Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: VeScMWohAOu+thX0P0wR9xjrktYm8I6TQ8XC2mj4RJ8=
Subject key identifier: D0:6E:14:3E:7D:04:B2:AF:68:B9:85:E3:A6:CD:13:BC:3A:AC:CC:6D
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019CA832E5AFDA2A048847AB6BB1B5B678A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 4E
Signing time: Sun 01 Mar 2026 07:00:33 +0000
Manifest this update: Sun 01 Mar 2026 07:00:33 +0000
Manifest next update: Mon 02 Mar 2026 07:00:33 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: y1/Uj1gb/Zw34utd2H6lARzKFTm+/45qZyTCVHK2Bcs=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:e5:af:da:2a:04:88:47:ab:6b:b1:b5:b6:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Mar 1 07:00:33 2026 GMT
Not After : Mar 2 07:00:33 2026 GMT
Subject: CN=d06e143e7d04b2af68b985e3a6cd13bc3aaccc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:a7:ce:27:12:97:66:4e:46:30:dc:29:aa:
ce:e4:98:a8:03:55:41:46:ad:30:ef:7c:17:45:32:
0c:cf:14:23:c2:81:93:92:bd:a9:18:e4:4e:af:e4:
8e:cd:02:aa:2c:2c:0c:d3:c7:4a:42:3e:37:18:3d:
d3:1d:ad:bb:fb:1f:65:13:6c:b5:97:eb:61:03:67:
cd:c4:47:74:89:b3:f4:f7:10:ab:20:03:a5:ac:48:
8e:4a:ba:7e:99:e3:cd:99:9a:95:24:c0:af:d9:72:
c5:b0:1a:cd:ee:93:a3:3b:0a:c2:0f:5f:a2:d3:f0:
38:93:a7:d3:f8:03:5c:20:e8:1a:54:28:cc:63:bd:
dc:20:f3:ea:4a:6b:b8:f0:c2:9f:9c:58:76:fd:e5:
53:da:34:c8:53:ce:40:ef:7b:df:20:3a:a8:e8:38:
3f:69:47:12:e6:b8:33:54:da:65:36:7b:a1:f6:fb:
73:ba:5f:05:e4:b1:f3:85:f6:b6:cf:2c:fb:fa:a5:
c9:1f:c7:2f:0a:b2:34:e9:70:66:de:fd:63:77:3c:
35:d9:2e:76:93:e8:e1:c4:b2:49:4a:3d:07:2a:62:
61:23:f7:7d:d0:84:78:de:a8:2d:ca:0f:38:11:48:
d3:48:e8:d2:92:36:e1:28:14:cd:8c:35:da:a0:f4:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:14:3E:7D:04:B2:AF:68:B9:85:E3:A6:CD:13:BC:3A:AC:CC:6D
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:4e:b6:33:f4:85:f1:03:53:73:dc:3d:88:53:67:a5:31:
75:4d:b9:7b:04:e3:1a:52:b0:07:95:40:b0:7d:f4:62:99:95:
d3:13:71:0f:6e:66:d7:6c:cf:bf:31:7d:cd:81:e3:ff:f2:76:
dd:1c:01:1e:7d:63:98:f2:5c:c6:f7:c3:23:05:8d:20:f8:66:
82:55:95:36:6d:d8:2d:7b:5b:43:ec:21:ee:e0:d3:71:a5:bf:
f6:63:72:25:f3:b6:3a:a4:98:b4:aa:ce:88:58:19:56:a3:e5:
99:ef:80:46:ef:48:ab:fd:9b:32:9e:86:ba:89:7b:bf:7f:4c:
f2:06:5c:f0:63:9c:ea:e6:79:7b:a6:41:59:ec:fa:1f:b0:b1:
97:34:91:8f:e7:e2:17:36:b0:04:fa:2c:74:50:b2:e0:74:bb:
e7:a6:4b:3d:9b:7b:27:51:48:1b:36:01:52:49:15:0b:ed:35:
82:bb:81:e6:9d:f8:d4:56:40:86:45:98:bc:5e:5a:56:25:0b:
ec:03:cc:70:6b:76:3f:32:99:69:d5:bc:82:60:21:18:72:ad:
35:4d:b0:62:32:f1:39:6f:02:9c:d0:53:4f:d4:7c:fd:c3:46:
92:45:4e:b7:70:c4:d4:f4:19:a7:1a:98:73:8c:6c:eb:ee:98:
71:ec:16:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyoMuWv2ioEiEera7G1tnikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjgzNjg1NzM5OTg2ZGNkNDUxNDQ4MzM1NTczMDE0ZGI0
MzlhMjMwHhcNMjYwMzAxMDcwMDMzWhcNMjYwMzAyMDcwMDMzWjAzMTEwLwYDVQQD
EyhkMDZlMTQzZTdkMDRiMmFmNjhiOTg1ZTNhNmNkMTNiYzNhYWNjYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSenzicSl2ZORjDcKarO5JioA1VB
Rq0w73wXRTIMzxQjwoGTkr2pGOROr+SOzQKqLCwM08dKQj43GD3THa27+x9lE2y1
l+thA2fNxEd0ibP09xCrIAOlrEiOSrp+mePNmZqVJMCv2XLFsBrN7pOjOwrCD1+i
0/A4k6fT+ANcIOgaVCjMY73cIPPqSmu48MKfnFh2/eVT2jTIU85A73vfIDqo6Dg/
aUcS5rgzVNplNnuh9vtzul8F5LHzhfa2zyz7+qXJH8cvCrI06XBm3v1jdzw12S52
k+jhxLJJSj0HKmJhI/d90IR43qgtyg84EUjTSOjSkjbhKBTNjDXaoPSc7wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNBuFD59BLKvaLmF46bNE7w6rMxtMB8GA1UdIwQY
MBaAFPq4NoVzmYbc1FFEgzVXMBTbQ5ojMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZzJoWE9aaHR6VVVVU0ROVmN3Rk50RG1pTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNjZjMDI5LTY4ZGUtNDMzNC1iOTJj
LTVlMTdhNjIyMzFiNS8xLzEtcmcyaFhPWmh0elVVVVNETlZjd0ZOdERtaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzY2YzAyOS02OGRlLTQzMzQtYjkyYy01ZTE3YTYyMjMx
YjUvMS8xLXJnMmhYT1podHpVVVVTRE5WY3dGTnREbWlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfZO
tjP0hfEDU3PcPYhTZ6UxdU25ewTjGlKwB5VAsH30YpmV0xNxD25m12zPvzF9zYHj
//J23RwBHn1jmPJcxvfDIwWNIPhmglWVNm3YLXtbQ+wh7uDTcaW/9mNyJfO2OqSY
tKrOiFgZVqPlme+ARu9Iq/2bMp6Guol7v39M8gZc8GOc6uZ5e6ZBWez6H7CxlzSR
j+fiFzawBPosdFCy4HS756ZLPZt7J1FIGzYBUkkVC+01gruB5p341FZAhkWYvF5a
ViUL7APMcGt2PzKZadW8gmAhGHKtNU2wYjLxOW8CnNBTT9R8/cNGkkVOt3DE1PQZ
pxqYc4xs6+6YcewWew==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:51 2026 by rpki-client