Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: Qe5B28++YmZBWooQWy4swSwZ9eZqqNUadXry9OJrtDE=
Subject key identifier: FC:BD:9A:84:3A:67:1D:94:1F:03:A5:A5:95:E3:39:23:21:CC:47:E0
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019D992B2EEDE287DE92B94626B7142D41BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1563
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: nltp0MDsj2YqY9aM985wjSujl/ey524UxAPde6nWZCQ=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2e:ed:e2:87:de:92:b9:46:26:b7:14:2d:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=fcbd9a843a671d941f03a5a595e3392321cc47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:d3:16:59:76:4c:d2:00:cf:aa:5a:4f:07:
50:98:8f:74:a3:44:42:cf:37:c8:01:b6:38:36:b9:
40:d8:78:30:43:a3:c5:06:8e:ea:92:96:56:e0:b3:
38:8a:99:1d:7d:df:80:8d:2f:40:85:53:3c:74:21:
1d:e9:b4:ea:10:0e:da:95:67:10:60:dd:72:f6:2f:
e5:09:09:a1:c1:17:98:51:f1:c5:32:97:a9:ae:c2:
8d:c4:19:d7:f9:c2:c9:00:57:d2:e5:01:1e:bd:0c:
0e:ff:98:00:11:df:74:49:96:3a:06:55:a3:38:02:
3a:e2:4e:0c:88:84:99:c2:b9:ea:d1:39:f9:1b:b5:
d1:61:b5:af:03:8d:16:25:a7:70:87:eb:53:86:12:
2c:c1:fb:8d:41:2a:ee:9c:7d:1c:4b:4c:ec:81:85:
55:35:84:c9:5e:05:5f:5b:4e:bd:15:d5:cf:af:4f:
9d:73:0c:e4:c9:7f:8c:44:52:5e:1a:5b:61:f5:c7:
11:7f:f3:72:98:96:c5:ce:4a:f8:bc:dc:e5:87:67:
ca:14:36:87:bd:05:55:e4:60:28:cd:d4:9b:51:7b:
3e:6f:7a:8b:4a:2f:5b:58:3d:51:12:73:fe:43:b7:
ee:62:c5:57:cb:2c:33:f4:84:e3:69:18:2c:fe:76:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:9A:84:3A:67:1D:94:1F:03:A5:A5:95:E3:39:23:21:CC:47:E0
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:45:6e:87:af:46:97:6a:55:94:b0:66:f9:3c:34:a3:e9:
b5:a2:be:60:06:16:6f:45:f0:51:a1:8a:9f:d3:cf:dd:75:3c:
4c:52:4a:fb:97:42:0c:f1:81:6f:05:81:16:0c:d6:4a:49:d0:
84:fa:03:05:29:22:53:24:00:20:57:59:6f:48:66:b4:64:22:
86:22:86:53:45:79:3b:29:6e:48:1e:de:d5:29:49:5d:53:99:
06:49:4f:f6:a1:27:5c:c7:74:12:0b:36:ba:d6:76:93:b1:73:
ee:cc:7a:5f:f3:bf:2d:d4:90:be:9e:92:48:24:1c:b0:14:bf:
1a:e0:5f:89:75:31:ef:bf:cc:01:28:36:95:e7:09:6a:f1:a2:
22:7e:e1:dd:84:f5:ba:e0:77:60:f9:85:f1:88:d7:89:48:d7:
8a:07:18:b6:72:b6:a4:b3:19:58:66:6f:2b:12:ea:50:39:8d:
90:1b:71:04:4e:c9:06:79:d6:b3:c3:e1:84:dc:da:8a:88:80:
aa:25:1b:1d:46:48:55:a4:5b:fb:71:0f:44:a7:75:a6:0b:44:
64:fc:f7:41:67:f1:72:67:74:fd:33:5d:c0:18:7c:27:a4:bd:
69:ca:6a:63:f0:00:54:49:64:08:c8:7d:dc:6a:ab:63:01:e3:
cf:21:ac:1d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2ZKy7t4ofekrlGJrcULUG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy
MjI4YTQwHhcNMjYwNDE3MDIwMDM3WhcNMjYwNDE4MDIwMDM3WjAzMTEwLwYDVQQD
EyhmY2JkOWE4NDNhNjcxZDk0MWYwM2E1YTU5NWUzMzkyMzIxY2M0N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BPTFll2TNIAz6paTwdQmI90o0RC
zzfIAbY4NrlA2HgwQ6PFBo7qkpZW4LM4ipkdfd+AjS9AhVM8dCEd6bTqEA7alWcQ
YN1y9i/lCQmhwReYUfHFMpeprsKNxBnX+cLJAFfS5QEevQwO/5gAEd90SZY6BlWj
OAI64k4MiISZwrnq0Tn5G7XRYbWvA40WJadwh+tThhIswfuNQSrunH0cS0zsgYVV
NYTJXgVfW069FdXPr0+dcwzkyX+MRFJeGlth9ccRf/NymJbFzkr4vNzlh2fKFDaH
vQVV5GAozdSbUXs+b3qLSi9bWD1REnP+Q7fuYsVXyywz9ITjaRgs/nZ1jQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPy9moQ6Zx2UHwOlpZXjOSMhzEfgMB8GA1UdIwQY
MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm
LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw
MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+pF
boevRpdqVZSwZvk8NKPptaK+YAYWb0XwUaGKn9PP3XU8TFJK+5dCDPGBbwWBFgzW
SknQhPoDBSkiUyQAIFdZb0hmtGQihiKGU0V5OyluSB7e1SlJXVOZBklP9qEnXMd0
Egs2utZ2k7Fz7sx6X/O/LdSQvp6SSCQcsBS/GuBfiXUx77/MASg2lecJavGiIn7h
3YT1uuB3YPmF8YjXiUjXigcYtnK2pLMZWGZvKxLqUDmNkBtxBE7JBnnWs8PhhNza
ioiAqiUbHUZIVaRb+3EPRKd1pgtEZPz3QWfxcmd0/TNdwBh8J6S9acpqY/AAVElk
CMh93GqrYwHjzyGsHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:47 2026 by rpki-client