Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: XQQb0us/Mme18/miYuMu6sAXGxvdWU6qRfCD3+OnnEo=
Subject key identifier: 5A:1D:8C:BC:67:14:B0:0F:8E:DA:8E:72:1F:33:B2:A2:73:0F:10:27
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019D3909C6E6B6B6786EF7F106C8605D0E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0816
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: Dr6PCRwO12/rIaj6FHFZu5u4xDpgLUoEO6R+nX5CVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c6:e6:b6:b6:78:6e:f7:f1:06:c8:60:5d:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=5a1d8cbc6714b00f8eda8e721f33b2a2730f1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:a1:85:04:a8:21:77:8b:0a:df:06:75:d9:
d1:8e:ae:62:82:9b:59:ca:96:3f:a4:41:7e:6c:42:
3f:48:a9:df:15:1f:7d:46:59:d3:ce:6f:83:b8:a8:
0d:54:fc:7b:37:77:6c:51:bb:34:ed:4c:f3:8a:d1:
8b:29:e5:e0:00:50:d7:42:b8:e9:3d:24:41:43:17:
11:57:fa:16:be:4b:25:4c:f0:e3:ea:c3:10:ae:a0:
96:f6:66:b9:d5:13:a0:38:fc:87:2b:fa:40:40:5d:
2c:12:ce:41:36:5d:ab:c2:33:27:bb:ab:92:00:6a:
d8:8d:c2:b7:d0:35:41:84:e8:1b:db:79:fb:08:b5:
93:a6:96:b7:f8:71:88:7f:fa:a1:30:dc:71:51:b8:
c4:63:fc:4e:4f:55:ff:63:34:e7:9c:bb:81:47:e4:
e0:58:3b:89:16:68:90:ae:53:40:18:1f:f5:92:50:
f9:b2:9f:79:06:09:20:ef:0e:9f:92:9e:a8:ff:14:
e0:2e:1d:59:e2:74:e9:03:c8:b3:d3:a1:a8:ef:06:
ea:e5:c4:42:ec:bf:9c:7b:f8:e0:7e:fc:c0:81:ef:
e4:69:5c:4a:e7:b7:6f:24:4d:0d:ca:4e:5a:08:31:
48:87:26:4c:16:de:3d:1b:53:39:59:c5:02:5a:e6:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:8C:BC:67:14:B0:0F:8E:DA:8E:72:1F:33:B2:A2:73:0F:10:27
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:cd:ee:87:47:c9:fb:b5:f6:fc:ed:d0:cd:f6:e1:cf:1d:
57:51:02:dd:11:d8:89:a8:6b:d5:f3:e0:f2:83:20:f0:84:e2:
f8:b6:33:24:6d:1b:5c:48:23:06:0e:72:68:10:9f:df:1f:de:
30:26:8d:41:be:5d:e2:a8:9c:0a:98:8d:af:58:86:54:22:5e:
b0:45:2c:cf:93:7b:2a:ad:cd:1a:1c:11:b8:56:45:59:ec:18:
dd:9c:51:2f:71:23:17:0a:dc:b9:dc:d7:6a:84:cc:50:2d:3d:
25:d4:b1:31:eb:1c:06:c5:e1:5a:27:3a:29:59:f8:e5:e8:b6:
dd:cf:fb:dc:5f:5f:02:82:3e:c5:ab:1e:c6:4a:11:df:57:a2:
fd:4e:a4:4f:65:f5:c8:72:2c:83:a4:5a:04:7b:f8:c5:bf:75:
02:ac:b8:81:71:49:33:eb:d3:87:fc:25:fd:7d:25:6d:a9:22:
ed:f1:6f:a9:b9:07:7a:fe:19:09:48:b9:08:7d:19:77:91:e9:
a9:11:60:23:b4:37:e8:1b:17:f6:05:01:08:a9:ea:26:c0:39:
e3:a1:1e:65:67:9f:c7:3c:e9:c0:d3:11:06:b6:89:b6:e8:d2:
e9:4c:02:86:60:b6:08:71:52:1f:0e:2e:ab:54:0d:8a:58:6c:
b3:d9:21:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CcbmtrZ4bvfxBshgXQ4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm
ODNjNTcwHhcNMjYwMzI5MTAwMDM1WhcNMjYwMzMwMTAwMDM1WjAzMTEwLwYDVQQD
Eyg1YTFkOGNiYzY3MTRiMDBmOGVkYThlNzIxZjMzYjJhMjczMGYxMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWhhQSoIXeLCt8GddnRjq5igptZ
ypY/pEF+bEI/SKnfFR99RlnTzm+DuKgNVPx7N3dsUbs07UzzitGLKeXgAFDXQrjp
PSRBQxcRV/oWvkslTPDj6sMQrqCW9ma51ROgOPyHK/pAQF0sEs5BNl2rwjMnu6uS
AGrYjcK30DVBhOgb23n7CLWTppa3+HGIf/qhMNxxUbjEY/xOT1X/YzTnnLuBR+Tg
WDuJFmiQrlNAGB/1klD5sp95Bgkg7w6fkp6o/xTgLh1Z4nTpA8iz06Go7wbq5cRC
7L+ce/jgfvzAge/kaVxK57dvJE0Nyk5aCDFIhyZMFt49G1M5WcUCWuZiEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFodjLxnFLAPjtqOch8zsqJzDxAnMB8GA1UdIwQY
MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt
MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi
LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+/N7odH
yfu19vzt0M324c8dV1EC3RHYiahr1fPg8oMg8ITi+LYzJG0bXEgjBg5yaBCf3x/e
MCaNQb5d4qicCpiNr1iGVCJesEUsz5N7Kq3NGhwRuFZFWewY3ZxRL3EjFwrcudzX
aoTMUC09JdSxMescBsXhWic6KVn45ei23c/73F9fAoI+xasexkoR31ei/U6kT2X1
yHIsg6RaBHv4xb91Aqy4gXFJM+vTh/wl/X0lbaki7fFvqbkHev4ZCUi5CH0Zd5Hp
qRFgI7Q36BsX9gUBCKnqJsA546EeZWefxzzpwNMRBraJtujS6UwChmC2CHFSHw4u
q1QNilhss9khGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:53 2026 by rpki-client