Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: yXuW5hpjl7JVW7X0IMcoFASuM2PByz+7aL4Fub15WII=
Subject key identifier: 84:18:0E:4E:62:51:1B:7A:8C:CD:2F:2C:41:71:A3:6D:31:B1:68:C0
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 019CAB6ADD491122B0D0A52801EB4185281B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0E09
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: 8vJH/wu/l2nVVOztk7Gj1iYZj5RLrpHWpF+YwZWcNmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:dd:49:11:22:b0:d0:a5:28:01:eb:41:85:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=84180e4e62511b7a8ccd2f2c4171a36d31b168c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:e3:d0:4f:88:a8:cd:82:9b:46:7a:de:d7:
8a:18:c5:5f:3d:f8:f2:d6:90:c7:5e:12:a3:4a:88:
fd:49:ca:3a:1e:c2:03:aa:be:23:63:ad:d9:84:43:
df:bc:e5:34:ce:74:1e:d5:f4:a6:a3:f6:e3:0d:53:
af:de:e4:0e:6f:68:d2:2a:b0:f2:c5:e8:d0:ff:19:
cb:b1:67:33:a9:00:0e:23:88:d8:34:f6:f3:df:a5:
06:a1:27:fa:02:13:8d:68:15:38:4d:a5:88:f8:84:
50:67:33:70:55:7a:88:80:50:e0:60:15:ee:4e:6c:
39:db:0a:0a:c7:41:4f:d2:dd:3e:3a:74:7d:77:91:
f8:d6:2e:ff:44:75:76:ee:b1:d5:5e:61:b2:62:ea:
76:97:b8:35:b1:40:e0:ec:8a:05:63:e8:88:69:b6:
4c:84:30:97:e6:b1:24:58:81:3b:d2:23:38:99:7b:
13:a2:b4:a1:93:bd:14:45:62:93:a5:a0:b3:79:7b:
e7:6d:27:c1:9f:33:bb:32:2b:42:9f:c3:33:db:55:
d6:c6:0f:de:54:08:9f:c4:f5:95:e8:4a:18:df:24:
3d:87:b3:88:ac:94:11:73:6a:1a:2f:01:0e:73:bf:
39:92:8a:ac:2d:a2:b8:28:52:35:3a:2f:71:b6:46:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:0E:4E:62:51:1B:7A:8C:CD:2F:2C:41:71:A3:6D:31:B1:68:C0
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:64:6d:03:6a:dd:66:48:6b:32:cc:f0:d8:00:7f:11:e4:
ed:2c:40:1e:84:9f:83:05:57:a9:56:ad:83:27:4b:e8:32:8f:
48:24:c3:b4:37:26:db:02:9b:40:49:e8:42:3f:62:a9:b0:03:
bb:de:0c:0c:d0:62:9c:c9:7f:a6:ca:51:2d:18:14:c8:f6:58:
44:f3:27:4d:95:0f:0a:6d:f1:58:ba:9d:22:1c:43:34:51:4a:
83:91:22:41:52:87:72:98:0c:60:f8:90:e1:fb:63:32:d3:42:
66:41:5d:12:c4:d6:33:73:90:38:d7:32:9a:e2:36:bc:ea:b0:
3d:b2:b0:d4:8a:b3:8a:10:c4:8b:14:0f:d9:17:d1:8b:59:5e:
67:5d:14:c4:74:45:9d:44:8a:ae:24:c9:a4:11:39:cf:95:bb:
5d:66:eb:91:d3:11:f0:48:69:61:1b:93:5a:fe:f8:70:a8:3d:
89:4d:36:cf:6f:ad:b9:71:b7:cf:6e:8d:a3:bb:04:39:2b:a8:
2c:7f:dc:3a:f0:cf:a8:87:39:f6:eb:1d:bc:ab:a7:8c:4f:30:
b7:84:9c:29:3e:5c:45:d4:5c:d0:27:01:f0:2b:68:6d:56:6e:
fd:bf:3d:b9:51:e2:f9:28:c6:fe:76:88:ba:0f:13:10:28:15:
38:ee:21:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyrat1JESKw0KUoAetBhSgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjdjNGUxMzg3MzEzYzAzNDQ1MzhkZWZkMmNjZmEwMzRl
N2MzMGMwHhcNMjYwMzAxMjIwMDMzWhcNMjYwMzAyMjIwMDMzWjAzMTEwLwYDVQQD
Eyg4NDE4MGU0ZTYyNTExYjdhOGNjZDJmMmM0MTcxYTM2ZDMxYjE2OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDDj0E+IqM2Cm0Z63teKGMVfPfjy
1pDHXhKjSoj9Sco6HsIDqr4jY63ZhEPfvOU0znQe1fSmo/bjDVOv3uQOb2jSKrDy
xejQ/xnLsWczqQAOI4jYNPbz36UGoSf6AhONaBU4TaWI+IRQZzNwVXqIgFDgYBXu
Tmw52woKx0FP0t0+OnR9d5H41i7/RHV27rHVXmGyYup2l7g1sUDg7IoFY+iIabZM
hDCX5rEkWIE70iM4mXsTorShk70URWKTpaCzeXvnbSfBnzO7MitCn8Mz21XWxg/e
VAifxPWV6EoY3yQ9h7OIrJQRc2oaLwEOc785koqsLaK4KFI1Oi9xtkbWlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIQYDk5iURt6jM0vLEFxo20xsWjAMB8GA1UdIwQY
MBaAFPtnxOE4cxPANEU43v0sz6A058MMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZkU0VGh6RThBMFJUamVfU3pQb0RUbnd3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDNiMzYzLWQ2NGEtNDUwNy1hNmZk
LWU1MGNlNTM2N2U3Yi8xLzEtMmZFNFRoekU4QTBSVGplX1N6UG9EVG53d3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjLzQzYjM2My1kNjRhLTQ1MDctYTZmZC1lNTBjZTUzNjdl
N2IvMS8xLTJmRTRUaHpFOEEwUlRqZV9TelBvRFRud3d3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkThk
bQNq3WZIazLM8NgAfxHk7SxAHoSfgwVXqVatgydL6DKPSCTDtDcm2wKbQEnoQj9i
qbADu94MDNBinMl/pspRLRgUyPZYRPMnTZUPCm3xWLqdIhxDNFFKg5EiQVKHcpgM
YPiQ4ftjMtNCZkFdEsTWM3OQONcymuI2vOqwPbKw1IqzihDEixQP2RfRi1leZ10U
xHRFnUSKriTJpBE5z5W7XWbrkdMR8EhpYRuTWv74cKg9iU02z2+tuXG3z26No7sE
OSuoLH/cOvDPqIc59usdvKunjE8wt4ScKT5cRdRc0CcB8CtobVZu/b89uVHi+SjG
/naIug8TECgVOO4h6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:13 2026 by rpki-client