Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier: FJPDeMdoFxECiH70ylZue3KwFn1rvhNOmuQHdk/reDk=
Subject key identifier: D1:E2:2A:6A:10:79:F0:1C:BE:C3:68:F1:09:AA:68:E1:7E:2C:C0:65
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial: 019D39777C5899E3549DDED59DF8A5961993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number: 01F0
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: h1jvb7o/wVrEAZuDNxEGqze9WL5DexLQKQsU06+zBnk=)
2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7c:58:99:e3:54:9d:de:d5:9d:f8:a5:96:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=d1e22a6a1079f01cbec368f109aa68e17e2cc065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:9e:7e:3e:71:a3:c2:42:31:a4:68:22:8a:
59:10:fa:18:1c:9c:6c:d0:a3:bf:a0:a1:a0:18:8f:
66:93:35:d1:b2:12:c7:d3:c4:a7:25:aa:63:dc:75:
c1:1f:8f:3d:70:17:7f:42:ec:68:f1:7c:c3:9c:6d:
63:d7:2a:64:83:bb:77:99:5f:01:0f:e6:08:1b:4b:
49:bf:a6:db:3f:58:0b:a7:07:27:48:e3:64:b3:ac:
bd:c4:63:40:c7:f6:61:43:42:ab:2b:4a:f5:4b:c3:
7e:3a:c3:5a:ad:e5:a9:6c:09:10:30:55:a8:4a:2f:
e0:1e:73:29:2f:f7:a5:42:7f:13:e5:8a:ce:3c:92:
15:05:f0:16:4d:45:04:ab:b2:6c:23:86:6c:d6:33:
28:0e:e3:e2:82:70:97:e0:7e:3c:e4:3d:2f:b7:a8:
f4:30:cc:79:31:57:21:59:a4:93:01:7a:45:d3:c2:
7d:a7:0b:c3:18:00:6b:51:fb:d6:d7:ef:e5:ff:bd:
c5:32:d0:1c:b9:28:61:ef:a9:58:c0:e9:dc:60:34:
f3:23:c4:e4:ff:32:f7:2a:18:eb:02:e2:aa:6e:cb:
5c:5a:43:b0:35:05:11:7f:96:e7:3c:6a:c1:3d:5d:
73:b1:44:0d:da:9f:76:c9:e4:d8:6f:f5:5f:84:a0:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:2A:6A:10:79:F0:1C:BE:C3:68:F1:09:AA:68:E1:7E:2C:C0:65
X509v3 Authority Key Identifier:
keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7d:5a:56:da:19:d7:0f:c0:51:0e:86:7e:f6:e0:bd:bd:da:
fa:23:28:84:57:d0:9f:17:09:96:dc:52:9a:da:1d:1b:14:64:
79:27:70:52:8f:2f:0e:f9:12:6c:51:29:97:10:af:80:35:e0:
bb:a5:12:92:06:cf:0e:b3:5c:fc:95:8c:2b:4d:e4:05:cd:e3:
58:4e:e8:01:dd:99:c9:d3:cd:74:6c:fa:d5:41:32:72:f5:f3:
15:ce:45:34:43:c0:ca:5c:c4:42:27:01:b6:22:25:e3:c1:4e:
39:e6:25:d2:b2:7c:fe:c3:5b:65:92:7b:ea:8a:05:b2:9b:17:
7a:9d:a7:e0:26:ff:49:78:a2:6f:18:cf:51:fb:e6:3c:18:7f:
e9:b4:f0:4f:78:2e:72:96:19:c4:02:9b:5e:ac:9c:54:7c:8f:
7d:d6:29:a9:a8:68:36:3c:48:7d:59:92:f8:03:3d:3d:da:ee:
90:1f:6f:b9:67:eb:2f:00:42:c9:52:3b:46:35:d9:02:0c:ee:
07:a9:71:15:f9:e7:86:62:5d:68:80:13:5e:48:08:e9:1c:47:
31:5c:b1:95:a1:e8:79:45:26:6f:6b:cd:72:c4:b1:c1:12:13:
23:30:11:e1:5f:71:5b:b0:a6:dd:b7:08:7c:30:cd:06:38:c7:
94:57:00:8c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05d3xYmeNUnd7VnfillhmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3
NDY5YWMwHhcNMjYwMzI5MTIwMDI0WhcNMjYwMzMwMTIwMDI0WjAzMTEwLwYDVQQD
EyhkMWUyMmE2YTEwNzlmMDFjYmVjMzY4ZjEwOWFhNjhlMTdlMmNjMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSaefj5xo8JCMaRoIopZEPoYHJxs
0KO/oKGgGI9mkzXRshLH08SnJapj3HXBH489cBd/Quxo8XzDnG1j1ypkg7t3mV8B
D+YIG0tJv6bbP1gLpwcnSONks6y9xGNAx/ZhQ0KrK0r1S8N+OsNareWpbAkQMFWo
Si/gHnMpL/elQn8T5YrOPJIVBfAWTUUEq7JsI4Zs1jMoDuPignCX4H485D0vt6j0
MMx5MVchWaSTAXpF08J9pwvDGABrUfvW1+/l/73FMtAcuShh76lYwOncYDTzI8Tk
/zL3KhjrAuKqbstcWkOwNQURf5bnPGrBPV1zsUQN2p92yeTYb/VfhKBQmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNHiKmoQefAcvsNo8QmqaOF+LMBlMB8GA1UdIwQY
MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2
LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx
ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX1a
VtoZ1w/AUQ6Gfvbgvb3a+iMohFfQnxcJltxSmtodGxRkeSdwUo8vDvkSbFEplxCv
gDXgu6USkgbPDrNc/JWMK03kBc3jWE7oAd2ZydPNdGz61UEycvXzFc5FNEPAylzE
QicBtiIl48FOOeYl0rJ8/sNbZZJ76ooFspsXep2n4Cb/SXiibxjPUfvmPBh/6bTw
T3gucpYZxAKbXqycVHyPfdYpqahoNjxIfVmS+AM9PdrukB9vuWfrLwBCyVI7RjXZ
AgzuB6lxFfnnhmJdaIATXkgI6RxHMVyxlaHoeUUmb2vNcsSxwRITIzAR4V9xW7Cm
3bcIfDDNBjjHlFcAjA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:51 2026 by rpki-client