Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: Sh0NCDr1duhuY5Rd8WmB8zcMbwtpQdwWg65S3qqAbCA=
Subject key identifier: C7:9D:28:22:34:D6:72:66:B4:01:D2:AD:1C:6E:6C:74:03:3B:02:E8
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019DA378995DADB36315EBB47C1135C38009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0B15
Signing time: Sun 19 Apr 2026 02:01:22 +0000
Manifest this update: Sun 19 Apr 2026 02:01:22 +0000
Manifest next update: Mon 20 Apr 2026 02:01:22 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: UsjjKqkyaSAVXI2Q4mtZVGjAehfHkcWM4SF7alaUwDY=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:99:5d:ad:b3:63:15:eb:b4:7c:11:35:c3:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Apr 19 02:01:22 2026 GMT
Not After : Apr 20 02:01:22 2026 GMT
Subject: CN=c79d282234d67266b401d2ad1c6e6c74033b02e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:f3:6d:58:be:7b:bb:62:2b:2a:e9:8e:4c:
c7:59:0e:7d:06:4e:77:57:aa:21:ae:19:2a:67:45:
6b:a1:18:78:e4:c7:52:19:89:b6:8f:da:cd:5c:80:
0e:36:f8:58:5d:b6:d7:48:e9:91:65:8f:5a:02:62:
a9:b7:ef:2a:92:f6:91:33:65:0d:d1:30:4b:a8:19:
07:39:7c:a9:65:89:52:e5:56:90:59:3a:04:b9:f0:
4e:ea:b9:7e:33:59:53:43:db:fe:44:28:70:f4:35:
36:b8:7f:6e:79:65:4e:aa:03:65:f5:63:f8:99:a0:
2f:8e:51:71:c3:27:38:a3:ed:1a:74:b7:b2:d8:4a:
72:69:d1:4b:d0:6c:b1:63:fb:29:f3:01:04:6b:00:
3c:89:a4:9c:13:5e:0b:f8:f4:b4:d7:79:b6:72:73:
5a:8e:7e:fe:83:3a:b4:f9:65:ca:ef:e1:aa:9e:a8:
50:e4:8c:6f:36:9b:12:29:74:2b:62:68:ea:fb:58:
ca:b3:a9:aa:93:71:ba:7c:8b:a0:66:bd:b8:10:d5:
58:04:b3:11:33:e6:52:b6:15:bd:24:1b:0c:0a:0a:
fd:0d:2f:20:04:ff:87:a7:8c:45:14:f2:cc:f6:a9:
06:23:b7:de:9b:13:d3:03:2f:a0:e4:3e:d9:f5:ca:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9D:28:22:34:D6:72:66:B4:01:D2:AD:1C:6E:6C:74:03:3B:02:E8
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6f:d9:93:71:7c:b7:4a:7f:6a:31:4c:e8:66:c0:86:6d:6e:
d7:95:0c:9f:d6:94:90:21:8f:76:c5:22:69:15:13:3b:22:f1:
1e:eb:ee:8a:de:8b:6d:0a:92:09:77:7d:c4:a0:42:cd:07:ca:
06:bd:51:4e:76:0c:b8:6e:a0:99:c8:ed:0f:4e:fd:59:6c:fb:
db:31:81:8b:01:9d:18:11:0e:41:12:b0:95:bc:0e:45:b4:d6:
9a:bf:4c:66:d1:37:87:a5:93:ed:4c:99:1a:d4:a6:21:1c:b0:
2a:8a:98:15:fb:e2:f7:3f:37:b8:d5:b5:ab:be:c4:82:09:7f:
8f:f6:aa:8b:7a:c4:06:2c:b1:c8:a5:91:f6:ad:e7:53:db:4a:
de:e6:aa:e5:69:83:db:e7:b5:28:04:a3:21:d4:d2:2a:d7:39:
e3:f1:3d:4a:77:69:49:27:42:7d:c7:9e:85:8c:69:80:56:ba:
d1:1d:9a:71:89:e5:32:5f:3d:19:fc:3d:fa:be:b4:5c:27:43:
72:96:27:80:82:e3:24:f2:84:9c:0d:95:b4:6b:02:57:7e:a3:
ba:2a:4f:e9:5b:cd:a4:68:bd:73:58:6c:17:27:c8:d1:e8:fe:
6a:24:7b:78:2e:0c:99:81:96:5b:73:61:f8:41:57:9b:83:32:
8e:bc:f6:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2jeJldrbNjFeu0fBE1w4AJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjYwNDE5MDIwMTIyWhcNMjYwNDIwMDIwMTIyWjAzMTEwLwYDVQQD
EyhjNzlkMjgyMjM0ZDY3MjY2YjQwMWQyYWQxYzZlNmM3NDAzM2IwMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuLzbVi+e7tiKyrpjkzHWQ59Bk53
V6ohrhkqZ0VroRh45MdSGYm2j9rNXIAONvhYXbbXSOmRZY9aAmKpt+8qkvaRM2UN
0TBLqBkHOXypZYlS5VaQWToEufBO6rl+M1lTQ9v+RChw9DU2uH9ueWVOqgNl9WP4
maAvjlFxwyc4o+0adLey2EpyadFL0GyxY/sp8wEEawA8iaScE14L+PS013m2cnNa
jn7+gzq0+WXK7+GqnqhQ5IxvNpsSKXQrYmjq+1jKs6mqk3G6fIugZr24ENVYBLMR
M+ZSthW9JBsMCgr9DS8gBP+Hp4xFFPLM9qkGI7femxPTAy+g5D7Z9cr2EwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMedKCI01nJmtAHSrRxubHQDOwLoMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk
YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm/Z
k3F8t0p/ajFM6GbAhm1u15UMn9aUkCGPdsUiaRUTOyLxHuvuit6LbQqSCXd9xKBC
zQfKBr1RTnYMuG6gmcjtD079WWz72zGBiwGdGBEOQRKwlbwORbTWmr9MZtE3h6WT
7UyZGtSmIRywKoqYFfvi9z83uNW1q77Eggl/j/aqi3rEBiyxyKWR9q3nU9tK3uaq
5WmD2+e1KASjIdTSKtc54/E9SndpSSdCfceehYxpgFa60R2acYnlMl89Gfw9+r60
XCdDcpYngILjJPKEnA2VtGsCV36juipP6VvNpGi9c1hsFyfI0ej+aiR7eC4MmYGW
W3Nh+EFXm4Myjrz2Mw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:30 2026 by rpki-client