Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: aRbOICD/qbt0Kz8JdqrfVBmEDwVs5UvpP2/1R4+bONk=
Subject key identifier: 0A:EE:79:1B:88:E8:87:1C:A7:48:BA:44:D3:28:91:BD:C6:65:BB:7A
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019D30074DC58127E1542F0ECE651A7A9A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0AC3
Signing time: Fri 27 Mar 2026 16:01:18 +0000
Manifest this update: Fri 27 Mar 2026 16:01:18 +0000
Manifest next update: Sat 28 Mar 2026 16:01:18 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: OCMBPdQBjV5v/5s0MxyZEcFnELpr1OVqIv8wAS1G15s=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:07:4d:c5:81:27:e1:54:2f:0e:ce:65:1a:7a:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Mar 27 16:01:18 2026 GMT
Not After : Mar 28 16:01:18 2026 GMT
Subject: CN=0aee791b88e8871ca748ba44d32891bdc665bb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:9d:17:0c:a6:53:65:57:50:74:62:c1:c5:
1e:c9:df:f3:68:91:fa:73:88:dc:2a:1b:88:f3:fe:
13:64:5d:94:bc:91:7d:e9:93:13:87:69:4c:eb:c3:
62:40:83:9c:5b:b5:c2:8f:9a:3f:7c:df:e6:70:ba:
9b:aa:b7:d3:9e:12:ba:f7:4a:c1:4e:20:d3:2d:af:
0c:0e:3a:d1:8e:cf:1d:3b:f5:0b:42:ee:f2:b4:17:
1c:d0:2f:96:c0:d0:34:27:bd:da:93:86:2c:57:4f:
43:1c:84:37:dc:7f:c6:fb:74:67:24:9e:d3:f8:fe:
cd:11:5f:fe:a0:5e:95:a9:a6:7d:2a:00:9e:b5:5d:
f0:4e:7a:8d:fa:68:90:b6:97:35:d2:c7:a0:57:19:
c3:2b:b6:8d:83:c9:3a:37:5b:6d:52:d7:ac:8d:d8:
19:8b:06:80:9e:2d:8a:6d:fc:0d:ba:37:8a:46:df:
2d:2d:70:67:b7:66:ef:04:be:4b:9c:ef:17:52:81:
96:c8:df:81:39:3a:3e:d0:70:35:c0:1f:de:be:65:
72:7c:af:02:c8:8b:14:0e:c0:9c:4e:29:9e:64:ae:
ed:c2:dd:f0:b4:4b:20:47:94:22:e3:0f:f8:c8:fb:
e9:12:c2:f7:f2:53:8c:f1:4e:2c:5f:d2:84:49:98:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:79:1B:88:E8:87:1C:A7:48:BA:44:D3:28:91:BD:C6:65:BB:7A
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:94:7c:3f:03:5e:70:da:c6:e7:0e:86:18:1e:34:6b:8a:
40:d4:dc:db:66:02:36:49:6c:0c:ba:c2:53:e2:96:ac:9c:42:
ba:61:79:d7:77:80:68:14:aa:2f:1b:5e:db:93:af:9e:b8:dc:
a5:83:4c:a4:f0:0b:28:90:d1:85:94:b6:ae:e0:fa:e7:8e:43:
d9:74:85:c3:29:1a:11:94:4d:fb:9e:10:cb:84:13:e0:ed:c4:
61:f7:e4:2f:a9:2c:af:8e:0f:aa:e2:67:18:a9:18:15:a4:1c:
3b:b4:2d:42:73:a0:0b:aa:70:fd:94:93:77:72:95:09:1a:ee:
2b:6b:98:9a:59:a3:6c:7d:57:73:25:0e:6d:44:37:1e:fa:fd:
f0:7c:62:97:32:68:8a:ea:27:0f:9e:76:bc:f8:98:41:4e:49:
cb:b1:82:45:ba:1b:38:a3:1e:b7:a5:63:97:50:e9:25:09:4a:
e3:ba:8c:30:e2:e6:fa:32:a5:96:7c:bc:1d:01:fe:5d:6e:7e:
17:c2:55:a1:5b:b0:9b:df:29:fd:e1:9e:44:30:db:96:a3:22:
7a:e7:20:01:ac:dd:a2:f8:71:83:37:cf:79:c1:67:23:6b:66:
ad:0f:71:45:af:c5:d8:aa:cf:e2:41:f6:27:5e:1c:41:49:8f:
4a:a7:38:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0wB03FgSfhVC8OzmUaeppwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjYwMzI3MTYwMTE4WhcNMjYwMzI4MTYwMTE4WjAzMTEwLwYDVQQD
EygwYWVlNzkxYjg4ZTg4NzFjYTc0OGJhNDRkMzI4OTFiZGM2NjViYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGmdFwymU2VXUHRiwcUeyd/zaJH6
c4jcKhuI8/4TZF2UvJF96ZMTh2lM68NiQIOcW7XCj5o/fN/mcLqbqrfTnhK690rB
TiDTLa8MDjrRjs8dO/ULQu7ytBcc0C+WwNA0J73ak4YsV09DHIQ33H/G+3RnJJ7T
+P7NEV/+oF6VqaZ9KgCetV3wTnqN+miQtpc10segVxnDK7aNg8k6N1ttUtesjdgZ
iwaAni2KbfwNujeKRt8tLXBnt2bvBL5LnO8XUoGWyN+BOTo+0HA1wB/evmVyfK8C
yIsUDsCcTimeZK7twt3wtEsgR5Qi4w/4yPvpEsL38lOM8U4sX9KESZi7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArueRuI6Iccp0i6RNMokb3GZbt6MB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjeUfD8D
XnDaxucOhhgeNGuKQNTc22YCNklsDLrCU+KWrJxCumF513eAaBSqLxte25Ovnrjc
pYNMpPALKJDRhZS2ruD6545D2XSFwykaEZRN+54Qy4QT4O3EYffkL6ksr44PquJn
GKkYFaQcO7QtQnOgC6pw/ZSTd3KVCRruK2uYmlmjbH1XcyUObUQ3Hvr98HxilzJo
iuonD552vPiYQU5Jy7GCRbobOKMet6Vjl1DpJQlK47qMMOLm+jKllny8HQH+XW5+
F8JVoVuwm98p/eGeRDDblqMieucgAazdovhxgzfPecFnI2tmrQ9xRa/F2KrP4kH2
J14cQUmPSqc4/Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 19:34:08 2026 by rpki-client