Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: 8gDygjgqKZvxh9pPsEoMWkfxyeUaPrcyG/jude5IZeo=
Subject key identifier: 31:65:22:BF:47:9A:4B:F8:23:B9:B6:55:E6:ED:D5:F7:FF:D5:F9:52
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019D999921FFC4B0271EFA4483055BE99F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1840
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: qZ/hacilCcYDqqVwEBfOHUY0yg9q9+va9HDjmv9ZuoE=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:21:ff:c4:b0:27:1e:fa:44:83:05:5b:e9:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=316522bf479a4bf823b9b655e6edd5f7ffd5f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:5a:40:98:9e:ad:7f:cd:8a:70:fa:8d:fe:
93:42:58:51:51:a2:fd:d5:0f:77:49:25:a5:14:bb:
58:ad:a3:5a:20:89:f5:41:1d:bb:f8:f1:cb:00:c0:
47:04:fb:b1:52:51:37:4e:07:75:de:a6:7b:19:08:
20:20:71:af:c9:ad:25:97:1b:3f:47:3e:11:6e:b8:
1d:91:f8:d4:bb:45:00:ec:9b:33:28:b4:ab:97:36:
a5:f5:38:30:7f:ac:01:fd:8d:55:13:1c:27:93:79:
72:43:da:c1:41:71:9c:bf:15:e5:16:09:55:89:77:
51:ed:9e:0c:c8:c9:7b:33:87:ed:16:90:fa:bb:02:
ea:af:5a:f4:b2:4f:3f:52:48:23:31:f9:69:dd:19:
1c:cc:ce:88:c3:8e:b1:5d:4e:dc:dc:4e:86:1a:b6:
0a:85:5a:88:56:e3:1b:8f:d0:3d:20:8c:7f:0b:18:
9e:bd:5d:4c:57:33:04:1e:09:a6:ca:a1:95:e1:a2:
0c:c7:24:4b:99:28:38:31:4b:13:fc:58:e7:f3:73:
31:ea:82:92:95:41:1a:3c:39:f4:32:94:01:1e:d5:
3b:6c:ff:09:e5:4c:4b:10:ba:a0:fd:e2:4c:ff:7b:
ff:25:60:f7:3e:e1:1a:c6:5f:b0:04:ae:66:3e:59:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:22:BF:47:9A:4B:F8:23:B9:B6:55:E6:ED:D5:F7:FF:D5:F9:52
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3b:bf:9a:6b:d3:cb:d3:a2:87:b6:17:23:89:86:c0:e2:29:
f5:61:e2:55:65:47:1f:4a:01:ec:2c:8a:1d:05:16:56:ec:0b:
e8:80:b7:bf:79:aa:ec:9a:61:05:48:55:83:63:e3:0b:52:c6:
b8:98:a0:96:a4:1d:b7:d6:2b:af:85:30:f5:37:30:bd:1e:38:
4b:62:7f:3a:70:24:56:12:5f:fa:eb:1f:52:6d:3a:6a:09:5d:
c0:fd:3d:08:31:ec:fb:58:1a:dd:62:79:03:5f:0d:c3:7d:5c:
8d:ea:bf:82:41:f7:33:97:2e:2f:3a:1a:42:0f:32:76:d8:17:
d7:49:0d:b5:23:61:e5:01:83:d8:db:69:fc:d9:e6:d2:ba:e2:
d7:47:ef:26:cc:7c:fb:01:c6:8c:24:91:1c:89:7e:61:de:77:
fd:62:33:2e:31:c7:68:a3:63:e1:eb:71:21:71:50:e3:9f:30:
6f:36:21:60:bc:c2:c0:8a:ae:1e:01:61:fe:e4:be:62:ca:94:
57:66:7e:3d:4b:bf:2d:46:8f:60:d5:11:a5:d9:67:76:ed:5a:
f3:f3:86:c4:84:81:ea:be:a9:a5:97:87:e0:48:61:f9:0b:51:
93:16:b7:2f:9c:2a:8b:0b:b4:71:ef:3a:08:85:de:83:59:04:
9b:6d:b8:ad
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2ZmSH/xLAnHvpEgwVb6Z9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1
Zjk4MTMwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
EygzMTY1MjJiZjQ3OWE0YmY4MjNiOWI2NTVlNmVkZDVmN2ZmZDVmOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ZaQJierX/NinD6jf6TQlhRUaL9
1Q93SSWlFLtYraNaIIn1QR27+PHLAMBHBPuxUlE3Tgd13qZ7GQggIHGvya0llxs/
Rz4RbrgdkfjUu0UA7JszKLSrlzal9Tgwf6wB/Y1VExwnk3lyQ9rBQXGcvxXlFglV
iXdR7Z4MyMl7M4ftFpD6uwLqr1r0sk8/UkgjMflp3RkczM6Iw46xXU7c3E6GGrYK
hVqIVuMbj9A9IIx/CxievV1MVzMEHgmmyqGV4aIMxyRLmSg4MUsT/Fjn83Mx6oKS
lUEaPDn0MpQBHtU7bP8J5UxLELqg/eJM/3v/JWD3PuEaxl+wBK5mPlnBjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDFlIr9Hmkv4I7m2Vebt1ff/1flSMB8GA1UdIwQY
MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz
LTdlYWQ2MjY0ZTY1NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFiL2JjNGYyMS1hOTc3LTQ3ZTItYmNiMy03ZWFkNjI2NGU2
NTUvMS8xLW1TWkZhUjQ2b2JmOEFBc1ctMllLWUpmbUJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDu/
mmvTy9Oih7YXI4mGwOIp9WHiVWVHH0oB7CyKHQUWVuwL6IC3v3mq7JphBUhVg2Pj
C1LGuJiglqQdt9Yrr4Uw9TcwvR44S2J/OnAkVhJf+usfUm06agldwP09CDHs+1ga
3WJ5A18Nw31cjeq/gkH3M5cuLzoaQg8ydtgX10kNtSNh5QGD2Ntp/Nnm0rri10fv
Jsx8+wHGjCSRHIl+Yd53/WIzLjHHaKNj4etxIXFQ458wbzYhYLzCwIquHgFh/uS+
YsqUV2Z+PUu/LUaPYNURpdlndu1a8/OGxISB6r6ppZeH4Ehh+QtRkxa3L5wqiwu0
ce86CIXeg1kEm224rQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:19 2026 by rpki-client