:89:ce:bf:79:d7:a3:4e:
00:c4:55:7b:72:fb:67:f7:6b:ba:a3:0c:dd:2a:f3:9e:fd:78:
0e:1c:2c:79:84:ad:0f:fc:48:b7:e7:5e:0c:73:ed:82:73:4a:
4f:54:91:e9:bb:24:2a:8e:96:46:b2:5d:ad:78:81:0f:36:8a:
0d:32:21:b4:c2:4b:9b:ae:2f:13:ae:17:00:70:23:fe:3b:42:
53:72:d9:f0:b2:e8:6d:26:71:b6:07:d3:86:a0:90:b8:61:01:
16:0c:3c:b3:2e:23:6e:51:0b:85:10:70:56:a0:a1:9e:4e:21:
c3:49:93:c1:86:4b:bc:6a:4d:ce:2a:41:e8:31:94:34:45:fa:
f6:5a:a7:98:7f:c7:29:bd:3c:9f:de:a6:41:56:b3:3b:d9:ad:
70:2d:a5:38:9c:61:62:35:30:f3:21:2e:8c:02:01:95:ce:ac:
10:21:9f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPb1+BPzMj4ErIW/EYZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjYwMzI5MTEwMDUxWhcNMjYwMzMwMTEwMDUxWjAzMTEwLwYDVQQD
EygwM2FiNzMyOTg4NzlkNjNlZjU1MGMyYjRkMDhlNGJkNDlmNWVhNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzhY4LYG0xDYdzHwArs3lqsFDNXT
UA/HEHcBgxVrFXm5blOET3nz/cyLFW/hMVPuOgT5immFCcE5lUOlw311MJphsyUH
a77QIpQAMOuOrUrXn7dIecF4SATdYWNTqTzTOl0Pukwhv+yEwZUY9Myr1xLFJBa0
j6V6ZmB4skkASOlXeNRBdtRFE6AoGDxPmDnw+h8lWj4xo2pIA9ftfnJe26/i/b6x
Kv9MDJKECAGKirbv1pe9t2w6fNHzBtxleCJGuuTBitTPmDd7NA6WYtB8AbWAgKR8
ptPaf5dv3mi5BTio9+vqm1+Henyrm6eeiAYcZPltJnuYMuEt91EwS9w6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOrcymIedY+9VDCtNCOS9SfXqTnMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHojoJT3
IJLE8oWcmk1SEGdDGLtpXHZ0tCtuHg2fnrHzS8k1XI0wDQNr0q8FXRxJjOKgrLn+
MwQDepvSSDg2+7dEMfiUaf4O6OYseN6MbgKBQ+yJzr9516NOAMRVe3L7Z/druqMM
3Srznv14DhwseYStD/xIt+deDHPtgnNKT1SR6bskKo6WRrJdrXiBDzaKDTIhtMJL
m64vE64XAHAj/jtCU3LZ8LLobSZxtgfThqCQuGEBFgw8sy4jblELhRBwVqChnk4h
w0mTwYZLvGpNzipB6DGUNEX69lqnmH/HKb08n96mQVazO9mtcC2lOJxhYjUw8yEu
jAIBlc6sECGf8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:39 2026 by rpki-client