Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: JaV3J6j7/MieOAr3IsZL3qDA5bYzTK17UeKu59HgjK0=
Subject key identifier: 38:C4:FF:33:7D:4F:C1:10:44:B9:23:3A:C1:4E:60:E2:E6:5B:81:F8
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019CA9B3A9C20D8FBA8697954EEA8AA7D0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:49 +0000
Manifest this update: Sun 01 Mar 2026 14:00:49 +0000
Manifest next update: Mon 02 Mar 2026 14:00:49 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: o+OuhANEEZR0FeRguUD7vY+vobc/+BuhVDetwsMY+u4=)
2: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (hash: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8=)
3: oRqwFe3VNX-nfuj7iUR3S7koSy0.roa (hash: qiTN878gqiER6fqTmD5j2cm3Ln1rDVHVTApMOMHVgtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a9:c2:0d:8f:ba:86:97:95:4e:ea:8a:a7:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Mar 1 14:00:49 2026 GMT
Not After : Mar 2 14:00:49 2026 GMT
Subject: CN=38c4ff337d4fc11044b9233ac14e60e2e65b81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:ad:42:34:3c:96:56:6b:b4:d1:4b:1c:9a:
1f:b7:0c:e4:b3:36:0b:99:2c:0e:41:65:3b:af:7d:
eb:db:e5:44:e9:5f:f5:9b:94:3f:30:d7:b1:74:1f:
cc:f5:bd:67:82:09:65:e7:fe:da:2b:b1:ab:9e:35:
59:0d:71:1e:e9:2d:a3:28:e8:aa:cb:6b:6a:ec:eb:
e9:5b:3f:8d:aa:7f:bf:0d:35:a9:dd:39:df:ff:aa:
54:a8:9e:a6:7b:01:bf:58:95:22:55:2c:fa:7e:af:
45:4f:14:f0:51:4f:19:1a:3b:3c:da:ec:d1:38:ac:
d5:a9:1d:e0:0b:dd:71:0d:eb:6d:e0:a7:21:e3:d6:
63:e7:01:8e:f1:c8:02:2d:5d:4a:61:70:ce:60:35:
ab:f0:7a:13:10:b2:d4:c7:89:3b:72:fb:29:35:a4:
ed:98:bd:56:40:d7:72:d1:26:8e:4f:af:34:e6:9b:
b0:f1:cb:fb:f4:03:9d:ec:3b:a6:f6:84:f2:62:63:
55:19:d9:73:30:b8:34:d0:a0:b5:47:dc:f3:b3:3e:
d2:a2:b1:f3:c8:46:5e:11:a0:d3:6d:ed:84:6b:f4:
d0:e1:56:e1:79:5b:3e:fa:5c:a2:0c:4b:93:d1:ae:
2f:c2:36:b2:25:50:ee:cc:87:f6:37:12:1e:86:7d:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C4:FF:33:7D:4F:C1:10:44:B9:23:3A:C1:4E:60:E2:E6:5B:81:F8
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:83:27:68:c5:2c:9b:9d:23:8c:15:56:82:92:e1:23:7e:23:
11:04:1a:71:5e:0f:59:56:ad:95:3f:6b:df:de:c0:fa:ed:ef:
27:8f:87:4f:86:67:6f:aa:cd:d0:31:c8:ca:1d:fe:9b:96:cf:
34:45:07:bb:ee:a2:e3:d7:b6:77:09:18:2f:f9:6c:15:31:a3:
2e:ff:21:f5:74:0a:2d:c4:cb:da:04:d9:15:34:85:5d:2a:16:
ed:6a:6f:de:65:05:c1:f7:ac:06:95:00:5b:16:31:f9:00:27:
2f:1c:94:dc:72:f8:41:4f:12:26:29:1a:b9:55:e7:08:03:cc:
d6:7a:f0:9c:9f:70:1b:dd:8a:58:9d:05:6d:3d:2e:74:15:1d:
60:6e:e7:de:48:f2:f2:56:48:40:dc:b2:29:2c:1e:f9:b6:b5:
f8:f2:05:bf:cf:4c:d6:48:2d:88:cc:70:23:b2:0e:64:a3:69:
99:12:f6:e4:1b:e1:f2:a3:2c:6e:ef:f9:a3:7a:46:0c:a8:35:
db:9b:6f:59:59:c5:ac:ed:39:6f:57:a8:15:bc:ba:ec:07:16:
d9:d1:07:d4:bf:c2:36:c5:91:1b:05:5b:54:0d:11:f0:aa:6d:
82:26:4e:44:1a:fd:de:75:be:2c:a2:99:7e:1a:7f:bd:93:75:
30:0e:af:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps6nCDY+6hpeVTuqKp9DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4
OTZkNDgwHhcNMjYwMzAxMTQwMDQ5WhcNMjYwMzAyMTQwMDQ5WjAzMTEwLwYDVQQD
EygzOGM0ZmYzMzdkNGZjMTEwNDRiOTIzM2FjMTRlNjBlMmU2NWI4MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw6tQjQ8llZrtNFLHJoftwzkszYL
mSwOQWU7r33r2+VE6V/1m5Q/MNexdB/M9b1nggll5/7aK7GrnjVZDXEe6S2jKOiq
y2tq7OvpWz+Nqn+/DTWp3Tnf/6pUqJ6mewG/WJUiVSz6fq9FTxTwUU8ZGjs82uzR
OKzVqR3gC91xDett4Kch49Zj5wGO8cgCLV1KYXDOYDWr8HoTELLUx4k7cvspNaTt
mL1WQNdy0SaOT6805puw8cv79AOd7Dum9oTyYmNVGdlzMLg00KC1R9zzsz7SorHz
yEZeEaDTbe2Ea/TQ4VbheVs++lyiDEuT0a4vwjayJVDuzIf2NxIehn0PWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjE/zN9T8EQRLkjOsFOYOLmW4H4MB8GA1UdIwQY
MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt
ZTQ5YTllMDZjNzAwLzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw
LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIMnaMUs
m50jjBVWgpLhI34jEQQacV4PWVatlT9r397A+u3vJ4+HT4Znb6rN0DHIyh3+m5bP
NEUHu+6i49e2dwkYL/lsFTGjLv8h9XQKLcTL2gTZFTSFXSoW7Wpv3mUFwfesBpUA
WxYx+QAnLxyU3HL4QU8SJikauVXnCAPM1nrwnJ9wG92KWJ0FbT0udBUdYG7n3kjy
8lZIQNyyKSwe+ba1+PIFv89M1kgtiMxwI7IOZKNpmRL25Bvh8qMsbu/5o3pGDKg1
25tvWVnFrO05b1eoFby67AcW2dEH1L/CNsWRGwVbVA0R8KptgiZORBr93nW+LKKZ
fhp/vZN1MA6vfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:26 2026 by rpki-client