Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: Hmgzas13ixiB8evq0MULSi+j4P/bjfhEjQNTWslRF/U=
Subject key identifier: FC:B2:4A:A8:21:C7:8D:39:8D:20:0C:38:2A:DC:37:2A:C2:72:36:94
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019D37C03AAB5EB408723E142A803EFC0C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: Mj7LHxqwB++UGxCHOjKImFRFosrwyXhCVM3bdlA7s2s=)
2: DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa (hash: ARWpTu4Im5vDVchDP7TKrgojtqolrGKcQ5Qr0gDHopw=)
3: pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa (hash: nmGG8AuPdljBBkNiuco4BAfX85eXAF9UrVPHWokUo4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3a:ab:5e:b4:08:72:3e:14:2a:80:3e:fc:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=fcb24aa821c78d398d200c382adc372ac2723694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:bf:99:d3:b7:df:41:05:ee:95:8d:ab:3d:
00:f4:bf:f8:9e:67:76:39:71:e7:4b:89:8b:3f:ca:
79:ae:47:7c:e5:53:8c:9a:47:38:2b:0f:78:26:54:
d6:1f:64:bc:12:d0:3e:32:f8:dd:71:09:34:31:45:
3c:44:85:24:de:70:13:a9:8e:54:ee:89:d7:ff:c9:
3d:55:41:ec:3f:2f:3b:17:31:0c:b9:88:ba:61:d3:
ea:a1:ea:85:71:9e:3d:77:e0:4c:51:9f:e7:07:16:
e4:6e:1d:07:33:84:ee:c8:3b:d5:e0:db:67:f5:60:
f6:cf:34:77:f4:f6:8c:8d:30:5e:15:4e:96:94:ce:
0e:8f:db:b5:b6:32:c9:c9:cb:99:2e:f7:da:85:8e:
a2:fa:de:6e:0d:b3:d5:51:78:33:05:9f:18:67:70:
88:66:40:8a:43:7d:c2:21:2d:ed:88:1c:88:67:c9:
51:52:95:25:41:09:a2:11:8c:d1:6d:a4:16:32:68:
a9:a8:bc:cb:b1:cc:47:47:5a:78:a6:9b:9e:e3:8c:
ad:bb:32:55:b1:bf:73:33:36:98:3e:b3:a6:69:46:
c2:04:9d:39:ba:5a:ba:93:4a:5c:41:f4:4c:0f:b2:
c8:73:dc:70:69:df:99:24:4a:02:86:d4:e4:a1:c0:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:4A:A8:21:C7:8D:39:8D:20:0C:38:2A:DC:37:2A:C2:72:36:94
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:59:9d:81:03:16:db:24:b7:77:6e:54:d2:10:a7:d6:7a:
94:1f:28:c7:c0:95:72:1e:e2:df:0c:e7:05:33:08:33:af:bd:
6d:ce:f6:98:e6:15:a3:c0:c6:44:d8:b6:8f:e5:4c:f4:fa:65:
3f:1e:1b:14:7a:00:ed:e8:30:f2:1d:63:5a:36:90:8f:13:e5:
e2:62:d3:ef:de:57:d2:f0:50:41:67:90:0e:e4:7d:e7:ed:79:
a5:59:25:ab:5b:93:c7:93:80:ea:8d:ae:b2:74:b2:1c:5c:fd:
05:52:15:b4:d2:d2:29:e4:59:b5:37:6e:96:a5:69:d8:4f:24:
35:06:e3:68:82:24:e8:73:3b:85:9f:ad:d1:5f:bb:61:5d:d1:
75:c1:f2:4e:1d:70:91:f9:41:ef:d9:1d:0d:5d:bd:71:c9:7e:
37:84:ac:cc:eb:83:07:5d:0a:56:51:40:fe:1d:67:82:60:e3:
d1:45:ad:0a:bf:86:7b:bc:07:64:94:c9:49:7c:af:3a:66:57:
8d:f6:23:f0:a5:8f:b2:e0:85:53:99:80:87:c8:d4:dc:1f:64:
ab:ec:73:0d:50:3c:55:30:e2:37:7d:b3:b6:af:25:55:46:93:
76:a5:22:0b:43:e8:80:65:23:18:b1:da:e1:68:59:9a:0d:e5:
3a:2f:fa:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wDqrXrQIcj4UKoA+/Aw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4
YzE4YzcwHhcNMjYwMzI5MDQwMDM3WhcNMjYwMzMwMDQwMDM3WjAzMTEwLwYDVQQD
EyhmY2IyNGFhODIxYzc4ZDM5OGQyMDBjMzgyYWRjMzcyYWMyNzIzNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxa/mdO330EF7pWNqz0A9L/4nmd2
OXHnS4mLP8p5rkd85VOMmkc4Kw94JlTWH2S8EtA+MvjdcQk0MUU8RIUk3nATqY5U
7onX/8k9VUHsPy87FzEMuYi6YdPqoeqFcZ49d+BMUZ/nBxbkbh0HM4TuyDvV4Ntn
9WD2zzR39PaMjTBeFU6WlM4Oj9u1tjLJycuZLvfahY6i+t5uDbPVUXgzBZ8YZ3CI
ZkCKQ33CIS3tiByIZ8lRUpUlQQmiEYzRbaQWMmipqLzLscxHR1p4ppue44ytuzJV
sb9zMzaYPrOmaUbCBJ05ulq6k0pcQfRMD7LIc9xwad+ZJEoChtTkocBy3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyySqghx405jSAMOCrcNyrCcjaUMB8GA1UdIwQY
MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt
M2ZlMTc0ODFmNjA4LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4
LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAVZnYED
Ftskt3duVNIQp9Z6lB8ox8CVch7i3wznBTMIM6+9bc72mOYVo8DGRNi2j+VM9Ppl
Px4bFHoA7egw8h1jWjaQjxPl4mLT795X0vBQQWeQDuR95+15pVklq1uTx5OA6o2u
snSyHFz9BVIVtNLSKeRZtTdulqVp2E8kNQbjaIIk6HM7hZ+t0V+7YV3RdcHyTh1w
kflB79kdDV29ccl+N4SszOuDB10KVlFA/h1ngmDj0UWtCr+Ge7wHZJTJSXyvOmZX
jfYj8KWPsuCFU5mAh8jU3B9kq+xzDVA8VTDiN32ztq8lVUaTdqUiC0PogGUjGLHa
4WhZmg3lOi/6lA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:12 2026 by rpki-client