Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: s+xKbWsnToqDsA4ABIQUaMFBrdZylZAijpq7d34hULU=
Subject key identifier: DA:AB:55:8A:94:35:33:BB:82:81:C5:44:05:34:46:2E:9B:35:E1:E0
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 019CAA8FEE742CD01AADF8A97D2F21ED1E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:25 +0000
Manifest this update: Sun 01 Mar 2026 18:01:25 +0000
Manifest next update: Mon 02 Mar 2026 18:01:25 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: OTPPGAcb2wQkv46sfxTGh9urEHiOkxTWqd/snqNhaP4=)
2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ee:74:2c:d0:1a:ad:f8:a9:7d:2f:21:ed:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Mar 1 18:01:25 2026 GMT
Not After : Mar 2 18:01:25 2026 GMT
Subject: CN=daab558a943533bb8281c5440534462e9b35e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:91:29:98:cc:c8:38:e7:6a:97:c9:99:53:
a3:44:55:9b:b8:d5:cd:41:79:d8:1e:df:d9:44:d3:
4b:03:75:74:5b:e2:dc:1f:3e:fc:f4:8b:9a:e4:27:
ab:d4:d5:24:9d:7d:1f:41:2c:6e:ec:af:19:ea:8d:
45:f7:5f:49:dc:fd:cb:28:fc:77:4c:e2:17:74:07:
71:89:d2:1f:d5:c0:d1:83:ca:13:da:3d:9c:83:9e:
d7:54:f9:30:66:cc:ca:9a:94:b4:8e:78:3f:f0:16:
0c:cf:04:b1:4e:a4:2d:d8:28:ce:63:d3:a1:86:6f:
a2:82:46:86:0e:76:27:ed:0a:1d:ca:3c:a5:21:49:
a0:ef:3a:a6:bd:0f:7d:ee:d0:3d:3f:14:9b:37:47:
f4:1e:73:b9:0a:d2:da:17:23:17:55:ce:35:e6:50:
a6:12:a3:89:f3:bf:35:b2:5c:ae:f8:70:cf:82:81:
0a:77:d2:87:3d:b9:ce:03:cb:6b:eb:6b:1d:f7:e9:
a0:a1:b3:a8:45:fa:74:69:5e:40:2d:bf:7a:2d:93:
98:0b:03:0e:00:c6:f6:08:fd:5b:32:fc:fb:80:56:
e2:01:e2:5e:7f:cd:68:d1:93:79:e8:4f:95:11:af:
0b:6e:8c:00:e2:e1:d8:71:9c:74:a4:50:a4:34:b9:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:55:8A:94:35:33:BB:82:81:C5:44:05:34:46:2E:9B:35:E1:E0
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0a:ae:64:f6:0f:e0:c9:ea:79:5d:0d:4e:fd:fd:58:3b:7b:
1c:82:67:39:cc:e2:1d:9e:92:8b:3d:24:43:a1:6c:b1:6e:dd:
64:9a:f6:e0:96:a9:7e:96:cc:cb:42:78:74:70:e2:13:8a:5d:
df:21:8a:fe:2f:56:04:13:0a:ed:a9:fc:f9:9d:64:5d:ce:80:
37:68:d0:16:31:66:7b:d6:e1:92:73:2c:2a:cf:2a:22:3b:29:
31:b6:72:54:f7:c6:f2:a7:e2:30:f9:78:54:d4:bd:9f:30:76:
0b:3d:55:22:d0:57:05:c2:2d:54:b1:d3:ae:6c:7e:99:62:64:
7b:dc:01:f2:04:fb:03:ff:c8:54:23:f8:87:72:80:77:a6:78:
b6:4f:a7:cc:19:3d:49:80:31:f1:40:63:1a:85:9b:45:b1:c8:
64:cd:b8:fc:25:4c:48:69:2c:6a:45:70:90:76:7a:c7:5b:ae:
45:e9:05:59:fd:e9:11:9c:9d:ab:2a:dd:fd:d3:09:37:a9:47:
d8:ad:e2:40:15:1e:65:2e:22:98:4f:71:a9:08:23:5d:45:21:
e0:b6:38:c8:8d:7e:bc:e9:34:c8:b0:62:e5:42:78:56:0d:a5:
84:77:51:56:7b:47:6b:07:7a:ae:5b:9d:97:7a:6b:e8:6d:10:
7b:4e:c7:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyqj+50LNAarfipfS8h7R4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx
MzdmZjIwHhcNMjYwMzAxMTgwMTI1WhcNMjYwMzAyMTgwMTI1WjAzMTEwLwYDVQQD
EyhkYWFiNTU4YTk0MzUzM2JiODI4MWM1NDQwNTM0NDYyZTliMzVlMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcWRKZjMyDjnapfJmVOjRFWbuNXN
QXnYHt/ZRNNLA3V0W+LcHz789Iua5Cer1NUknX0fQSxu7K8Z6o1F919J3P3LKPx3
TOIXdAdxidIf1cDRg8oT2j2cg57XVPkwZszKmpS0jng/8BYMzwSxTqQt2CjOY9Oh
hm+igkaGDnYn7QodyjylIUmg7zqmvQ997tA9PxSbN0f0HnO5CtLaFyMXVc415lCm
EqOJ8781slyu+HDPgoEKd9KHPbnOA8tr62sd9+mgobOoRfp0aV5ALb96LZOYCwMO
AMb2CP1bMvz7gFbiAeJef81o0ZN56E+VEa8LbowA4uHYcZx0pFCkNLnKbwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNqrVYqUNTO7goHFRAU0Ri6bNeHgMB8GA1UdIwQY
MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm
LTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3LzY3MWVlNC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVh
ZWIvMS8xLWQtQTk4YVM2RzA4MXJkVjBHejN6cHdUZl9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQqu
ZPYP4MnqeV0NTv39WDt7HIJnOcziHZ6Siz0kQ6FssW7dZJr24JapfpbMy0J4dHDi
E4pd3yGK/i9WBBMK7an8+Z1kXc6AN2jQFjFme9bhknMsKs8qIjspMbZyVPfG8qfi
MPl4VNS9nzB2Cz1VItBXBcItVLHTrmx+mWJke9wB8gT7A//IVCP4h3KAd6Z4tk+n
zBk9SYAx8UBjGoWbRbHIZM24/CVMSGksakVwkHZ6x1uuRekFWf3pEZydqyrd/dMJ
N6lH2K3iQBUeZS4imE9xqQgjXUUh4LY4yI1+vOk0yLBi5UJ4Vg2lhHdRVntHawd6
rludl3pr6G0Qe07Hzg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:57 2026 by rpki-client