Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: /Bmh0Q7QJHxhpdNrlqyafrzbIacrF7ICDB+JLb+ez0Q=
Subject key identifier: 80:22:AA:10:5D:35:90:0B:12:A6:E5:CF:AC:A4:55:E4:43:54:83:C6
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019CAC7E3E10DE135536E0BBCAC2B98885F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 41
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: +JsmVcoyfOs2vEdTyYUGm8eOuvA0ShvC2i9JbqF6+wU=)
2: PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa (hash: M52yhP6y8g0o+VHUIMWLcgdfgxWY8wSI1j3oDTkEbrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3e:10:de:13:55:36:e0:bb:ca:c2:b9:88:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=8022aa105d35900b12a6e5cfaca455e4435483c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:d3:d9:de:c2:63:41:71:f0:21:b9:97:6e:
94:f1:9b:65:31:4d:31:0e:ef:37:6d:5a:bb:0a:76:
a3:2b:b7:1c:07:eb:0b:44:33:cd:f3:70:be:2b:5c:
e7:42:dc:23:63:1c:76:64:ce:25:55:cd:75:6f:e7:
6a:33:86:64:2e:ae:06:f8:2f:66:96:6c:32:82:dc:
df:2a:fa:5a:76:cc:34:da:e5:98:c9:f2:d1:d8:70:
6f:8d:59:b8:18:17:f1:fe:d7:c5:54:67:24:39:1a:
04:ef:2f:47:6f:6b:3b:0f:90:8d:f0:16:1c:de:ec:
42:f0:c4:24:b7:d5:af:22:b3:bb:79:c2:1a:fb:dc:
3c:39:e5:63:55:5b:ed:c7:e5:74:ae:e3:41:cc:29:
d1:81:f4:cc:30:e7:d4:f6:73:52:f3:49:95:ee:6c:
cb:fa:31:7b:15:3b:73:f7:51:03:24:37:7a:27:22:
d9:68:3e:1f:8e:ac:f1:b2:bb:fb:de:7a:b6:ca:7c:
94:26:a2:58:b8:80:e7:6e:22:a9:7c:6a:9f:fd:6d:
c7:f4:f1:b2:5e:9a:b7:12:88:15:6e:01:35:c2:f8:
97:6d:ff:01:02:fa:2f:2e:24:f7:7c:66:b6:be:3f:
1e:5b:5e:7d:66:27:6c:81:ba:49:48:ee:8e:93:0d:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:22:AA:10:5D:35:90:0B:12:A6:E5:CF:AC:A4:55:E4:43:54:83:C6
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:ac:9e:f4:94:b1:e7:09:90:04:50:b0:7c:a9:9c:55:28:
4c:60:3f:66:23:a9:42:34:a6:4b:b6:e0:e1:30:91:9d:ad:02:
27:77:04:6b:65:60:20:7f:1c:fd:e1:81:fd:3d:6c:4a:8f:7c:
b4:6f:1e:28:b9:1b:5a:d1:82:a9:ed:2c:c5:cd:53:83:37:69:
1f:89:8a:5d:a0:14:22:36:50:46:3d:bc:1c:71:a6:63:86:a7:
b5:38:c5:ae:c8:db:d9:24:1b:cf:cf:23:1e:f4:57:55:ba:80:
4a:43:bb:66:f7:44:95:bf:39:7e:66:c3:21:e8:bb:8c:36:87:
9b:6a:18:3b:4a:b7:de:c0:b4:61:f4:14:d1:54:84:4c:fc:71:
e8:bb:24:00:10:9e:eb:3d:0e:73:45:49:a3:82:6e:15:c1:bc:
fd:ff:29:fc:4f:d8:35:72:09:6e:54:0a:73:d5:db:17:fc:57:
b9:a7:7d:e7:a9:dd:ff:1a:b4:45:8e:3d:da:a9:ed:02:97:3e:
27:d8:92:d8:00:c6:9d:4f:9d:95:51:6c:c6:d2:de:45:d3:e9:
37:84:f7:d6:d5:2c:df:c6:df:83:d7:f5:f7:7c:f2:ae:a6:cb:
c3:ff:92:aa:8e:9e:61:98:d4:15:48:06:76:20:24:14:6f:b0:
96:85:32:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfj4Q3hNVNuC7ysK5iIXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U3YzdjMjE5Mjc3YTA3MmJhMjY5NTRkNWNhM2VjY2Vi
Mjk4NGEwHhcNMjYwMzAyMDMwMTIwWhcNMjYwMzAzMDMwMTIwWjAzMTEwLwYDVQQD
Eyg4MDIyYWExMDVkMzU5MDBiMTJhNmU1Y2ZhY2E0NTVlNDQzNTQ4M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWfT2d7CY0Fx8CG5l26U8ZtlMU0x
Du83bVq7CnajK7ccB+sLRDPN83C+K1znQtwjYxx2ZM4lVc11b+dqM4ZkLq4G+C9m
lmwygtzfKvpadsw02uWYyfLR2HBvjVm4GBfx/tfFVGckORoE7y9Hb2s7D5CN8BYc
3uxC8MQkt9WvIrO7ecIa+9w8OeVjVVvtx+V0ruNBzCnRgfTMMOfU9nNS80mV7mzL
+jF7FTtz91EDJDd6JyLZaD4fjqzxsrv73nq2ynyUJqJYuIDnbiKpfGqf/W3H9PGy
Xpq3EogVbgE1wviXbf8BAvovLiT3fGa2vj8eW159ZidsgbpJSO6Okw2r3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAiqhBdNZALEqblz6ykVeRDVIPGMB8GA1UdIwQY
MBaAFNbOfHwhknegcromlU1co+zOsphKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAt
OTNhZTBjM2UyNzM2LzEvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zM2M3NzEtNzcwNC00NmI5LWJjZDAtOTNhZTBjM2UyNzM2
LzEvMXM1OGZDR1NkNkJ5dWlhVlRWeWo3TTZ5bUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr2snvSU
secJkARQsHypnFUoTGA/ZiOpQjSmS7bg4TCRna0CJ3cEa2VgIH8c/eGB/T1sSo98
tG8eKLkbWtGCqe0sxc1TgzdpH4mKXaAUIjZQRj28HHGmY4antTjFrsjb2SQbz88j
HvRXVbqASkO7ZvdElb85fmbDIei7jDaHm2oYO0q33sC0YfQU0VSETPxx6LskABCe
6z0Oc0VJo4JuFcG8/f8p/E/YNXIJblQKc9XbF/xXuad956nd/xq0RY492qntApc+
J9iS2ADGnU+dlVFsxtLeRdPpN4T31tUs38bfg9f193zyrqbLw/+Sqo6eYZjUFUgG
diAkFG+wloUyvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:24 2026 by rpki-client