Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: PIOJFYdOouPWEsnx/KJvuyuOCE1RpOcK1eFQkKPT4Vk=
Subject key identifier: F9:AF:CE:13:EB:5D:9F:76:B3:B0:81:9F:D1:62:97:3C:DA:1F:3E:BE
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019D371B23C03053E979F7237DFBA97D15FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 08F0
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: 2d7N5AyulGZJhbcYwmWFrUlgbMXu1CV+LOOoLPXTMM8=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:23:c0:30:53:e9:79:f7:23:7d:fb:a9:7d:15:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=f9afce13eb5d9f76b3b0819fd162973cda1f3ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:8c:eb:bb:d1:c8:be:aa:0b:b3:67:b4:c2:
21:66:c9:1f:21:2e:75:c2:b5:81:eb:61:35:de:f8:
6a:c5:e6:d1:53:d0:c4:36:7b:f3:0d:cf:ae:a6:06:
27:84:61:c7:a2:d6:fa:d9:5e:42:bc:68:9b:d4:3f:
19:00:e5:17:64:c9:d8:03:ed:46:40:45:a5:0d:6b:
08:1f:98:33:2c:bb:f5:89:a0:2a:de:76:4b:2f:2a:
17:77:23:4f:a1:28:b9:51:bd:8d:13:f3:d8:68:d2:
d0:86:61:c7:f2:40:5b:bd:f8:ab:58:a3:eb:89:55:
60:ab:58:9e:ec:93:84:fd:9e:f2:0e:7b:bb:91:5b:
c1:ce:96:ef:bc:c0:91:35:40:ae:1a:25:3d:6f:55:
f9:db:6d:d6:7e:4a:b4:da:a7:1f:13:76:51:f0:93:
72:8d:b7:0c:9c:7d:82:dc:bb:10:0d:16:17:45:d3:
f3:54:ed:b0:ca:67:4e:a3:90:e5:b6:9d:36:39:3f:
66:0f:c3:aa:8b:a3:46:ab:ce:bc:f8:66:9c:43:7f:
3e:36:32:a6:f7:ef:37:e8:c7:94:7e:b8:45:af:89:
20:f4:65:b4:fc:33:ae:dc:e3:c1:8b:a6:4c:47:01:
bb:fd:4c:d0:c0:57:b7:b2:36:03:02:b4:4e:3b:95:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:CE:13:EB:5D:9F:76:B3:B0:81:9F:D1:62:97:3C:DA:1F:3E:BE
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:f5:d4:17:9b:3c:2c:ff:0a:f4:48:41:e7:17:df:eb:0b:
cd:fd:94:99:ed:a8:83:80:b4:ed:d8:17:c5:5d:24:75:e4:dd:
a8:3a:28:1e:bc:b8:74:20:a6:0c:b0:59:c5:38:be:ef:7b:55:
aa:10:cf:98:c6:0a:6e:d2:c4:2e:ce:96:17:55:ae:34:06:68:
54:b3:75:1a:40:7e:77:d7:08:b4:8e:61:70:72:79:6f:4a:92:
15:ed:e5:d3:11:a3:4d:fc:86:66:b8:8e:ee:2d:dc:8d:af:6d:
2f:69:da:fe:d7:57:a0:9b:f7:97:a5:22:c6:b2:e8:44:7d:d0:
2e:1c:ea:c7:e5:20:78:31:9c:52:99:b7:47:f9:ec:77:3b:1d:
ee:15:a8:35:e5:30:8f:62:00:1e:b1:1e:78:a2:1d:00:10:3e:
8d:61:52:7a:3e:2c:d7:56:8b:c2:f6:68:7f:d4:f2:79:db:23:
ed:79:86:8b:81:7d:d6:3b:5b:d6:f9:5c:c4:0f:45:3f:e3:9d:
16:3a:08:6e:44:b7:de:5e:cb:ca:52:c2:19:19:3d:30:a1:57:
42:e4:02:23:c7:f5:e6:bd:39:58:6a:57:cf:71:25:b6:a3:1a:
ee:1e:39:f4:d6:3a:6c:a1:9b:d9:ee:d9:88:f5:04:85:f6:f8:
55:c4:c8:3c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03GyPAMFPpefcjffupfRX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjYwMzI5MDEwMDE4WhcNMjYwMzMwMDEwMDE4WjAzMTEwLwYDVQQD
EyhmOWFmY2UxM2ViNWQ5Zjc2YjNiMDgxOWZkMTYyOTczY2RhMWYzZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmOM67vRyL6qC7NntMIhZskfIS51
wrWB62E13vhqxebRU9DENnvzDc+upgYnhGHHotb62V5CvGib1D8ZAOUXZMnYA+1G
QEWlDWsIH5gzLLv1iaAq3nZLLyoXdyNPoSi5Ub2NE/PYaNLQhmHH8kBbvfirWKPr
iVVgq1ie7JOE/Z7yDnu7kVvBzpbvvMCRNUCuGiU9b1X5223Wfkq02qcfE3ZR8JNy
jbcMnH2C3LsQDRYXRdPzVO2wymdOo5Dltp02OT9mD8Oqi6NGq868+GacQ38+NjKm
9+836MeUfrhFr4kg9GW0/DOu3OPBi6ZMRwG7/UzQwFe3sjYDArROO5U+GQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPmvzhPrXZ92s7CBn9FilzzaHz6+MB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm
YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyz1
1BebPCz/CvRIQecX3+sLzf2Ume2og4C07dgXxV0kdeTdqDooHry4dCCmDLBZxTi+
73tVqhDPmMYKbtLELs6WF1WuNAZoVLN1GkB+d9cItI5hcHJ5b0qSFe3l0xGjTfyG
ZriO7i3cja9tL2na/tdXoJv3l6UixrLoRH3QLhzqx+UgeDGcUpm3R/nsdzsd7hWo
NeUwj2IAHrEeeKIdABA+jWFSej4s11aLwvZof9Tyedsj7XmGi4F91jtb1vlcxA9F
P+OdFjoIbkS33l7LylLCGRk9MKFXQuQCI8f15r05WGpXz3EltqMa7h459NY6bKGb
2e7ZiPUEhfb4VcTIPA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client