Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier: nr0FTMU7yY3b0HCH5QY1zEYqnLmn3urOd51pCAZ77WQ=
Subject key identifier: 32:F8:39:79:40:BE:66:7B:2A:ED:C2:E6:6A:82:2C:00:DB:B0:51:AE
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 019CAB34318C45A460C46A386CFB48B18D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number: 149E
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: aZqBdhpPhLEwa7YL6rjeU4RzbfKXVoTVwJZsofMgrEk=)
2: ZbHKUZ4-YfRQqqQSe1r9U7B43No.roa (hash: OWTRsb1+RVyVdipSZx/PdEhXtkE4BTOxk7X0sSkLurA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:31:8c:45:a4:60:c4:6a:38:6c:fb:48:b1:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=32f8397940be667b2aedc2e66a822c00dbb051ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:03:0e:c9:0f:ad:7a:4f:2d:f9:70:15:95:
4b:38:84:f3:34:86:56:de:aa:0b:f4:8b:97:99:e8:
3d:53:23:ff:b3:65:d1:ed:50:73:c2:17:02:bb:92:
f3:57:d2:df:bd:99:e0:ca:41:e6:53:66:d7:52:43:
9b:c6:ad:c3:7a:a9:54:6c:50:51:7e:10:8b:ed:dd:
3e:63:d4:3b:e9:ac:7e:ec:66:2a:00:5a:e6:73:64:
91:c7:4d:11:97:71:94:ff:9a:f9:f8:2d:85:85:b0:
b3:74:f7:da:82:1c:8b:b1:f1:ad:95:d6:15:0b:da:
2a:34:06:af:dc:a5:40:2d:8e:6f:0f:bd:8a:17:cd:
35:c3:61:e8:fe:91:1c:01:d4:4c:fe:28:eb:67:0d:
6d:f6:c3:8b:28:2b:ee:25:10:95:2e:13:0f:6f:d9:
b3:60:74:21:d4:e8:fd:90:d6:c9:91:89:36:93:66:
1e:30:aa:17:ce:35:a9:65:98:bf:18:9e:90:04:55:
53:39:de:54:22:7a:12:b9:aa:11:8d:23:e2:8c:57:
27:cf:44:90:0f:3b:ce:eb:1b:8c:d5:91:b6:1d:8a:
33:98:6f:90:2f:92:20:a6:2d:f0:45:d2:3c:c8:b9:
61:19:c9:fa:dd:ce:92:40:27:5b:36:43:4e:8d:ae:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:39:79:40:BE:66:7B:2A:ED:C2:E6:6A:82:2C:00:DB:B0:51:AE
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:30:59:c6:56:87:2f:58:b1:5a:1f:5a:dc:e9:0d:c2:67:
d9:1e:46:7a:7e:8c:22:0d:10:51:49:64:07:e8:d7:1c:c0:2e:
e1:5d:2c:0c:52:10:40:ea:16:cf:c2:25:b5:c3:d4:c3:f5:c1:
06:38:73:0b:12:99:a3:73:a2:f7:06:09:fb:46:8e:86:4f:24:
a0:c4:4a:e7:ea:29:27:99:72:f0:fa:15:2d:c2:3e:dd:9c:9a:
67:5d:4b:10:5a:b1:3c:53:4b:b4:10:04:80:b4:aa:77:48:8a:
32:60:36:fc:8f:53:44:e4:65:f3:9b:db:82:a2:6a:48:ec:79:
39:bb:ab:95:83:3f:f9:95:56:5e:e4:44:8b:95:9f:71:77:bc:
94:4d:8e:f8:99:73:e9:e1:ee:d9:fc:36:a4:b8:fc:2c:43:3a:
2e:26:7b:cf:61:22:bb:be:b0:c9:36:c8:e9:dc:68:58:0a:34:
b3:70:9f:69:b3:75:aa:b5:b2:ea:9a:33:b1:46:50:84:e8:2c:
d0:b9:40:0b:6c:56:4c:39:ea:ad:a3:cf:53:52:29:f7:aa:38:
6c:84:33:68:66:85:33:1e:b3:66:ee:00:b4:0f:fd:da:c5:9c:
53:fe:9f:3c:45:2c:67:d2:5d:89:50:e2:78:64:f7:05:3d:fb:
a8:1f:ff:fa
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyrNDGMRaRgxGo4bPtIsY1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDJiYWM3Yjc5YTMxMDllOWJlM2RmZTRmMDZkNTg1YmI5
ZjkwNTEwHhcNMjYwMzAxMjEwMDUwWhcNMjYwMzAyMjEwMDUwWjAzMTEwLwYDVQQD
EygzMmY4Mzk3OTQwYmU2NjdiMmFlZGMyZTY2YTgyMmMwMGRiYjA1MWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo8DDskPrXpPLflwFZVLOITzNIZW
3qoL9IuXmeg9UyP/s2XR7VBzwhcCu5LzV9LfvZngykHmU2bXUkObxq3DeqlUbFBR
fhCL7d0+Y9Q76ax+7GYqAFrmc2SRx00Rl3GU/5r5+C2FhbCzdPfaghyLsfGtldYV
C9oqNAav3KVALY5vD72KF801w2Ho/pEcAdRM/ijrZw1t9sOLKCvuJRCVLhMPb9mz
YHQh1Oj9kNbJkYk2k2YeMKoXzjWpZZi/GJ6QBFVTOd5UInoSuaoRjSPijFcnz0SQ
DzvO6xuM1ZG2HYozmG+QL5Igpi3wRdI8yLlhGcn63c6SQCdbNkNOja7AIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDL4OXlAvmZ7Ku3C5mqCLADbsFGuMB8GA1UdIwQY
MBaAFPsCuse3mjEJ6b49/k8G1YW7n5BRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13SzZ4N2VhTVFucHZqMy1Ud2JWaGJ1ZmtGRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjAwZTJiLWQzYTQtNDU1Ny05NzM1
LTQ5NTBmODZjYmI1Yi8xLzEtd0s2eDdlYU1RbnB2ajMtVHdiVmhidWZrRkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFkLzIwMGUyYi1kM2E0LTQ1NTctOTczNS00OTUwZjg2Y2Ji
NWIvMS8xLXdLNng3ZWFNUW5wdmozLVR3YlZoYnVma0ZFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRsw
WcZWhy9YsVofWtzpDcJn2R5Gen6MIg0QUUlkB+jXHMAu4V0sDFIQQOoWz8IltcPU
w/XBBjhzCxKZo3Oi9wYJ+0aOhk8koMRK5+opJ5ly8PoVLcI+3ZyaZ11LEFqxPFNL
tBAEgLSqd0iKMmA2/I9TRORl85vbgqJqSOx5OburlYM/+ZVWXuREi5WfcXe8lE2O
+Jlz6eHu2fw2pLj8LEM6LiZ7z2Eiu76wyTbI6dxoWAo0s3CfabN1qrWy6pozsUZQ
hOgs0LlAC2xWTDnqraPPU1Ip96o4bIQzaGaFMx6zZu4AtA/92sWcU/6fPEUsZ9Jd
iVDieGT3BT37qB//+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:46 2026 by rpki-client