Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: bWeb8QEeoDM2rig0JiNUN4t5YxkIzQVytgqWqdUpNc8=
Subject key identifier: EE:39:E4:42:C9:89:F0:C1:B9:3F:33:92:6A:7D:60:7C:87:B9:0F:8C
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019CAB343BD4BCB2BA66106EE3B1885DE8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1584
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: rosaDiy/xZ9KpnblPky/cJ93arQ8WAeBcJMNTUnNkW8=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:d4:bc:b2:ba:66:10:6e:e3:b1:88:5d:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=ee39e442c989f0c1b93f33926a7d607c87b90f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:aa:1f:34:c1:f0:39:df:ad:42:e9:58:5d:
74:96:05:7a:c5:e9:4a:12:9d:92:d6:86:1d:38:33:
a2:72:6a:8b:ce:48:d3:46:f2:cb:dd:8c:56:76:28:
42:e1:b7:55:af:ef:cf:f8:52:26:f1:f0:26:bf:e5:
11:82:5c:97:f3:4c:26:08:0e:0c:a2:2c:2e:06:5c:
19:b4:fb:30:01:33:98:99:d6:f6:a4:ac:78:1e:42:
09:c7:7b:d8:e5:12:f4:72:c1:a3:c4:d2:3e:eb:25:
6a:7e:e9:95:29:38:f1:06:cf:07:cb:ea:60:82:ac:
d7:bb:59:56:be:cf:a6:a6:df:ab:51:07:f9:b6:38:
50:99:c7:3c:d0:83:ee:99:dc:49:14:f4:97:e6:55:
34:2b:30:ab:8b:8e:b3:c2:94:3f:66:84:5c:85:06:
c8:ce:48:c0:ac:9b:b4:c7:cb:6f:ce:41:0f:3b:b8:
a4:81:be:c3:3a:e9:b8:27:31:a3:62:10:b0:7d:f7:
09:3c:bc:35:2f:33:56:bc:3c:1a:c3:da:ff:c4:71:
ca:61:ba:80:36:8d:ba:b9:8f:11:61:2f:c1:2d:79:
f0:fd:ae:41:78:88:10:30:2e:d7:e8:03:54:48:50:
27:16:87:07:bf:c2:04:e4:d7:79:10:6a:12:3a:0f:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:E4:42:C9:89:F0:C1:B9:3F:33:92:6A:7D:60:7C:87:B9:0F:8C
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:72:b7:35:6e:cb:43:ae:82:6a:a5:59:6c:45:ed:03:79:
2a:78:fb:54:6d:25:1c:75:13:01:cd:ef:a1:fa:68:51:fd:96:
88:9b:1a:9f:be:10:3f:e3:ff:b3:d2:7f:55:5c:62:de:26:52:
73:a1:a0:40:87:eb:22:05:51:9b:71:dd:66:ee:00:84:76:81:
ae:da:21:b2:7c:80:46:7c:11:19:52:22:f2:e8:11:e2:91:25:
05:ac:19:18:2c:57:95:44:0d:cd:5e:31:59:32:7a:ca:50:cd:
95:83:8b:2e:cd:c1:38:63:92:4d:2e:fc:86:73:2a:81:a9:07:
f2:4b:3a:f5:f2:0a:95:42:22:df:c2:30:4c:39:d9:11:0e:4c:
0b:09:d0:cc:01:aa:24:db:a2:a2:d7:88:9b:f3:aa:62:f8:7d:
d6:c4:e1:d0:9d:93:cd:5c:53:ac:26:8d:97:9f:11:ad:b3:02:
b0:12:ae:b4:21:b5:c7:aa:24:2f:f4:8f:fa:1c:49:9a:fb:65:
44:bb:11:80:1f:1f:ff:e1:98:f4:15:a7:53:a3:10:b8:a8:15:
e7:be:71:ad:85:df:28:3a:38:c5:6c:7a:a8:6e:e6:6a:6a:77:
37:48:52:7b:a2:39:2c:a3:84:15:4a:98:27:b0:04:ba:0a:21:
d7:61:61:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDvUvLK6ZhBu47GIXei2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZWFiYTUzZDZkZmJhYjRlOTc2MTIwYzFlMjAyNjhiYmZl
OGEwZTAwHhcNMjYwMzAxMjEwMDUyWhcNMjYwMzAyMjEwMDUyWjAzMTEwLwYDVQQD
EyhlZTM5ZTQ0MmM5ODlmMGMxYjkzZjMzOTI2YTdkNjA3Yzg3YjkwZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV+qHzTB8DnfrULpWF10lgV6xelK
Ep2S1oYdODOicmqLzkjTRvLL3YxWdihC4bdVr+/P+FIm8fAmv+URglyX80wmCA4M
oiwuBlwZtPswATOYmdb2pKx4HkIJx3vY5RL0csGjxNI+6yVqfumVKTjxBs8Hy+pg
gqzXu1lWvs+mpt+rUQf5tjhQmcc80IPumdxJFPSX5lU0KzCri46zwpQ/ZoRchQbI
zkjArJu0x8tvzkEPO7ikgb7DOum4JzGjYhCwffcJPLw1LzNWvDwaw9r/xHHKYbqA
No26uY8RYS/BLXnw/a5BeIgQMC7X6ANUSFAnFocHv8IE5Nd5EGoSOg/wSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO455ELJifDBuT8zkmp9YHyHuQ+MMB8GA1UdIwQY
MBaAFNfqulPW37q06XYSDB4gJou/6KDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQt
MmFlNzkzZGE0NzcwLzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQtMmFlNzkzZGE0Nzcw
LzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaZytzVu
y0OugmqlWWxF7QN5Knj7VG0lHHUTAc3vofpoUf2WiJsan74QP+P/s9J/VVxi3iZS
c6GgQIfrIgVRm3HdZu4AhHaBrtohsnyARnwRGVIi8ugR4pElBawZGCxXlUQNzV4x
WTJ6ylDNlYOLLs3BOGOSTS78hnMqgakH8ks69fIKlUIi38IwTDnZEQ5MCwnQzAGq
JNuioteIm/OqYvh91sTh0J2TzVxTrCaNl58RrbMCsBKutCG1x6okL/SP+hxJmvtl
RLsRgB8f/+GY9BWnU6MQuKgV575xrYXfKDo4xWx6qG7mamp3N0hSe6I5LKOEFUqY
J7AEugoh12FhgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:26 2026 by rpki-client