Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: Iw3ZNBR+i+zBgiuMGwM/5QLQpAAy0y3A7F8E0f7ZWnY=
Subject key identifier: D4:25:28:81:A3:F6:EB:55:59:3A:DE:DB:5E:D7:64:EE:5C:29:CE:E4
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019CADFE34C46EA73957747E3669BAC3AC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:43 +0000
Manifest this update: Mon 02 Mar 2026 10:00:43 +0000
Manifest next update: Tue 03 Mar 2026 10:00:43 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: bQpVTnpvjbH7v/gquPlOEZF7+YIvr+qiHDACSCp2YYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:34:c4:6e:a7:39:57:74:7e:36:69:ba:c3:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Mar 2 10:00:43 2026 GMT
Not After : Mar 3 10:00:43 2026 GMT
Subject: CN=d4252881a3f6eb55593adedb5ed764ee5c29cee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:cb:d0:0a:71:34:71:2d:8d:3d:cb:7a:2e:
b6:8a:ae:66:17:02:00:77:93:8e:6a:3f:f2:fe:52:
52:8a:24:a2:74:3f:24:52:f0:f7:9f:7c:23:4d:db:
29:fe:66:1b:89:fd:9a:82:84:69:ef:3e:26:96:30:
91:68:1d:13:a4:8b:63:8f:ec:44:d4:e9:54:89:81:
da:f6:79:d6:1d:e3:bd:2f:67:8b:3a:b6:b6:af:35:
a6:a5:bb:23:3b:cb:bb:8e:2e:8a:d9:ee:ff:76:a8:
09:7f:74:c1:38:cd:bb:ea:8e:bc:10:ae:6b:90:17:
a4:75:33:58:f5:1f:98:6b:0d:03:55:2b:9e:d7:5e:
65:3f:1d:2b:c7:99:2b:77:8d:b7:07:d0:99:67:2b:
a0:54:90:ba:f8:5b:23:09:eb:7f:45:21:05:84:92:
23:0f:87:af:ab:58:cb:97:1a:44:0e:35:c8:bb:9b:
c3:c1:3f:a8:a5:67:a9:e6:33:a5:dc:a9:00:22:e7:
d1:1e:bb:01:a0:62:ac:10:26:e2:11:29:87:fc:35:
36:6c:c2:bb:94:51:7b:24:69:ea:6a:41:7a:91:70:
96:a3:8f:be:7d:55:88:02:f8:5c:88:af:bc:b8:b8:
f9:cd:46:11:30:48:82:04:08:d0:32:6a:f8:f1:d6:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:28:81:A3:F6:EB:55:59:3A:DE:DB:5E:D7:64:EE:5C:29:CE:E4
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7f:9c:24:85:e8:39:06:d4:4a:0f:7f:eb:48:fb:b3:88:96:
56:28:92:94:60:61:1e:9a:29:19:62:00:08:c8:8a:6a:7d:05:
41:7d:67:cb:a0:58:ec:94:f7:75:46:dc:79:72:3d:d2:fb:43:
39:2c:58:23:fa:e3:69:99:7b:66:ce:e8:df:91:c0:6b:b2:93:
69:d4:35:a6:19:25:35:dc:24:9b:4e:76:34:b1:98:ca:dd:5a:
ba:23:9b:f6:f3:8b:9e:c9:5b:08:a2:94:9a:59:7a:d2:96:09:
4c:03:13:08:fa:53:17:3c:f5:72:12:b8:b7:cf:22:54:12:85:
19:06:dd:cb:36:36:e5:42:c8:3a:e1:e1:f7:b8:24:ae:82:4f:
d0:c7:18:91:bd:e2:39:94:3c:76:7d:a5:7f:31:0d:3d:73:8c:
ae:7f:b2:41:e8:a6:9d:39:a3:18:dc:f4:7f:52:8f:bb:30:88:
62:4f:78:6d:0d:87:16:71:48:4e:d0:75:38:0f:6f:b5:67:b0:
10:96:bf:91:61:0f:92:3f:00:6e:9d:63:ba:0c:0c:8a:0b:55:
ca:1b:41:8c:35:de:fa:cc:f7:64:f4:04:78:e9:5c:1b:3c:6b:
d2:9b:7a:ef:5e:e1:f0:91:2e:9d:1f:be:8a:c2:23:9b:de:26:
79:bd:da:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/jTEbqc5V3R+Nmm6w6xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl
MzAyZTIwHhcNMjYwMzAyMTAwMDQzWhcNMjYwMzAzMTAwMDQzWjAzMTEwLwYDVQQD
EyhkNDI1Mjg4MWEzZjZlYjU1NTkzYWRlZGI1ZWQ3NjRlZTVjMjljZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezL0ApxNHEtjT3Lei62iq5mFwIA
d5OOaj/y/lJSiiSidD8kUvD3n3wjTdsp/mYbif2agoRp7z4mljCRaB0TpItjj+xE
1OlUiYHa9nnWHeO9L2eLOra2rzWmpbsjO8u7ji6K2e7/dqgJf3TBOM276o68EK5r
kBekdTNY9R+Yaw0DVSue115lPx0rx5krd423B9CZZyugVJC6+FsjCet/RSEFhJIj
D4evq1jLlxpEDjXIu5vDwT+opWep5jOl3KkAIufRHrsBoGKsECbiESmH/DU2bMK7
lFF7JGnqakF6kXCWo4++fVWIAvhciK+8uLj5zUYRMEiCBAjQMmr48dahvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQlKIGj9utVWTre217XZO5cKc7kMB8GA1UdIwQY
MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt
MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh
LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZX+cJIXo
OQbUSg9/60j7s4iWViiSlGBhHpopGWIACMiKan0FQX1ny6BY7JT3dUbceXI90vtD
OSxYI/rjaZl7Zs7o35HAa7KTadQ1phklNdwkm052NLGYyt1auiOb9vOLnslbCKKU
mll60pYJTAMTCPpTFzz1chK4t88iVBKFGQbdyzY25ULIOuHh97gkroJP0McYkb3i
OZQ8dn2lfzENPXOMrn+yQeimnTmjGNz0f1KPuzCIYk94bQ2HFnFITtB1OA9vtWew
EJa/kWEPkj8Abp1jugwMigtVyhtBjDXe+sz3ZPQEeOlcGzxr0pt6717h8JEunR++
isIjm94meb3aFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:10 2026 by rpki-client