Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: wxJG1SzjBmxEVbTuZYev8oTeDjj1eKNUhr2oyrBKXLQ=
Subject key identifier: 7D:CB:46:61:59:DB:ED:FC:6D:6A:6E:C3:D2:D0:B9:90:7F:79:19:ED
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019CAC0FE28270CD2BB4AE68EB5C07857046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 17C5
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: bJp3vX0Uh9GvNNnYTuIBAYU/BUF1cw+qS3NKnBzHwIs=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e2:82:70:cd:2b:b4:ae:68:eb:5c:07:85:70:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=7dcb466159dbedfc6d6a6ec3d2d0b9907f7919ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:8c:70:0a:2c:86:91:a1:51:47:4c:23:10:
a6:8b:c2:f7:f6:e3:48:a8:70:a8:f4:84:cf:b5:d9:
d9:07:fa:2c:ba:c1:54:09:cd:15:7d:c9:a5:84:4c:
c7:be:b3:e5:da:4b:20:2b:dd:21:8e:ea:5d:d8:21:
c8:83:b7:eb:73:86:5e:9f:e5:d5:ea:4c:d2:44:0e:
74:39:73:d2:d2:87:7b:ea:45:15:0d:7e:03:76:a0:
04:2a:75:36:d7:a6:65:49:7a:2d:6b:98:28:20:c5:
d8:ee:7c:2f:17:37:2c:06:70:29:27:ea:cc:a4:c1:
e2:27:e7:29:6e:c7:73:de:b1:25:ac:0a:00:42:66:
2c:d4:5d:96:cb:5d:51:60:c5:be:c1:b0:b1:3d:05:
0d:11:f9:06:d3:d5:87:6e:f2:db:c4:a5:c2:3d:07:
b0:99:51:8a:d2:88:96:b9:3e:a0:a3:c9:e4:5a:b4:
75:83:59:a3:0c:ae:60:b3:45:fa:39:2a:19:9b:d3:
db:f2:ef:5a:e7:54:c6:8e:59:f3:c5:73:7a:ed:63:
23:03:cf:57:f2:25:9a:31:a9:8b:49:f3:57:77:ff:
ab:f9:d7:29:7e:72:94:4d:57:2c:a9:81:e7:19:aa:
3b:75:2e:dd:24:63:b1:ad:96:7b:78:32:fa:fd:96:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:46:61:59:DB:ED:FC:6D:6A:6E:C3:D2:D0:B9:90:7F:79:19:ED
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3f:67:d3:54:86:34:c3:ca:a7:f5:03:14:ec:fa:3d:15:f1:
f2:0a:27:8d:db:e7:cf:ba:c7:f0:83:00:c1:b0:5f:a9:77:57:
c1:67:ba:69:b5:2d:c5:6e:20:fe:88:45:63:bf:f4:9c:f2:71:
76:d8:29:71:d1:d4:dd:0e:ad:3f:be:72:fa:63:62:bd:d5:e3:
8a:a8:2e:aa:ac:b0:a3:6b:51:3b:53:66:ec:a6:36:f2:44:23:
a2:a9:15:20:b1:68:ea:58:fb:cc:2f:15:13:08:86:ed:95:4c:
99:97:b9:d8:7e:7c:df:f8:4d:5c:4f:60:5f:8f:c0:1a:91:88:
86:1a:63:08:26:97:f2:8d:0f:11:3e:5d:75:44:60:1d:b8:88:
a7:e8:47:59:ad:1f:3d:c3:4d:bf:a4:66:c9:82:69:bf:28:b9:
34:08:ee:4e:56:71:8d:b5:40:d6:d1:41:19:fb:ea:38:18:fd:
9d:1d:27:af:87:9d:4f:c8:32:49:34:8b:24:9a:98:cc:8c:00:
4b:57:7d:b4:6d:e7:bf:9f:fe:c9:ea:ec:af:b6:12:60:3d:83:
12:9f:65:da:c2:1b:43:e9:ee:3b:8f:29:a8:ce:77:bb:71:31:
db:55:17:c7:7c:34:7d:02:7d:b2:1f:c9:47:30:98:e0:3a:bd:
8d:bf:e1:13
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysD+KCcM0rtK5o61wHhXBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1
Zjk4MTMwHhcNMjYwMzAyMDEwMDQ4WhcNMjYwMzAzMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZGNiNDY2MTU5ZGJlZGZjNmQ2YTZlYzNkMmQwYjk5MDdmNzkxOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j+McAoshpGhUUdMIxCmi8L39uNI
qHCo9ITPtdnZB/osusFUCc0VfcmlhEzHvrPl2ksgK90hjupd2CHIg7frc4Zen+XV
6kzSRA50OXPS0od76kUVDX4DdqAEKnU216ZlSXota5goIMXY7nwvFzcsBnApJ+rM
pMHiJ+cpbsdz3rElrAoAQmYs1F2Wy11RYMW+wbCxPQUNEfkG09WHbvLbxKXCPQew
mVGK0oiWuT6go8nkWrR1g1mjDK5gs0X6OSoZm9Pb8u9a51TGjlnzxXN67WMjA89X
8iWaMamLSfNXd/+r+dcpfnKUTVcsqYHnGao7dS7dJGOxrZZ7eDL6/ZblgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH3LRmFZ2+38bWpuw9LQuZB/eRntMB8GA1UdIwQY
MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz
LTdlYWQ2MjY0ZTY1NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFiL2JjNGYyMS1hOTc3LTQ3ZTItYmNiMy03ZWFkNjI2NGU2
NTUvMS8xLW1TWkZhUjQ2b2JmOEFBc1ctMllLWUpmbUJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApD9n
01SGNMPKp/UDFOz6PRXx8gonjdvnz7rH8IMAwbBfqXdXwWe6abUtxW4g/ohFY7/0
nPJxdtgpcdHU3Q6tP75y+mNivdXjiqguqqywo2tRO1Nm7KY28kQjoqkVILFo6lj7
zC8VEwiG7ZVMmZe52H583/hNXE9gX4/AGpGIhhpjCCaX8o0PET5ddURgHbiIp+hH
Wa0fPcNNv6RmyYJpvyi5NAjuTlZxjbVA1tFBGfvqOBj9nR0nr4edT8gySTSLJJqY
zIwAS1d9tG3nv5/+yersr7YSYD2DEp9l2sIbQ+nuO48pqM53u3Ex21UXx3w0fQJ9
sh/JRzCY4Dq9jb/hEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:01 2026 by rpki-client