Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: TQhyI57b7SVjCm9GykZ8nldtpjbR1m74syksfI5kNUU=
Subject key identifier: 38:E9:F1:F7:A6:94:E1:29:AC:A3:1D:CB:3A:75:89:42:20:CC:1B:9A
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019CAB344CB9D38A761DFBEC423CEF2D4B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 10DF
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: w4KfGvmb7PaGT2RSkiBqu8xNBMB36vk/gY/mBNos0wg=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4c:b9:d3:8a:76:1d:fb:ec:42:3c:ef:2d:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=38e9f1f7a694e129aca31dcb3a75894220cc1b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:2c:f9:88:7c:81:59:db:b4:5f:4b:79:44:
7f:e4:32:bb:91:26:f8:e4:34:1e:5c:6b:a6:3b:55:
2d:7c:c4:54:8a:f8:93:e0:dd:e2:48:07:bf:2d:fa:
1b:8d:20:0d:c9:df:b0:be:13:1a:9c:24:23:db:c1:
89:c7:27:29:b4:1a:2c:13:50:10:be:e1:79:cc:48:
3d:29:39:2c:23:9f:39:1d:38:03:bc:b8:4a:35:f6:
d5:96:51:2e:ee:60:e4:cc:bc:b1:c1:98:c6:59:62:
a0:3d:88:13:03:81:63:ca:b8:11:30:19:17:9b:b2:
09:74:db:4c:c4:3c:11:62:16:6a:8d:53:04:36:7c:
d3:af:95:80:72:70:5a:3f:80:7f:dd:e5:41:3b:30:
bc:fc:13:8f:c6:d7:46:ce:04:94:87:4d:0e:0c:bc:
ec:8c:bb:2d:1c:44:ea:de:d6:0a:8b:1b:f8:3e:cc:
f9:e7:05:30:35:cc:34:bf:48:e6:91:48:c0:38:b3:
7b:ca:32:ec:8c:ae:bd:20:b6:f7:f7:fc:5f:26:93:
91:ca:28:d9:86:d7:98:96:de:92:89:d1:42:a6:28:
9a:3f:9b:91:20:17:bf:f0:96:99:f3:34:f4:bb:75:
46:95:12:75:c8:05:91:0f:46:c1:c4:bd:fe:e1:53:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:F1:F7:A6:94:E1:29:AC:A3:1D:CB:3A:75:89:42:20:CC:1B:9A
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:83:ac:28:19:8a:90:9e:3b:a5:dc:35:f3:25:57:1c:00:a3:
3b:4b:19:aa:7f:15:25:8a:e0:6c:16:61:65:7a:39:e3:20:cf:
22:0f:d5:25:66:11:cd:fd:12:76:a1:08:98:ea:e3:78:7a:04:
b3:24:38:0b:71:fe:43:3a:69:0a:a8:31:1b:65:5b:1f:aa:83:
6e:3d:9d:f1:a1:10:1b:40:e2:31:6a:68:c3:62:41:92:37:85:
62:c3:0d:27:09:56:59:32:0a:01:78:71:f9:ad:57:02:fa:60:
90:ab:60:51:f3:48:0a:ba:8f:d1:41:ee:e3:3c:17:91:12:f1:
43:c1:0f:28:a4:4c:ba:c5:6e:b0:da:90:de:16:93:90:a0:39:
6d:77:b9:52:a4:e4:1c:e9:6e:37:f0:6e:f7:0b:d9:1d:74:0b:
29:a9:db:4d:33:ba:13:ca:c6:1d:07:59:73:82:f8:13:44:13:
79:e6:38:8f:80:85:53:24:49:b8:59:16:80:e8:b3:29:52:d2:
ff:b1:16:91:c1:5a:7a:fa:e5:63:af:e2:15:d4:b9:7a:76:8f:
5b:bb:7b:10:24:ab:0a:26:61:2d:80:96:23:b0:83:13:1b:39:
00:63:48:b1:fc:24:31:bf:2e:c3:d6:3b:b9:35:ff:af:9e:6e:
72:f5:3d:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyrNEy504p2HfvsQjzvLUufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1
ZjZjZTAwHhcNMjYwMzAxMjEwMDU3WhcNMjYwMzAyMjEwMDU3WjAzMTEwLwYDVQQD
EygzOGU5ZjFmN2E2OTRlMTI5YWNhMzFkY2IzYTc1ODk0MjIwY2MxYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUAs+Yh8gVnbtF9LeUR/5DK7kSb4
5DQeXGumO1UtfMRUiviT4N3iSAe/LfobjSANyd+wvhManCQj28GJxycptBosE1AQ
vuF5zEg9KTksI585HTgDvLhKNfbVllEu7mDkzLyxwZjGWWKgPYgTA4FjyrgRMBkX
m7IJdNtMxDwRYhZqjVMENnzTr5WAcnBaP4B/3eVBOzC8/BOPxtdGzgSUh00ODLzs
jLstHETq3tYKixv4Psz55wUwNcw0v0jmkUjAOLN7yjLsjK69ILb39/xfJpORyijZ
hteYlt6SidFCpiiaP5uRIBe/8JaZ8zT0u3VGlRJ1yAWRD0bBxL3+4VP1vQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDjp8femlOEprKMdyzp1iUIgzBuaMB8GA1UdIwQY
MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3
LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1
YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIOs
KBmKkJ47pdw18yVXHACjO0sZqn8VJYrgbBZhZXo54yDPIg/VJWYRzf0SdqEImOrj
eHoEsyQ4C3H+QzppCqgxG2VbH6qDbj2d8aEQG0DiMWpow2JBkjeFYsMNJwlWWTIK
AXhx+a1XAvpgkKtgUfNICrqP0UHu4zwXkRLxQ8EPKKRMusVusNqQ3haTkKA5bXe5
UqTkHOluN/Bu9wvZHXQLKanbTTO6E8rGHQdZc4L4E0QTeeY4j4CFUyRJuFkWgOiz
KVLS/7EWkcFaevrlY6/iFdS5enaPW7t7ECSrCiZhLYCWI7CDExs5AGNIsfwkMb8u
w9Y7uTX/r55ucvU9Mw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:36 2026 by rpki-client