Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: LXMzuJ0b0a3s1kYDd6SuEg3XFNjIkWzL7y71kZJ7el0=
Subject key identifier: 48:E3:29:1F:8F:AD:3C:4D:25:52:E9:00:53:3C:DF:65:09:47:C2:9D
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019CAF47A15D52AF815841911A026C27854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 03D2
Signing time: Mon 02 Mar 2026 16:00:32 +0000
Manifest this update: Mon 02 Mar 2026 16:00:32 +0000
Manifest next update: Tue 03 Mar 2026 16:00:32 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: FKiAZq24DzdzdXlK5/HoHf4GToxOcGid2DjBXWvl5uQ=)
2: zTtjoNNmqNJk4uedDe7ahXQuOF8.roa (hash: dHODXqFZoANMRWjrQgYBV+M06zr2Vxc9B/4+ABxunPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:a1:5d:52:af:81:58:41:91:1a:02:6c:27:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Mar 2 16:00:32 2026 GMT
Not After : Mar 3 16:00:32 2026 GMT
Subject: CN=48e3291f8fad3c4d2552e900533cdf650947c29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:50:2f:21:7e:45:d4:dc:df:a5:36:d0:0c:
58:1f:67:5c:8a:df:48:20:b4:bb:f1:d7:f0:59:df:
94:d1:25:7b:25:a5:5a:89:34:5c:fc:cd:ee:73:fe:
78:4a:cb:e9:8c:2e:2b:e4:05:f4:4b:d2:c8:e5:82:
de:27:f9:a5:3c:b8:b5:35:ef:29:b0:85:f1:de:b2:
1a:44:7b:f1:8f:1e:8f:83:d3:ff:99:97:66:ae:fe:
5c:81:68:b1:5e:17:dc:d2:93:f7:45:2f:a3:2f:95:
bc:c8:81:db:69:d2:9d:82:bb:7b:f4:99:85:ef:cb:
74:90:38:90:39:44:72:bd:4c:87:eb:c3:dc:77:f4:
da:a0:d4:84:ac:6d:e5:8e:21:79:55:05:c8:66:d9:
0a:e2:35:2b:d4:e5:47:93:d0:0d:b3:af:75:72:24:
4b:d9:61:0d:0e:2c:9a:6b:ee:66:43:cc:18:2e:f5:
81:4e:9b:2c:31:eb:de:52:58:30:4d:cf:1b:c0:3c:
16:4c:90:58:5c:ac:8c:49:cc:09:0c:e7:34:d9:c9:
52:02:9f:9f:08:a4:a2:71:9f:fe:f5:74:68:19:ed:
8a:2a:52:72:e8:d3:8e:48:a4:bc:02:7a:4a:18:01:
70:e4:32:14:a5:e8:85:79:90:bc:aa:37:af:2c:e4:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:29:1F:8F:AD:3C:4D:25:52:E9:00:53:3C:DF:65:09:47:C2:9D
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:66:d8:61:88:ab:4c:69:45:83:d7:89:b0:ab:00:62:ce:6b:
c7:d1:5d:2b:ed:4c:a9:e6:d6:9f:63:a9:b4:8d:36:6d:7d:3d:
c0:74:37:40:e2:c8:8b:44:f8:35:9b:cf:e7:3a:71:b2:6d:5d:
59:2b:88:ac:75:81:1f:e4:3b:f7:21:a3:3e:3d:77:ec:ac:78:
0d:e1:2b:4e:dd:3a:ca:5f:5f:c3:c2:69:97:90:f7:1f:b2:36:
e2:98:6b:c3:24:33:53:30:44:29:79:f1:e4:45:a1:01:6b:a8:
21:1e:dc:ac:30:16:b5:50:cc:2e:33:54:eb:85:19:b4:a5:44:
1e:c2:78:55:fa:e4:ff:ba:7f:f2:27:6a:ab:70:df:c1:a8:24:
f0:01:b7:1e:e2:b6:01:f5:7b:11:fc:bd:ca:45:50:e6:7f:ff:
0f:94:e9:3c:f9:1c:4d:3f:1b:5e:96:b1:99:7a:a2:d9:c0:f2:
d3:c7:be:f1:fc:0b:e2:01:7a:10:b8:8c:db:2a:64:e2:93:bb:
38:59:d5:8a:e4:4b:3c:ed:a8:33:db:24:22:5d:58:82:83:0c:
25:b0:6a:0a:84:33:70:dd:45:91:c8:07:34:22:0b:9c:cb:ba:
fb:3a:94:d7:3e:9c:71:74:b1:b5:68:57:ef:2b:da:fc:f4:f1:
c8:58:f5:c0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyvR6FdUq+BWEGRGgJsJ4VLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNWUyZWVhZTgyZWVmOWI2NTdmZTI3OTUyNjcyNjEwMjBm
OTQ0YzkwHhcNMjYwMzAyMTYwMDMyWhcNMjYwMzAzMTYwMDMyWjAzMTEwLwYDVQQD
Eyg0OGUzMjkxZjhmYWQzYzRkMjU1MmU5MDA1MzNjZGY2NTA5NDdjMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WRQLyF+RdTc36U20AxYH2dcit9I
ILS78dfwWd+U0SV7JaVaiTRc/M3uc/54SsvpjC4r5AX0S9LI5YLeJ/mlPLi1Ne8p
sIXx3rIaRHvxjx6Pg9P/mZdmrv5cgWixXhfc0pP3RS+jL5W8yIHbadKdgrt79JmF
78t0kDiQOURyvUyH68Pcd/TaoNSErG3ljiF5VQXIZtkK4jUr1OVHk9ANs691ciRL
2WENDiyaa+5mQ8wYLvWBTpssMeveUlgwTc8bwDwWTJBYXKyMScwJDOc02clSAp+f
CKSicZ/+9XRoGe2KKlJy6NOOSKS8AnpKGAFw5DIUpeiFeZC8qjevLORtjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEjjKR+PrTxNJVLpAFM832UJR8KdMB8GA1UdIwQY
MBaAFPteLuroLu+bZX/ieVJnJhAg+UTJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xNHU2dWd1NzV0bGYtSjVVbWNtRUNENVJNay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvY2MwNjkyLWNjOTktNDU0NS1iYzUw
LWVhZjNkZGIwYTFiYi8xLzEtMTR1NnVndTc1dGxmLUo1VW1jbUVDRDVSTWsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUxL2NjMDY5Mi1jYzk5LTQ1NDUtYmM1MC1lYWYzZGRiMGEx
YmIvMS8xLTE0dTZ1Z3U3NXRsZi1KNVVtY21FQ0Q1Uk1rLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGbY
YYirTGlFg9eJsKsAYs5rx9FdK+1MqebWn2OptI02bX09wHQ3QOLIi0T4NZvP5zpx
sm1dWSuIrHWBH+Q79yGjPj137Kx4DeErTt06yl9fw8Jpl5D3H7I24phrwyQzUzBE
KXnx5EWhAWuoIR7crDAWtVDMLjNU64UZtKVEHsJ4Vfrk/7p/8idqq3Dfwagk8AG3
HuK2AfV7Efy9ykVQ5n//D5TpPPkcTT8bXpaxmXqi2cDy08e+8fwL4gF6ELiM2ypk
4pO7OFnViuRLPO2oM9skIl1YgoMMJbBqCoQzcN1FkcgHNCILnMu6+zqU1z6ccXSx
tWhX7yva/PTxyFj1wA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:34 2026 by rpki-client