Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: sQMzhK05GKCqpA+ngNvjJoE6wR7YRXeW7DiENXwYevk=
Subject key identifier: 43:40:92:E7:47:0E:51:CB:4F:10:D3:D8:75:C2:59:DD:3B:9F:54:0F
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019D382E482E2C99BBF91469743A2740BA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 108A
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: UoRKZ2kHnmnU1mwMkZK0sLeT9wZOLKsgegzIYkICQYM=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:48:2e:2c:99:bb:f9:14:69:74:3a:27:40:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=434092e7470e51cb4f10d3d875c259dd3b9f540f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:4b:c8:6c:d5:45:7d:57:ff:93:a0:3d:44:
0d:c3:39:4d:4f:6c:57:98:45:18:ed:4b:3f:26:f0:
04:6c:f5:2e:1f:bd:a6:66:92:88:c0:82:18:d4:ad:
2c:5d:09:f5:e8:48:52:88:47:9c:2c:03:94:11:98:
5c:54:78:28:ef:5e:e0:de:87:5a:1b:17:e7:0e:0d:
97:89:c0:ae:8b:c7:3d:7d:94:a6:19:99:be:34:26:
53:83:3a:cc:36:16:0b:cb:98:e3:d6:9c:4f:5e:f0:
47:9c:6a:30:6e:e3:80:7a:09:3f:1d:ca:2c:42:71:
ce:52:e8:f2:4e:56:46:5a:19:f4:3c:0b:97:84:01:
23:bb:d0:3a:fa:94:c8:50:bd:6b:2d:83:ec:f9:3c:
ab:bd:ba:3d:72:8f:8c:19:12:4d:74:14:7a:02:55:
e5:b1:59:f8:04:98:a4:28:c3:23:75:15:da:73:b5:
9d:84:f2:7d:0e:a0:4b:31:81:da:f9:a9:6b:3d:e0:
d4:c9:72:30:fa:a5:3c:3c:58:bf:57:4a:4c:65:ab:
70:73:f1:4f:8e:24:71:30:3a:af:30:e0:96:54:a3:
38:c4:02:7f:57:d4:40:e3:c1:9e:79:b2:65:49:83:
db:c5:9f:87:fe:17:78:c0:40:4a:b6:c1:13:96:8a:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:92:E7:47:0E:51:CB:4F:10:D3:D8:75:C2:59:DD:3B:9F:54:0F
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:05:f2:59:05:67:8a:f3:51:8f:ca:fc:1e:b0:88:60:7c:
a2:4f:6c:71:26:45:2c:a8:cf:e0:57:ed:58:9a:16:9d:e7:9c:
1c:96:ee:e9:5a:61:60:44:9a:f0:cc:52:8c:70:aa:9c:79:0c:
66:4a:a8:ad:ad:b3:70:eb:24:64:5c:e9:00:76:43:7a:50:36:
a7:9b:f2:5e:dc:1d:12:f4:e6:d0:69:a0:30:a7:5d:fb:45:44:
d4:e5:fd:9a:85:72:7b:90:91:d8:d9:6b:d0:ad:4f:0f:39:fd:
0e:9b:dd:22:48:e2:37:b5:04:c5:14:cd:e2:0e:0c:f9:0e:b5:
c5:be:36:b2:df:6e:69:1f:29:e7:d7:af:57:fd:12:42:b3:29:
ed:2d:a9:58:75:1d:aa:2c:d9:02:03:8d:24:5c:0a:14:c6:47:
2f:21:18:1c:57:8d:23:18:ac:ed:b0:7d:ec:c1:8b:75:20:54:
87:b9:75:2c:f2:96:c2:ed:0a:bb:d9:db:e0:62:d9:22:61:8b:
42:b8:4a:77:50:43:40:73:6f:b1:49:6e:b5:bc:26:04:b1:82:
4e:70:9b:8c:4e:11:ba:c1:81:48:30:16:ae:b2:c4:b9:d8:fd:
fd:6d:26:42:69:ad:50:99:1b:f8:fa:5b:d6:bb:a0:a1:36:94:
70:44:64:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkguLJm7+RRpdDonQLpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm
OWQ3NTEwHhcNMjYwMzI5MDYwMDUwWhcNMjYwMzMwMDYwMDUwWjAzMTEwLwYDVQQD
Eyg0MzQwOTJlNzQ3MGU1MWNiNGYxMGQzZDg3NWMyNTlkZDNiOWY1NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBLyGzVRX1X/5OgPUQNwzlNT2xX
mEUY7Us/JvAEbPUuH72mZpKIwIIY1K0sXQn16EhSiEecLAOUEZhcVHgo717g3oda
GxfnDg2XicCui8c9fZSmGZm+NCZTgzrMNhYLy5jj1pxPXvBHnGowbuOAegk/Hcos
QnHOUujyTlZGWhn0PAuXhAEju9A6+pTIUL1rLYPs+Tyrvbo9co+MGRJNdBR6AlXl
sVn4BJikKMMjdRXac7WdhPJ9DqBLMYHa+alrPeDUyXIw+qU8PFi/V0pMZatwc/FP
jiRxMDqvMOCWVKM4xAJ/V9RA48GeebJlSYPbxZ+H/hd4wEBKtsETlopfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENAkudHDlHLTxDT2HXCWd07n1QPMB8GA1UdIwQY
MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt
Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl
LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAgF8lkF
Z4rzUY/K/B6wiGB8ok9scSZFLKjP4FftWJoWneecHJbu6VphYESa8MxSjHCqnHkM
Zkqora2zcOskZFzpAHZDelA2p5vyXtwdEvTm0GmgMKdd+0VE1OX9moVye5CR2Nlr
0K1PDzn9DpvdIkjiN7UExRTN4g4M+Q61xb42st9uaR8p59evV/0SQrMp7S2pWHUd
qizZAgONJFwKFMZHLyEYHFeNIxis7bB97MGLdSBUh7l1LPKWwu0Ku9nb4GLZImGL
QrhKd1BDQHNvsUlutbwmBLGCTnCbjE4RusGBSDAWrrLEudj9/W0mQmmtUJkb+Ppb
1rugoTaUcERkyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:10 2026 by rpki-client