Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: yy6nOcrga2tevBGx59UWLaOUENJdFoY2doKvbBQIfvA=
Subject key identifier: FF:97:E5:82:51:D9:8D:C6:00:1D:A7:F8:88:73:B7:00:11:8A:8D:89
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019CB023553CCC1AFEF0EE7A07FD1C736E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 01D5
Signing time: Mon 02 Mar 2026 20:00:31 +0000
Manifest this update: Mon 02 Mar 2026 20:00:31 +0000
Manifest next update: Tue 03 Mar 2026 20:00:31 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: ajETYo6L3SvFSTcGGuN/6qNhO3jguzbUaUFdKtW9Jl8=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:55:3c:cc:1a:fe:f0:ee:7a:07:fd:1c:73:6e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Mar 2 20:00:31 2026 GMT
Not After : Mar 3 20:00:31 2026 GMT
Subject: CN=ff97e58251d98dc6001da7f88873b700118a8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:57:3e:2d:e1:f5:ad:9d:d9:a7:99:d0:01:
a6:e5:7f:b6:a0:4f:88:6f:58:82:0d:0d:39:ae:8d:
46:88:24:81:d5:69:fe:b6:b3:44:d0:49:a5:42:ef:
2a:e0:26:84:0f:76:77:1b:ac:55:70:2b:bc:e7:be:
38:f6:c1:30:56:40:99:1a:dd:41:9f:42:4e:f3:bf:
78:23:6c:ba:27:26:7a:f6:ba:49:9e:6b:3c:71:66:
7f:68:23:57:10:8f:91:79:ae:0a:ce:2a:21:28:cc:
a3:8a:d1:23:c7:12:11:5a:bb:63:a8:7c:dd:b6:88:
a4:82:4f:b2:f7:d3:5b:57:11:83:5e:d9:a5:15:ca:
2b:1f:01:8d:3e:2b:d9:31:28:31:de:e5:8a:58:66:
7f:83:51:60:a1:de:be:84:f9:61:42:b1:82:04:86:
c5:f7:1f:35:4d:2b:3e:ff:5e:09:ab:36:21:bb:f0:
da:84:69:05:82:fb:8b:61:e3:a3:31:c4:07:d9:c2:
2a:8c:c5:f7:6f:fe:29:b6:e2:ee:1f:16:4f:24:15:
58:1c:50:1a:32:ab:c3:4e:15:99:ce:e2:c2:08:d6:
62:7c:5a:35:89:58:14:5a:d5:ef:de:5a:7c:bf:9a:
d3:47:64:6e:57:60:09:d4:f1:6a:c0:78:31:fb:8e:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:E5:82:51:D9:8D:C6:00:1D:A7:F8:88:73:B7:00:11:8A:8D:89
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bd:c1:7d:fe:8c:bb:95:08:ef:97:3a:f8:1d:fe:96:b0:f5:
14:a6:8c:8d:36:c8:9c:15:cf:51:68:d5:6a:5d:aa:14:cb:d4:
ed:62:56:19:28:e8:1d:9d:93:26:0a:a0:e9:5c:b4:27:62:1a:
7a:c4:0b:86:df:9e:7e:1d:91:1d:c7:80:60:61:40:e5:aa:0a:
d3:4b:7a:ff:b2:6c:7b:41:bf:e0:a4:48:aa:7c:2b:27:cd:80:
2d:fb:83:19:0c:9e:c7:cb:e4:77:6b:81:06:41:68:c9:81:1b:
00:f9:6b:f6:7b:80:77:7e:15:d0:21:be:28:eb:27:6a:40:a8:
81:df:f0:6d:f3:c2:78:7e:54:2c:53:9f:7a:1b:03:fc:c2:3d:
c5:51:4c:d1:cf:1d:5f:27:3d:5c:a6:98:be:7b:00:74:45:dc:
c8:4f:4f:12:65:6b:f0:df:25:66:54:ae:4b:c3:11:9a:c6:45:
9b:18:f4:86:82:d4:bd:df:72:40:3f:5a:b1:27:28:34:90:bc:
74:88:f1:9c:66:7a:b0:72:f3:f0:0a:0e:34:2d:58:15:b7:d8:
ac:e6:61:49:f0:a3:2b:5b:72:6d:c2:61:93:7f:e7:2f:6b:26:
76:6d:90:64:24:aa:68:d3:e9:52:aa:63:94:23:ed:ce:be:64:
ff:96:fe:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZywI1U8zBr+8O56B/0cc25wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5
NTBlODIwHhcNMjYwMzAyMjAwMDMxWhcNMjYwMzAzMjAwMDMxWjAzMTEwLwYDVQQD
EyhmZjk3ZTU4MjUxZDk4ZGM2MDAxZGE3Zjg4ODczYjcwMDExOGE4ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMtXPi3h9a2d2aeZ0AGm5X+2oE+I
b1iCDQ05ro1GiCSB1Wn+trNE0EmlQu8q4CaED3Z3G6xVcCu857449sEwVkCZGt1B
n0JO8794I2y6JyZ69rpJnms8cWZ/aCNXEI+Rea4KziohKMyjitEjxxIRWrtjqHzd
toikgk+y99NbVxGDXtmlFcorHwGNPivZMSgx3uWKWGZ/g1Fgod6+hPlhQrGCBIbF
9x81TSs+/14JqzYhu/DahGkFgvuLYeOjMcQH2cIqjMX3b/4ptuLuHxZPJBVYHFAa
MqvDThWZzuLCCNZifFo1iVgUWtXv3lp8v5rTR2RuV2AJ1PFqwHgx+44/tQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP+X5YJR2Y3GAB2n+IhztwARio2JMB8GA1UdIwQY
MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx
LTg3NDdkYWE1OTNmMi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNkLzIyZjBhOC1iNmYwLTQ0YjYtOWFhMS04NzQ3ZGFhNTkz
ZjIvMS8xLTM4WkdvMjc4ZkV4UjBsMU5ZOGtSTmFWRG9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr3B
ff6Mu5UI75c6+B3+lrD1FKaMjTbInBXPUWjVal2qFMvU7WJWGSjoHZ2TJgqg6Vy0
J2IaesQLht+efh2RHceAYGFA5aoK00t6/7Jse0G/4KRIqnwrJ82ALfuDGQyex8vk
d2uBBkFoyYEbAPlr9nuAd34V0CG+KOsnakCogd/wbfPCeH5ULFOfehsD/MI9xVFM
0c8dXyc9XKaYvnsAdEXcyE9PEmVr8N8lZlSuS8MRmsZFmxj0hoLUvd9yQD9asSco
NJC8dIjxnGZ6sHLz8AoONC1YFbfYrOZhSfCjK1tybcJhk3/nL2smdm2QZCSqaNPp
UqpjlCPtzr5k/5b+8A==
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:51 2026 by rpki-client