Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: 2PavEHPPVbOUdTSSp0mEnBB9rd+0hHlRoHr7v63Iy4o=
Subject key identifier: 79:F0:4D:02:47:4F:3B:52:37:87:68:EB:CF:58:AA:A1:5D:3D:6D:62
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 019D39AE6E482332B9CE8486D9EED7434E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 13:00:25 +0000
Manifest this update: Sun 29 Mar 2026 13:00:25 +0000
Manifest next update: Mon 30 Mar 2026 13:00:25 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: T8cpuzXIXI+HtqvY3CdKAG+G4YqFgbg5IV6oIIgCTbI=)
2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6e:48:23:32:b9:ce:84:86:d9:ee:d7:43:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Mar 29 13:00:25 2026 GMT
Not After : Mar 30 13:00:25 2026 GMT
Subject: CN=79f04d02474f3b52378768ebcf58aaa15d3d6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:f6:cc:64:17:49:90:3e:a9:0f:18:68:95:
00:73:8a:70:54:b7:fd:08:18:95:d7:98:e7:fa:b7:
3f:ae:8d:89:cf:86:15:6c:3e:da:2b:6d:4c:e5:99:
46:60:53:d1:4b:bc:64:3d:67:bd:46:d4:15:bd:0c:
23:5d:f7:01:04:f9:c9:03:62:d3:ec:a4:c0:38:c0:
76:9f:40:29:b1:1e:bf:f0:be:04:94:b3:9a:70:bb:
a9:c4:dc:93:9d:17:4a:81:4d:75:65:db:ed:b0:e4:
5f:27:b2:75:e3:56:9a:a2:79:e4:66:29:66:65:e0:
7f:76:9f:b8:e9:f7:f5:c2:57:dc:30:85:46:df:c4:
35:ea:66:0d:a5:76:eb:35:75:73:48:6c:1c:5f:d0:
cb:6b:a1:9b:9e:65:e6:70:fc:4e:10:67:90:eb:c7:
3e:a2:a6:28:bb:d4:a0:dd:e6:24:9f:68:27:6c:00:
1f:30:3e:ee:fe:f9:57:08:fc:2a:aa:25:82:aa:39:
2e:50:3c:4e:cc:d5:64:c3:ab:03:32:9b:6e:38:f9:
7c:10:b0:38:75:5a:bc:f8:9e:72:c6:81:3c:d7:10:
17:0b:c0:d5:32:d3:23:87:9c:08:3a:e0:1c:68:be:
a4:02:42:19:54:0a:6f:1d:71:28:84:29:42:b6:29:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:4D:02:47:4F:3B:52:37:87:68:EB:CF:58:AA:A1:5D:3D:6D:62
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:06:e1:e1:54:78:30:ed:28:02:c3:16:06:84:0d:62:4f:d0:
72:03:4b:5f:bc:05:e8:03:23:2d:6d:e9:19:1e:a6:51:e5:06:
5d:e2:df:ce:9d:4b:f2:17:46:4f:de:a4:bc:b6:01:dc:d0:49:
cf:42:9b:ed:a7:33:91:30:01:07:5d:4a:b6:69:fe:f1:ec:67:
bb:8d:6b:8c:f2:2a:21:fe:ca:ed:32:aa:44:64:4b:53:23:2e:
e8:f8:b0:b6:6a:e4:d8:aa:85:e2:24:b5:79:87:ec:0d:d1:03:
c7:47:e0:ea:4e:ac:f2:a5:3a:3b:52:bc:8a:df:be:1e:11:10:
b4:3c:48:fc:25:0a:c2:df:c7:5d:3d:c0:7d:70:f6:7f:10:ae:
b1:0f:49:8b:60:e7:20:e6:c1:ac:91:5d:73:0e:23:23:d3:e9:
91:be:08:e0:02:75:59:b5:f8:33:c0:48:ad:de:4a:b8:dd:1d:
69:66:a1:47:cf:0b:3d:d8:f2:85:61:08:94:92:96:52:6b:66:
47:a6:0b:2c:25:b3:62:c7:cb:a2:72:63:f3:81:7b:99:d0:bc:
25:07:92:de:a3:fc:1c:82:1e:fd:9f:70:c5:0c:d4:28:78:d6:
5f:aa:24:11:c0:1e:bf:d8:98:28:7e:2a:ed:0b:24:99:21:a9:
35:be:ac:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ05rm5IIzK5zoSG2e7XQ06UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTAwNTNiNjhhNDM5OGZkNTJmMDdhZmRkNmFkMzEwOWZk
ZWQ0YjQwHhcNMjYwMzI5MTMwMDI1WhcNMjYwMzMwMTMwMDI1WjAzMTEwLwYDVQQD
Eyg3OWYwNGQwMjQ3NGYzYjUyMzc4NzY4ZWJjZjU4YWFhMTVkM2Q2ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOj2zGQXSZA+qQ8YaJUAc4pwVLf9
CBiV15jn+rc/ro2Jz4YVbD7aK21M5ZlGYFPRS7xkPWe9RtQVvQwjXfcBBPnJA2LT
7KTAOMB2n0ApsR6/8L4ElLOacLupxNyTnRdKgU11ZdvtsORfJ7J141aaonnkZilm
ZeB/dp+46ff1wlfcMIVG38Q16mYNpXbrNXVzSGwcX9DLa6GbnmXmcPxOEGeQ68c+
oqYou9Sg3eYkn2gnbAAfMD7u/vlXCPwqqiWCqjkuUDxOzNVkw6sDMptuOPl8ELA4
dVq8+J5yxoE81xAXC8DVMtMjh5wIOuAcaL6kAkIZVApvHXEohClCtimdZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHnwTQJHTztSN4do689YqqFdPW1iMB8GA1UdIwQY
MBaAFPugBTtopDmP1S8Hr91q0xCf3tS0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02QUZPMmlrT1lfVkx3ZXYzV3JURUpfZTFMUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNzMzMTc0LWVkZDYtNGI0Mi1iMDEx
LTk4MDU4MTAwYTY0OC8xLzEtNkFGTzJpa09ZX1ZMd2V2M1dyVEVKX2UxTFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UxLzczMzE3NC1lZGQ2LTRiNDItYjAxMS05ODA1ODEwMGE2
NDgvMS8xLTZBRk8yaWtPWV9WTHdldjNXclRFSl9lMUxRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgbh
4VR4MO0oAsMWBoQNYk/QcgNLX7wF6AMjLW3pGR6mUeUGXeLfzp1L8hdGT96kvLYB
3NBJz0Kb7aczkTABB11Ktmn+8exnu41rjPIqIf7K7TKqRGRLUyMu6Piwtmrk2KqF
4iS1eYfsDdEDx0fg6k6s8qU6O1K8it++HhEQtDxI/CUKwt/HXT3AfXD2fxCusQ9J
i2DnIObBrJFdcw4jI9Ppkb4I4AJ1WbX4M8BIrd5KuN0daWahR88LPdjyhWEIlJKW
UmtmR6YLLCWzYsfLonJj84F7mdC8JQeS3qP8HIIe/Z9wxQzUKHjWX6okEcAev9iY
KH4q7QskmSGpNb6slQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:58 2026 by rpki-client