Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: bJB8qbYJbd2F2n2DPm/W/KNoJz1V+HSUDfBzkq5n9yQ=
Subject key identifier: 26:8D:FF:BE:85:30:20:29:69:F6:AD:E2:56:D2:58:69:6C:7B:52:FD
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019CAB34369285B43B37DB204DBAC1F9F35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1266
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: J4LnSR2xod8m8DegUcAEFBEz8XjFak5Vg2ioKoNzvHA=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:36:92:85:b4:3b:37:db:20:4d:ba:c1:f9:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=268dffbe8530202969f6ade256d258696c7b52fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:95:9d:60:17:a9:f7:79:4b:d2:58:e4:f5:
f7:80:a8:09:24:65:76:f8:73:50:c1:bf:49:d9:c6:
d9:dc:2a:d1:aa:6d:d8:5d:2e:0f:d0:4b:ff:54:02:
15:3f:4a:ba:75:01:35:a5:cf:f2:b5:90:df:a6:41:
43:82:f6:9e:11:9b:ac:1f:c9:8a:97:4f:d6:62:82:
bd:48:d3:48:e5:b2:ba:48:1d:c2:ac:f8:b9:20:09:
a7:2e:94:3b:13:36:c2:5c:2d:51:89:8e:51:73:a3:
8c:c6:df:6f:69:68:0a:9e:de:e0:01:98:df:75:39:
4e:78:ff:a2:b0:57:32:5a:e7:f9:d2:1d:84:a7:3a:
f5:dd:bd:6e:20:00:2e:4a:cc:97:54:c6:23:d5:18:
38:e2:45:5a:41:39:17:75:04:55:a9:06:38:c8:a7:
30:df:61:8f:63:3f:e0:18:3f:82:52:0c:44:d2:c6:
5c:72:59:42:a9:b5:ac:91:f2:d5:9f:7a:42:63:4b:
8c:43:04:32:86:5c:5c:e0:19:93:f7:cf:ca:55:30:
a5:9a:53:1a:9c:d6:f0:e9:93:38:a4:bf:81:f1:30:
4a:41:90:91:f7:e6:66:9b:be:14:c2:15:74:91:7e:
f2:9e:28:a9:03:03:ec:76:5b:59:fd:e3:56:11:2f:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:FF:BE:85:30:20:29:69:F6:AD:E2:56:D2:58:69:6C:7B:52:FD
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:58:67:f5:94:a1:e1:dc:a0:73:8d:ef:1e:e1:bc:df:c5:ce:
83:0b:fe:79:7d:e6:09:52:a1:fb:e9:8a:6e:45:38:a5:e4:40:
da:e3:d3:04:06:e6:bd:40:f3:c2:22:48:ff:b8:8f:28:56:70:
ec:f8:f7:af:eb:5e:15:f3:1a:7d:f8:4d:5c:bb:13:a6:54:7d:
16:a7:70:73:fd:3d:c2:ef:2b:1f:f7:04:75:0b:fe:56:51:f1:
1d:54:87:7b:2b:df:dc:33:b2:77:7d:e2:5e:0d:fc:49:38:76:
92:b6:b0:f5:3d:43:e0:14:db:7a:5a:4e:07:9b:8f:42:ce:77:
d5:25:30:3d:35:3a:d2:37:ef:41:a6:59:2a:9a:8a:61:c3:0a:
54:c0:7e:fb:94:f7:8a:b4:03:7a:95:cd:48:a5:68:1a:0a:2d:
29:40:15:bb:cf:ee:6e:80:d9:a4:58:6f:46:45:3a:0a:47:38:
6d:92:3f:3e:e6:02:bf:94:58:5c:ab:e0:3c:70:30:11:d3:c1:
5f:4e:36:5e:e5:6b:09:78:73:a9:ff:8a:01:13:2c:2a:fc:2a:
66:4b:3e:cc:4f:c3:d5:79:96:9c:55:67:35:ae:49:3b:70:af:
c8:b4:7e:34:7f:55:0d:de:f0:32:52:77:4b:18:62:9f:20:84:
90:e6:67:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNDaShbQ7N9sgTbrB+fNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjYwMzAxMjEwMDUxWhcNMjYwMzAyMjEwMDUxWjAzMTEwLwYDVQQD
EygyNjhkZmZiZTg1MzAyMDI5NjlmNmFkZTI1NmQyNTg2OTZjN2I1MmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllCVnWAXqfd5S9JY5PX3gKgJJGV2
+HNQwb9J2cbZ3CrRqm3YXS4P0Ev/VAIVP0q6dQE1pc/ytZDfpkFDgvaeEZusH8mK
l0/WYoK9SNNI5bK6SB3CrPi5IAmnLpQ7EzbCXC1RiY5Rc6OMxt9vaWgKnt7gAZjf
dTlOeP+isFcyWuf50h2Epzr13b1uIAAuSsyXVMYj1Rg44kVaQTkXdQRVqQY4yKcw
32GPYz/gGD+CUgxE0sZccllCqbWskfLVn3pCY0uMQwQyhlxc4BmT98/KVTClmlMa
nNbw6ZM4pL+B8TBKQZCR9+Zmm74UwhV0kX7yniipAwPsdltZ/eNWES9WWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaN/76FMCApafat4lbSWGlse1L9MB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1hn9ZSh
4dygc43vHuG838XOgwv+eX3mCVKh++mKbkU4peRA2uPTBAbmvUDzwiJI/7iPKFZw
7Pj3r+teFfMaffhNXLsTplR9Fqdwc/09wu8rH/cEdQv+VlHxHVSHeyvf3DOyd33i
Xg38STh2kraw9T1D4BTbelpOB5uPQs531SUwPTU60jfvQaZZKpqKYcMKVMB++5T3
irQDepXNSKVoGgotKUAVu8/uboDZpFhvRkU6Ckc4bZI/PuYCv5RYXKvgPHAwEdPB
X042XuVrCXhzqf+KARMsKvwqZks+zE/D1XmWnFVnNa5JO3CvyLR+NH9VDd7wMlJ3
SxhinyCEkOZnYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:24 2026 by rpki-client