Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: +rAsMQe3dRhba6tYs/Ujc9Y7cfI97PdXhBKP04V7a0Y=
Subject key identifier: D1:6D:17:CD:18:1F:B1:C4:7D:4C:1B:83:33:62:07:23:C0:2A:F1:8C
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019CAAC5FEF8366E5AFE2F8C94B60630EBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: EGcRJIW1Ucymy6GJkPmrKbU95JrZNT6yJzpggTDWRAE=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fe:f8:36:6e:5a:fe:2f:8c:94:b6:06:30:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=d16d17cd181fb1c47d4c1b8333620723c02af18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:4c:40:30:1b:7c:0d:41:08:b7:81:ea:97:
27:4b:cc:dd:02:09:66:bf:2d:26:e3:ab:d4:de:9b:
fa:d4:cd:61:f3:45:df:38:15:33:b4:75:32:79:37:
63:dd:d8:c9:b4:f3:e8:81:3a:6e:83:4f:07:93:48:
33:f4:8f:9f:80:ac:d2:d4:08:69:b2:f5:67:7e:e5:
1c:3e:ff:ae:47:49:8d:81:2d:c7:dc:8a:08:cf:14:
c0:8b:14:c1:73:9e:23:5c:ac:23:5f:f7:2d:5c:05:
86:1f:77:47:f2:1d:4e:9d:ba:25:f1:6a:7a:49:0a:
b8:b7:83:92:ab:d2:c4:85:1a:68:a8:22:de:d7:51:
c6:ba:ab:1d:58:60:29:6d:21:fe:91:bf:56:63:f0:
6a:fd:f0:d7:65:47:79:50:d4:aa:40:d3:01:b4:44:
64:8a:0d:4e:3d:b9:30:ca:ab:08:88:f9:62:fd:01:
8e:0b:4c:0d:12:d8:f8:00:07:7a:6a:2f:fe:97:73:
3f:e5:1f:99:19:af:bb:62:46:41:38:07:67:df:5e:
cd:51:6f:c6:96:3d:dd:e2:d2:31:cf:d0:6f:0d:95:
0e:a1:b0:cc:2f:b2:e7:f6:e1:93:a4:8d:0e:2f:24:
43:35:db:c7:1a:c4:5e:ef:39:f2:07:fd:d7:a1:92:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:17:CD:18:1F:B1:C4:7D:4C:1B:83:33:62:07:23:C0:2A:F1:8C
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:95:6b:be:41:2e:b9:44:3b:9c:47:c0:35:1b:19:66:cf:0c:
44:c9:71:fa:3e:c9:27:6b:de:60:2f:f9:bf:32:4a:c0:20:aa:
62:b2:71:2f:5b:8d:21:89:4e:21:1a:9a:7f:c7:c6:a6:f0:ad:
92:cb:1c:3f:1c:52:64:14:8c:dd:9a:40:8a:01:53:11:68:01:
31:23:88:99:ff:34:55:ee:65:ce:0a:51:37:e4:67:08:08:ae:
2c:34:a5:b5:a5:68:f0:ef:8d:24:57:97:3e:a9:f5:76:02:ca:
47:f8:04:38:83:75:ed:cf:91:af:c1:ff:17:08:68:0d:d9:3f:
60:a9:95:e9:9f:4c:88:4b:0a:e1:24:80:6a:af:3b:e3:5e:9b:
c2:d6:b4:92:f0:07:8c:80:f4:db:74:8d:5b:04:56:c2:f2:33:
e7:8b:7f:69:9e:65:f1:0b:a1:00:c9:19:a2:25:56:98:fe:da:
4a:35:3b:9f:5f:a3:c3:ca:7d:6d:6d:2b:65:ce:06:df:e1:ec:
1c:94:b2:7b:1c:cd:bd:ca:31:f7:59:c1:e8:75:98:91:c7:a9:
9a:49:26:b1:78:6b:3d:79:e5:3f:cd:07:20:e9:a4:70:59:b2:
c1:70:bc:f3:00:3b:65:2f:89:21:38:80:b1:56:4c:ad:73:4d:
f4:71:84:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxf74Nm5a/i+MlLYGMOuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwMzAxMTkwMDI4WhcNMjYwMzAyMTkwMDI4WjAzMTEwLwYDVQQD
EyhkMTZkMTdjZDE4MWZiMWM0N2Q0YzFiODMzMzYyMDcyM2MwMmFmMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrFMQDAbfA1BCLeB6pcnS8zdAglm
vy0m46vU3pv61M1h80XfOBUztHUyeTdj3djJtPPogTpug08Hk0gz9I+fgKzS1Ahp
svVnfuUcPv+uR0mNgS3H3IoIzxTAixTBc54jXKwjX/ctXAWGH3dH8h1Onbol8Wp6
SQq4t4OSq9LEhRpoqCLe11HGuqsdWGApbSH+kb9WY/Bq/fDXZUd5UNSqQNMBtERk
ig1OPbkwyqsIiPli/QGOC0wNEtj4AAd6ai/+l3M/5R+ZGa+7YkZBOAdn317NUW/G
lj3d4tIxz9BvDZUOobDML7Ln9uGTpI0OLyRDNdvHGsRe7znyB/3XoZIzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFtF80YH7HEfUwbgzNiByPAKvGMMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5VrvkEu
uUQ7nEfANRsZZs8MRMlx+j7JJ2veYC/5vzJKwCCqYrJxL1uNIYlOIRqaf8fGpvCt
ksscPxxSZBSM3ZpAigFTEWgBMSOImf80Ve5lzgpRN+RnCAiuLDSltaVo8O+NJFeX
Pqn1dgLKR/gEOIN17c+Rr8H/FwhoDdk/YKmV6Z9MiEsK4SSAaq87416bwta0kvAH
jID023SNWwRWwvIz54t/aZ5l8QuhAMkZoiVWmP7aSjU7n1+jw8p9bW0rZc4G3+Hs
HJSyexzNvcox91nB6HWYkcepmkkmsXhrPXnlP80HIOmkcFmywXC88wA7ZS+JITiA
sVZMrXNN9HGE+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:32 2026 by rpki-client