Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: gHSMex85PLC1uPQ1xkMyHMp1v8+lq2lqLwdcpCJXpsw=
Subject key identifier: 6A:2D:24:D5:DF:52:01:5C:A4:B7:AC:A9:85:6F:61:56:C4:2C:B7:3C
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019D39AEA1AE4846469E4C1C8CEBAE739BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 083B
Signing time: Sun 29 Mar 2026 13:00:38 +0000
Manifest this update: Sun 29 Mar 2026 13:00:38 +0000
Manifest next update: Mon 30 Mar 2026 13:00:38 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: 5P5KOpTaTN03OtUp3NL98YZyFVdrmovn8FuQeV0O+FE=)
2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a1:ae:48:46:46:9e:4c:1c:8c:eb:ae:73:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Mar 29 13:00:38 2026 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=6a2d24d5df52015ca4b7aca9856f6156c42cb73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:47:e2:db:22:0a:c2:a1:06:8b:44:75:b8:
48:51:74:53:29:b8:b2:93:71:17:0d:0f:c3:1a:d4:
b5:4f:10:82:9c:3f:1d:d0:96:e9:f6:7a:38:e2:bb:
9c:15:28:e4:8f:4c:e9:64:3f:11:73:e6:6b:da:7d:
85:30:7e:5a:ff:32:be:f9:c1:c3:10:e9:a0:ae:f1:
00:f7:93:fc:5c:25:08:66:d2:87:e6:a9:3b:e3:5f:
1d:4c:31:b3:30:7a:5b:9f:4e:5a:b7:81:86:a9:c6:
fa:b2:6f:06:85:82:f9:44:65:a7:c1:dd:a4:69:b3:
84:8d:80:64:93:9b:9c:0d:53:07:55:1c:07:ca:e5:
60:f0:21:5f:84:0d:13:cc:b3:15:7d:4e:77:2c:a5:
c4:72:eb:2f:89:b2:aa:30:94:fa:5d:f3:ae:14:8f:
87:32:60:c1:6c:b1:95:9f:df:37:06:f1:b1:4d:30:
88:ec:f9:70:0a:a6:5f:3a:23:e6:22:46:dd:f4:a3:
32:4c:e5:ed:2d:ed:42:bf:4b:63:b0:c3:f7:73:25:
df:9b:ab:0a:2a:bb:1c:84:9b:ed:e1:32:8b:69:c4:
0f:b2:4e:5e:a4:71:cd:6d:1e:29:00:92:31:f0:d0:
7d:2c:33:72:b4:2d:4a:ba:cb:c3:45:44:ea:6e:b4:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2D:24:D5:DF:52:01:5C:A4:B7:AC:A9:85:6F:61:56:C4:2C:B7:3C
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:94:f8:ee:77:35:21:cd:a9:ab:d4:9c:9e:ba:56:52:c7:
c8:28:18:5c:e7:fc:af:c5:a3:de:9f:6c:8e:b1:e0:87:4e:01:
e9:7a:2b:c6:5e:f0:e0:02:d1:d7:d1:ad:89:ca:64:8f:d8:3c:
fa:b2:d5:b7:66:74:20:2a:38:92:02:80:ce:2b:d5:4a:19:8e:
8d:69:8f:65:b0:dd:b2:d4:42:84:7d:84:25:95:6e:40:40:8b:
cd:2d:77:dc:71:97:85:8b:bf:f8:80:16:2d:c0:bb:f0:5e:e4:
8c:64:db:0e:d2:ca:e3:ec:ff:1e:23:d4:33:9b:c3:85:a8:4f:
22:f3:76:77:40:cd:8f:72:e0:37:75:e4:7b:c5:c9:fe:a8:6d:
c3:97:9b:5c:84:79:ac:55:b4:90:9b:a4:d1:e4:c1:19:b5:74:
85:00:0a:3d:55:eb:bd:d8:42:c8:49:68:0f:5e:0f:68:b3:b9:
76:f5:23:82:5f:b3:b0:7a:cc:2c:76:4e:9d:a1:b9:db:97:95:
a4:5b:1e:fd:61:74:11:f2:d4:91:48:2b:14:03:3a:32:da:f6:
53:da:da:7d:ff:3b:6f:18:5e:a4:38:71:93:f9:b0:43:44:8e:
a5:ff:95:19:38:dd:4a:13:5e:ea:36:9e:51:2e:b7:13:4b:92:
b4:b0:69:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05rqGuSEZGnkwcjOuuc5vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm
YTBjZWIwHhcNMjYwMzI5MTMwMDM4WhcNMjYwMzMwMTMwMDM4WjAzMTEwLwYDVQQD
Eyg2YTJkMjRkNWRmNTIwMTVjYTRiN2FjYTk4NTZmNjE1NmM0MmNiNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uZH4tsiCsKhBotEdbhIUXRTKbiy
k3EXDQ/DGtS1TxCCnD8d0Jbp9no44rucFSjkj0zpZD8Rc+Zr2n2FMH5a/zK++cHD
EOmgrvEA95P8XCUIZtKH5qk7418dTDGzMHpbn05at4GGqcb6sm8GhYL5RGWnwd2k
abOEjYBkk5ucDVMHVRwHyuVg8CFfhA0TzLMVfU53LKXEcusvibKqMJT6XfOuFI+H
MmDBbLGVn983BvGxTTCI7PlwCqZfOiPmIkbd9KMyTOXtLe1Cv0tjsMP3cyXfm6sK
KrschJvt4TKLacQPsk5epHHNbR4pAJIx8NB9LDNytC1KusvDRUTqbrTlSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGotJNXfUgFcpLesqYVvYVbELLc8MB8GA1UdIwQY
MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj
LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm
YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazmU
+O53NSHNqavUnJ66VlLHyCgYXOf8r8Wj3p9sjrHgh04B6Xorxl7w4ALR19Gticpk
j9g8+rLVt2Z0ICo4kgKAzivVShmOjWmPZbDdstRChH2EJZVuQECLzS133HGXhYu/
+IAWLcC78F7kjGTbDtLK4+z/HiPUM5vDhahPIvN2d0DNj3LgN3Xke8XJ/qhtw5eb
XIR5rFW0kJuk0eTBGbV0hQAKPVXrvdhCyEloD14PaLO5dvUjgl+zsHrMLHZOnaG5
25eVpFse/WF0EfLUkUgrFAM6Mtr2U9raff87bxhepDhxk/mwQ0SOpf+VGTjdShNe
6jaeUS63E0uStLBp8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:32 2026 by rpki-client