Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: Wi8xfbSmkbMWb61Ab3PJd4SaPi9EYCkL+jI3Bw5IgUE=
Subject key identifier: 12:E4:11:88:BE:EA:60:1A:3E:D2:C5:2A:42:EB:F8:0F:62:4E:44:B1
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019CAAFCEE466E9B4CB91AF36E07B7D24FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0827
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: 29g0HfbPfIeVcRBqRYvzr4ysorfomvQwfMQX73Dc8ZE=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ee:46:6e:9b:4c:b9:1a:f3:6e:07:b7:d2:4f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=12e41188beea601a3ed2c52a42ebf80f624e44b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:b1:1b:a1:a5:31:4e:12:23:85:c3:b6:fe:
33:3e:9a:83:6c:66:b1:a0:2f:96:7d:9e:91:16:b1:
5b:c9:5f:cd:c7:db:14:ac:ea:47:fb:ce:e1:21:db:
93:55:24:74:60:f0:58:b3:33:3e:05:b1:23:5e:c5:
07:82:a8:59:bc:07:b0:33:2f:9e:d8:82:45:70:fc:
f5:3d:7c:69:a0:66:df:7a:ac:3d:38:3d:f8:af:3c:
82:83:e8:a3:4d:47:72:95:8f:fd:89:be:0e:2d:0e:
31:d2:0e:8f:a2:ab:2c:bf:1a:32:20:eb:90:ff:0b:
12:7e:4d:98:8d:b6:29:88:ba:b1:54:95:9f:23:3e:
4e:ec:9a:88:9f:7e:37:7d:1e:c2:2c:9f:d2:47:a4:
02:70:d8:40:23:8c:97:de:87:25:4e:24:73:a9:86:
f9:6b:7d:29:98:11:0a:06:07:0b:37:d6:d5:3b:df:
3d:91:d2:dd:53:11:93:03:7b:40:07:5b:37:0c:82:
aa:c9:e9:26:ab:44:67:94:4b:78:b5:b3:53:27:4e:
d2:19:21:56:97:57:aa:03:33:eb:4f:e4:70:df:b9:
c8:af:a8:0d:41:75:ea:0f:29:2d:ae:33:1b:3a:61:
7e:29:14:0f:78:0e:9a:44:db:39:cb:4f:0d:9e:c1:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:11:88:BE:EA:60:1A:3E:D2:C5:2A:42:EB:F8:0F:62:4E:44:B1
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:00:f9:da:af:de:ff:c2:59:02:15:74:53:6b:3d:6c:0f:
6a:ff:d4:9e:e6:cf:69:24:ae:f8:fb:eb:17:a9:2a:9c:a9:f7:
c7:05:84:04:24:c6:48:7c:3b:a7:5e:c3:0a:5b:f4:54:78:ae:
2e:2d:11:51:f4:e3:55:f1:d2:4b:1c:26:af:c3:45:c9:f1:69:
9b:b1:da:3f:17:67:5e:9e:65:46:4f:d1:3c:58:3c:ce:bb:d8:
b3:ba:4c:e9:ed:3b:bb:64:9a:d3:19:94:5c:73:3e:f0:9f:06:
2e:a7:97:9e:ac:4a:8c:31:da:ed:95:24:49:dd:c2:f8:be:23:
12:d6:61:5e:90:32:36:41:80:11:20:1a:94:61:c2:50:21:3c:
ea:bf:80:c0:fc:2a:0d:1b:17:7c:e4:ae:3a:70:9e:be:9a:5b:
bb:2c:73:ec:23:f8:82:51:d1:67:26:0c:6e:f4:4b:6f:d2:6d:
59:51:25:f4:4f:33:e5:d8:e8:85:44:64:63:c7:50:7e:e5:42:
62:78:a5:bb:2f:d0:46:26:7d:f3:b1:4d:cb:f8:d4:79:14:c5:
f2:6d:d0:75:53:40:96:00:38:23:d1:74:ff:d1:b7:4a:e3:56:
18:4d:81:76:00:ef:bd:99:98:e5:fd:fd:05:c5:12:7a:34:23:
d7:60:3d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/O5GbptMuRrzbge30k/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjI2NGUzODA1YTNkMTA0NTM3MzU3YTE0ZmY5MjZhYzAy
OTU5OWMwHhcNMjYwMzAxMjAwMDI4WhcNMjYwMzAyMjAwMDI4WjAzMTEwLwYDVQQD
EygxMmU0MTE4OGJlZWE2MDFhM2VkMmM1MmE0MmViZjgwZjYyNGU0NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyxG6GlMU4SI4XDtv4zPpqDbGax
oC+WfZ6RFrFbyV/Nx9sUrOpH+87hIduTVSR0YPBYszM+BbEjXsUHgqhZvAewMy+e
2IJFcPz1PXxpoGbfeqw9OD34rzyCg+ijTUdylY/9ib4OLQ4x0g6PoqssvxoyIOuQ
/wsSfk2YjbYpiLqxVJWfIz5O7JqIn343fR7CLJ/SR6QCcNhAI4yX3oclTiRzqYb5
a30pmBEKBgcLN9bVO989kdLdUxGTA3tAB1s3DIKqyekmq0RnlEt4tbNTJ07SGSFW
l1eqAzPrT+Rw37nIr6gNQXXqDyktrjMbOmF+KRQPeA6aRNs5y08NnsHrgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLkEYi+6mAaPtLFKkLr+A9iTkSxMB8GA1UdIwQY
MBaAFNXyZOOAWj0QRTc1ehT/kmrAKVmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYt
M2RjZWNiY2EzNzAyLzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81ZDYzMmEtZTQ1My00MmE1LTgwNWYtM2RjZWNiY2EzNzAy
LzEvMWZKazQ0QmFQUkJGTnpWNkZQLVNhc0FwV1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYoA+dqv
3v/CWQIVdFNrPWwPav/UnubPaSSu+PvrF6kqnKn3xwWEBCTGSHw7p17DClv0VHiu
Li0RUfTjVfHSSxwmr8NFyfFpm7HaPxdnXp5lRk/RPFg8zrvYs7pM6e07u2Sa0xmU
XHM+8J8GLqeXnqxKjDHa7ZUkSd3C+L4jEtZhXpAyNkGAESAalGHCUCE86r+AwPwq
DRsXfOSuOnCevppbuyxz7CP4glHRZyYMbvRLb9JtWVEl9E8z5djohURkY8dQfuVC
Yniluy/QRiZ987FNy/jUeRTF8m3QdVNAlgA4I9F0/9G3SuNWGE2BdgDvvZmY5f39
BcUSejQj12A9jw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:28 2026 by rpki-client