Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: Np+nbLVlOj83KfHOvhVaSNfpqYl55BYCc+h/0BTU9f0=
Subject key identifier: 36:19:3A:00:AC:68:29:DC:84:24:95:DC:7B:CD:BE:34:08:C5:1F:B7
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 019CAC4723CCF69241FA5519988D18D795C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: HouHK6X8qUU9vrYQNweGNaDw2wMeFrLh1QNiuPA7OPI=)
2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:23:cc:f6:92:41:fa:55:19:98:8d:18:d7:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=36193a00ac6829dc842495dc7bcdbe3408c51fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:5c:d3:1a:e5:ec:27:e7:af:a4:c5:6d:13:
e9:3e:90:fb:82:21:18:4a:c7:9c:77:c7:20:53:1d:
fb:d4:f9:f5:54:d0:18:dd:f6:98:02:a7:52:e9:8f:
a9:60:69:85:fa:47:32:b3:e2:26:f2:9a:fc:1e:0e:
4b:9c:cc:86:58:36:63:5c:af:be:23:b7:64:f4:41:
12:ea:5b:84:3d:dc:70:f8:dd:db:28:16:d7:42:fc:
9d:74:72:a6:e2:1d:b4:a7:20:a7:13:34:5c:2d:a8:
29:1b:4b:3b:5b:d0:8d:0a:fb:98:b6:3b:69:b3:37:
0e:e7:08:9a:31:e4:6f:c4:8d:f5:79:53:5c:f5:df:
eb:10:49:5a:03:66:fa:3e:cb:1e:5e:a0:3c:ef:1c:
5c:5a:32:2a:dc:2e:56:ec:a6:3d:9d:d3:0b:0b:b1:
f7:82:c3:29:42:a6:39:e0:ef:d6:18:1e:f9:1a:ca:
6d:94:b7:19:aa:2c:a4:89:7e:e4:a9:52:0d:22:a3:
5f:4e:7c:b5:44:15:a5:af:56:22:c3:7b:49:4f:06:
58:76:23:c7:3b:6d:b3:38:02:a9:2f:e1:4a:b6:a4:
12:a8:0c:12:55:9f:21:f7:f0:77:c1:64:c6:00:3e:
85:49:c1:22:e4:02:10:c1:4b:59:b8:b8:29:bc:ba:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:3A:00:AC:68:29:DC:84:24:95:DC:7B:CD:BE:34:08:C5:1F:B7
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:1d:38:85:83:7b:47:db:b0:56:08:dd:78:a9:bf:1a:c4:
76:93:f1:6c:44:00:25:f9:30:af:8e:98:ae:71:15:35:47:5c:
5a:7b:64:c0:b2:91:30:f1:d1:99:0a:9b:43:90:38:1a:6b:7a:
32:41:f7:dc:6c:a2:94:82:46:3d:ad:6f:2a:95:71:a0:33:59:
3d:0d:23:8f:ed:7b:1f:8d:a2:17:d2:dd:e3:8e:48:97:11:b0:
16:91:52:51:7d:6e:a6:a7:0a:97:be:82:56:e1:7a:db:47:0c:
d9:ae:10:1a:ca:8a:07:dc:c9:bb:10:0f:39:90:56:5f:a1:b6:
30:0f:88:be:31:a5:99:23:07:9f:da:76:22:12:b4:d8:35:e5:
47:83:73:8f:d6:50:8a:30:d6:d2:b3:12:4a:9a:24:57:bf:77:
07:12:2d:07:fa:5e:d9:a3:13:8e:30:48:04:48:be:62:29:d9:
b1:5e:2c:0f:bf:43:ec:40:bf:c7:a3:59:2f:bc:bd:0b:3c:ab:
5f:14:51:08:98:e4:a6:e5:f2:c3:b2:53:1c:11:46:57:0d:ab:
57:24:b5:9d:e9:47:78:d1:4d:10:05:87:f8:9d:d0:dd:84:84:
3d:b9:74:7d:86:25:3b:de:84:a1:b7:59:77:16:05:62:f6:51:
a6:d2:30:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyPM9pJB+lUZmI0Y15XDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzM0M2Y3Y2M2YzIzN2RhM2Y4YjgxMTM4YzA1MWQ4Zjkz
YzljNGQwHhcNMjYwMzAyMDIwMTA5WhcNMjYwMzAzMDIwMTA5WjAzMTEwLwYDVQQD
EygzNjE5M2EwMGFjNjgyOWRjODQyNDk1ZGM3YmNkYmUzNDA4YzUxZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp5c0xrl7Cfnr6TFbRPpPpD7giEY
Ssecd8cgUx371Pn1VNAY3faYAqdS6Y+pYGmF+kcys+Im8pr8Hg5LnMyGWDZjXK++
I7dk9EES6luEPdxw+N3bKBbXQvyddHKm4h20pyCnEzRcLagpG0s7W9CNCvuYtjtp
szcO5wiaMeRvxI31eVNc9d/rEElaA2b6PsseXqA87xxcWjIq3C5W7KY9ndMLC7H3
gsMpQqY54O/WGB75GsptlLcZqiykiX7kqVINIqNfTny1RBWlr1Yiw3tJTwZYdiPH
O22zOAKpL+FKtqQSqAwSVZ8h9/B3wWTGAD6FScEi5AIQwUtZuLgpvLo4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYZOgCsaCnchCSV3HvNvjQIxR+3MB8GA1UdIwQY
MBaAFNYzQ/fMbCN9o/i4ETjAUdj5PJxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEt
NTMxODBlZWM1NmZiLzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS84ZWI1ODEtOWM3NC00OGUxLTgyMWEtNTMxODBlZWM1NmZi
LzEvMWpORDk4eHNJMzJqLUxnUk9NQlIyUGs4bkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby8dOIWD
e0fbsFYI3XipvxrEdpPxbEQAJfkwr46YrnEVNUdcWntkwLKRMPHRmQqbQ5A4Gmt6
MkH33GyilIJGPa1vKpVxoDNZPQ0jj+17H42iF9Ld445IlxGwFpFSUX1upqcKl76C
VuF620cM2a4QGsqKB9zJuxAPOZBWX6G2MA+IvjGlmSMHn9p2IhK02DXlR4Nzj9ZQ
ijDW0rMSSpokV793BxItB/pe2aMTjjBIBEi+YinZsV4sD79D7EC/x6NZL7y9Czyr
XxRRCJjkpuXyw7JTHBFGVw2rVyS1nelHeNFNEAWH+J3Q3YSEPbl0fYYlO96EobdZ
dxYFYvZRptIwKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:23 2026 by rpki-client