Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: R8fl/hRohXWisewI/Q7RDzF4dH3QnBJPgRjEH/tefRo=
Subject key identifier: DC:BE:C0:8B:82:23:2A:1C:82:EF:A7:1E:60:1B:5E:E5:A0:8E:E7:61
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019D389C097981F2279C7E2788D7814E8519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 0529
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: /FkN7rWtvf8CaLkUHw8DyT9QUXC8WMGfbOxlPZ57LWE=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:09:79:81:f2:27:9c:7e:27:88:d7:81:4e:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=dcbec08b82232a1c82efa71e601b5ee5a08ee761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:20:ca:bd:9a:ed:e0:fe:ad:02:26:23:e1:
9b:ab:b1:cf:a1:16:c3:a1:49:be:0a:b7:22:e5:ca:
cb:a9:77:fd:35:47:14:a1:59:41:d3:e5:96:b4:89:
dd:84:70:14:01:4d:43:ee:b5:c8:1d:a7:1f:5f:d1:
b6:db:be:58:86:6c:46:25:04:52:87:99:0c:73:03:
7c:06:ba:9f:80:28:f7:1c:a1:d6:f1:87:a8:bd:3c:
f6:ce:06:2b:89:e9:f0:1d:24:cf:bc:a9:70:c5:41:
76:20:b3:35:af:37:53:9f:4c:e8:b6:3f:d1:b7:65:
5f:11:b2:26:90:4a:6b:f5:97:df:15:0d:bf:38:d3:
87:6b:3c:9f:10:e8:32:f0:97:03:67:05:6e:6b:7c:
44:ef:b8:67:42:19:c4:64:84:1e:8d:cd:cf:46:69:
d3:7c:41:c3:14:8f:63:1e:68:a5:81:fc:0e:0d:31:
ed:20:01:ca:ed:14:d2:d0:ff:b9:69:ae:40:db:bc:
ec:80:ce:a8:3d:0d:3a:c8:6b:8c:32:cd:63:d0:c2:
e6:e0:9c:f0:25:f8:5b:14:bf:29:ce:58:9d:0a:b4:
06:b7:e5:2b:c4:21:06:08:54:2a:2d:de:4f:5f:98:
b9:67:99:aa:f0:37:fd:86:44:e0:06:a3:1e:7d:3f:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:C0:8B:82:23:2A:1C:82:EF:A7:1E:60:1B:5E:E5:A0:8E:E7:61
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:23:b9:de:54:5d:5e:81:a8:38:2a:8f:c8:80:97:ae:f7:1e:
e1:b3:ca:80:2a:71:09:82:a7:e8:87:3e:2e:10:e7:28:1e:8b:
74:33:c4:08:d0:7c:ea:9f:a8:c1:68:b6:7a:86:fe:7d:ef:cd:
0b:dc:22:49:7c:12:06:7f:c8:49:a3:9d:01:fb:84:05:14:98:
b7:27:98:68:09:bf:3e:2d:35:b1:72:46:35:1c:1f:a1:72:a4:
a2:e2:a7:09:54:5f:ea:7d:32:08:d5:82:64:03:c0:d7:90:25:
03:77:65:b7:67:fc:d4:5b:b2:d9:ca:3e:59:f0:1e:d0:54:6a:
11:31:97:cb:cb:13:a8:18:61:4f:fa:1f:f8:dd:6a:2f:c3:1d:
f3:c0:ee:a9:11:06:e6:b5:9d:bb:75:12:80:ae:1d:f2:5f:21:
c4:14:2f:99:0e:45:b6:e8:6e:e0:e2:d7:2b:94:71:bf:96:01:
2d:c5:0c:a5:e5:a8:4c:8e:e3:e1:36:7a:bf:19:9e:5c:56:11:
1e:88:5e:bb:5b:90:c1:14:b9:bd:09:4f:4f:8d:92:b0:5e:78:
c7:53:74:af:e2:1f:2b:e9:8a:d0:de:e7:4e:79:7c:a8:60:26:
b6:2e:db:41:02:4d:3d:9b:77:60:7f:53:c4:08:22:dc:fb:ea:
e1:e9:80:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAl5gfInnH4niNeBToUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MWIwODFjMGRmOTk0MGEyYjAyMGE0ZWJlOGE5NzQ5Y2Jm
ZWFkNTUwHhcNMjYwMzI5MDgwMDQzWhcNMjYwMzMwMDgwMDQzWjAzMTEwLwYDVQQD
EyhkY2JlYzA4YjgyMjMyYTFjODJlZmE3MWU2MDFiNWVlNWEwOGVlNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynkgyr2a7eD+rQImI+Gbq7HPoRbD
oUm+Crci5crLqXf9NUcUoVlB0+WWtIndhHAUAU1D7rXIHacfX9G2275YhmxGJQRS
h5kMcwN8BrqfgCj3HKHW8YeovTz2zgYrienwHSTPvKlwxUF2ILM1rzdTn0zotj/R
t2VfEbImkEpr9ZffFQ2/ONOHazyfEOgy8JcDZwVua3xE77hnQhnEZIQejc3PRmnT
fEHDFI9jHmilgfwODTHtIAHK7RTS0P+5aa5A27zsgM6oPQ06yGuMMs1j0MLm4Jzw
JfhbFL8pzlidCrQGt+UrxCEGCFQqLd5PX5i5Z5mq8Df9hkTgBqMefT/jRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNy+wIuCIyocgu+nHmAbXuWgjudhMB8GA1UdIwQY
MBaAFNQbCBwN+ZQKKwIKTr6Kl0nL/q1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTkt
NWNlYjM0NTY0ZjA5LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNzg3YTItZDI4Yy00MzZkLTg1ZTktNWNlYjM0NTY0ZjA5
LzEvMUJzSUhBMzVsQW9yQWdwT3ZvcVhTY3YtclZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSO53lRd
XoGoOCqPyICXrvce4bPKgCpxCYKn6Ic+LhDnKB6LdDPECNB86p+owWi2eob+fe/N
C9wiSXwSBn/ISaOdAfuEBRSYtyeYaAm/Pi01sXJGNRwfoXKkouKnCVRf6n0yCNWC
ZAPA15AlA3dlt2f81Fuy2co+WfAe0FRqETGXy8sTqBhhT/of+N1qL8Md88DuqREG
5rWdu3USgK4d8l8hxBQvmQ5Ftuhu4OLXK5Rxv5YBLcUMpeWoTI7j4TZ6vxmeXFYR
Hoheu1uQwRS5vQlPT42SsF54x1N0r+IfK+mK0N7nTnl8qGAmti7bQQJNPZt3YH9T
xAgi3Pvq4emAqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:39 2026 by rpki-client