Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: fYMbaq0WRJ1IWu9Ggl161sR4WvXSB+SCVuMH1GrcS2E=
Subject key identifier: 1C:D2:11:A6:CF:AE:A3:1D:3B:0A:9F:F2:8B:A9:3E:59:3C:31:03:CE
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 019CADC834A78D505E2B436D59D969DC59E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:44 +0000
Manifest this update: Mon 02 Mar 2026 09:01:44 +0000
Manifest next update: Tue 03 Mar 2026 09:01:44 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: tLXR1a450APEETIv73sEP5sk4sODJm2/I45KXBR+dM4=)
2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:34:a7:8d:50:5e:2b:43:6d:59:d9:69:dc:59:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Mar 2 09:01:44 2026 GMT
Not After : Mar 3 09:01:44 2026 GMT
Subject: CN=1cd211a6cfaea31d3b0a9ff28ba93e593c3103ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:ef:e4:b0:6b:ee:32:fd:19:f3:d7:0a:d9:
8d:38:70:69:12:bc:0e:c8:29:2f:90:1d:e5:72:d2:
94:74:ca:9c:64:67:0e:51:61:b2:0e:1c:f3:46:80:
dc:07:31:ed:e1:54:5d:4c:c0:a4:00:cd:ff:ab:c1:
a7:4f:ea:96:56:65:01:13:02:8c:76:aa:85:a4:43:
37:37:3f:52:a0:62:10:94:32:44:f5:06:5c:25:9a:
9f:16:46:b6:df:cd:47:7f:df:94:96:44:3c:5a:bf:
c5:16:32:b4:66:9a:24:d0:7c:e7:6f:e0:17:cb:a9:
68:21:73:24:43:f7:79:73:41:f9:62:44:29:98:1f:
fd:81:9b:dd:75:6e:bb:e8:d4:dd:c5:a1:63:6c:d2:
7d:d5:85:3f:36:89:cf:8d:77:64:2e:e7:4c:58:65:
2e:23:a4:02:93:ef:41:19:e8:a0:95:9f:c5:05:66:
3e:7b:ff:92:c4:98:15:cc:8c:af:cd:ac:4e:b9:ef:
c2:62:bb:15:cc:0f:5e:de:43:21:8c:f7:b3:6b:f7:
5a:28:0c:b5:67:26:86:33:8a:de:45:a4:9a:6e:25:
f5:dc:8d:6e:8c:c6:8c:17:3a:f7:7b:e1:d8:f1:89:
e7:a5:b5:d5:d5:09:4f:ae:79:45:c2:8f:56:6f:9b:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:11:A6:CF:AE:A3:1D:3B:0A:9F:F2:8B:A9:3E:59:3C:31:03:CE
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:cd:ed:18:1f:4d:34:89:f1:4a:81:2b:8e:95:5a:da:16:
c7:ef:b6:24:6a:66:d6:d9:7e:cb:d1:74:8f:62:7a:5f:14:b0:
c9:9d:d2:9e:1c:61:2a:71:46:87:29:a3:fc:44:ff:ee:4e:3e:
61:71:24:74:da:52:af:d4:15:56:45:7c:75:8a:80:80:98:27:
d2:5d:f6:68:8b:4f:38:37:d8:d9:c2:5b:79:eb:f3:31:56:27:
3c:e8:da:0e:5e:6d:2a:78:1b:6b:f0:6c:53:ce:7c:20:89:f0:
51:48:0b:b9:50:c6:8e:0b:d0:ed:02:a3:30:1c:3e:61:05:ea:
3b:54:e0:38:fa:b9:2c:e9:70:e7:85:f1:3f:94:86:51:23:60:
fe:fd:b3:2d:5b:24:06:62:a7:f8:19:3e:d8:08:81:b9:98:4a:
8b:0a:70:51:f6:6f:d3:fb:e9:04:9a:bf:c0:9e:43:ef:5b:56:
74:33:de:60:91:b9:e4:31:54:7f:a7:15:7e:7b:07:e0:a5:c8:
38:e7:be:35:b4:df:37:b2:53:b2:00:9f:6d:31:b8:84:b7:61:
96:62:75:5c:f9:60:27:e5:6d:9b:a8:1c:25:3b:57:4e:fe:32:
e7:26:89:f6:36:f5:1a:fc:c0:a4:1c:bd:5d:08:ec:f4:88:09:
44:da:17:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyDSnjVBeK0NtWdlp3FnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2
YTBjYTUwHhcNMjYwMzAyMDkwMTQ0WhcNMjYwMzAzMDkwMTQ0WjAzMTEwLwYDVQQD
EygxY2QyMTFhNmNmYWVhMzFkM2IwYTlmZjI4YmE5M2U1OTNjMzEwM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2nv5LBr7jL9GfPXCtmNOHBpErwO
yCkvkB3lctKUdMqcZGcOUWGyDhzzRoDcBzHt4VRdTMCkAM3/q8GnT+qWVmUBEwKM
dqqFpEM3Nz9SoGIQlDJE9QZcJZqfFka2381Hf9+UlkQ8Wr/FFjK0Zpok0Hznb+AX
y6loIXMkQ/d5c0H5YkQpmB/9gZvddW676NTdxaFjbNJ91YU/NonPjXdkLudMWGUu
I6QCk+9BGeiglZ/FBWY+e/+SxJgVzIyvzaxOue/CYrsVzA9e3kMhjPeza/daKAy1
ZyaGM4reRaSabiX13I1ujMaMFzr3e+HY8YnnpbXV1QlPrnlFwo9Wb5s69wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzSEabPrqMdOwqf8oupPlk8MQPOMB8GA1UdIwQY
MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt
NzBjNjdmMTI2YmYyLzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy
LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddHN7Rgf
TTSJ8UqBK46VWtoWx++2JGpm1tl+y9F0j2J6XxSwyZ3SnhxhKnFGhymj/ET/7k4+
YXEkdNpSr9QVVkV8dYqAgJgn0l32aItPODfY2cJbeevzMVYnPOjaDl5tKngba/Bs
U858IInwUUgLuVDGjgvQ7QKjMBw+YQXqO1TgOPq5LOlw54XxP5SGUSNg/v2zLVsk
BmKn+Bk+2AiBuZhKiwpwUfZv0/vpBJq/wJ5D71tWdDPeYJG55DFUf6cVfnsH4KXI
OOe+NbTfN7JTsgCfbTG4hLdhlmJ1XPlgJ+Vtm6gcJTtXTv4y5yaJ9jb1GvzApBy9
XQjs9IgJRNoXMw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:24 2026 by rpki-client