Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: aXJvRmerbQfD66w2xjp6cBt+TP0oSU5z3BtHEVaTrbM=
Subject key identifier: E6:D0:20:0C:69:98:24:B6:4E:4A:7D:B7:AB:4B:7A:E2:7D:40:A7:29
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 019CAB6AF29EE522B355E2AEC708DC9ABE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0D8C
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: XINzLUu+ITXz1NDkOSBVNa0c9EXL1q0Zk+HTU6nHjDM=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f2:9e:e5:22:b3:55:e2:ae:c7:08:dc:9a:be:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=e6d0200c699824b64e4a7db7ab4b7ae27d40a729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:61:52:73:43:c4:da:79:5e:9a:c9:a1:fc:
08:86:1c:4e:31:d5:08:d5:f8:f6:51:0c:1c:75:00:
d6:82:fc:a3:34:6c:a3:33:ae:95:da:fa:e5:70:b8:
48:a4:40:59:1b:a3:91:e4:64:77:da:53:a0:9c:f5:
26:f9:e4:bf:66:fb:5b:08:ed:7b:42:da:ea:c5:b4:
85:a1:b3:8a:57:af:cc:7d:99:17:00:2a:29:c7:3d:
5c:80:a3:18:61:8c:20:7e:dd:f1:74:99:0c:b5:99:
79:04:e3:17:f8:88:1a:aa:8e:1f:c1:da:fe:f0:b8:
5e:09:6e:8c:51:08:78:97:be:0e:ea:87:dd:72:8f:
4c:b8:0f:1a:b8:28:09:4d:ea:5c:45:d4:d0:b7:ce:
44:9b:3a:1b:b5:2a:22:dc:fc:15:a9:6b:e6:4a:63:
96:8e:58:0b:c6:8f:dd:e3:bd:0e:19:61:1e:fa:e6:
a9:8d:89:fc:33:a5:a1:ff:55:fe:63:3c:de:e2:cf:
a7:25:a7:c1:40:96:16:39:da:ea:65:6a:8c:5b:cb:
e3:59:eb:91:c2:a3:30:b6:e2:bf:03:a4:53:33:ab:
c3:f1:ae:aa:2a:5a:cf:22:30:c0:f5:b5:91:7a:16:
d2:a4:99:f3:98:52:d1:2c:a2:51:59:e9:ff:4f:94:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:20:0C:69:98:24:B6:4E:4A:7D:B7:AB:4B:7A:E2:7D:40:A7:29
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8b:cb:fb:49:64:98:3f:39:56:96:db:94:70:20:41:71:12:
1a:6d:91:01:54:6a:26:35:e0:83:2e:7a:30:b6:a7:8c:76:18:
cc:f2:47:f5:d5:aa:6b:9a:be:ca:92:06:4a:25:30:15:ff:05:
1d:1c:a0:ef:39:64:d8:f7:c6:f1:94:dd:91:e8:82:eb:21:66:
a8:78:1e:c6:56:bd:1d:9f:4f:6f:00:d8:18:52:65:40:f8:88:
5f:95:52:3d:68:61:f2:79:62:fe:b6:32:29:46:dc:8b:b4:7f:
03:82:17:d2:a6:4f:e1:dc:91:56:58:0d:8a:9f:f2:7a:1e:32:
90:af:93:7e:a5:8c:e9:f5:b4:73:28:d7:a2:1e:ba:b8:5b:c6:
13:36:0b:7b:e7:67:21:84:d0:d8:fd:b5:e9:65:31:f4:23:d4:
a7:f4:f1:d1:80:8a:52:34:6a:ee:44:f3:53:b5:bd:7a:c4:ec:
fc:2a:8e:51:5c:99:88:9f:17:43:3f:be:5d:ce:5f:20:1f:71:
4b:34:d8:b0:5b:65:bd:88:cc:67:c0:61:80:07:ca:22:6e:a8:
84:ba:f9:dc:e3:53:d4:d2:6a:d3:9b:25:f1:1b:c3:4c:64:db:
81:bf:f4:9f:da:7c:98:a8:e7:1a:82:03:71:15:01:dc:ec:8c:
e6:99:9b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyravKe5SKzVeKuxwjcmr4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm
ZWY2YjUwHhcNMjYwMzAxMjIwMDM4WhcNMjYwMzAyMjIwMDM4WjAzMTEwLwYDVQQD
EyhlNmQwMjAwYzY5OTgyNGI2NGU0YTdkYjdhYjRiN2FlMjdkNDBhNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63NhUnNDxNp5XprJofwIhhxOMdUI
1fj2UQwcdQDWgvyjNGyjM66V2vrlcLhIpEBZG6OR5GR32lOgnPUm+eS/ZvtbCO17
QtrqxbSFobOKV6/MfZkXACopxz1cgKMYYYwgft3xdJkMtZl5BOMX+Igaqo4fwdr+
8LheCW6MUQh4l74O6ofdco9MuA8auCgJTepcRdTQt85EmzobtSoi3PwVqWvmSmOW
jlgLxo/d470OGWEe+uapjYn8M6Wh/1X+Yzze4s+nJafBQJYWOdrqZWqMW8vjWeuR
wqMwtuK/A6RTM6vD8a6qKlrPIjDA9bWRehbSpJnzmFLRLKJRWen/T5SlNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObQIAxpmCS2Tkp9t6tLeuJ9QKcpMB8GA1UdIwQY
MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut
ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3
LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4vL+0lk
mD85VpbblHAgQXESGm2RAVRqJjXggy56MLanjHYYzPJH9dWqa5q+ypIGSiUwFf8F
HRyg7zlk2PfG8ZTdkeiC6yFmqHgexla9HZ9PbwDYGFJlQPiIX5VSPWhh8nli/rYy
KUbci7R/A4IX0qZP4dyRVlgNip/yeh4ykK+TfqWM6fW0cyjXoh66uFvGEzYLe+dn
IYTQ2P216WUx9CPUp/Tx0YCKUjRq7kTzU7W9esTs/CqOUVyZiJ8XQz++Xc5fIB9x
SzTYsFtlvYjMZ8BhgAfKIm6ohLr53ONT1NJq05sl8RvDTGTbgb/0n9p8mKjnGoID
cRUB3OyM5pmbrg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:50 2026 by rpki-client