Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: 17uBPdhm+1lujXWCXtPmfoUHxPq0U65gYPRUh6PFyn4=
Subject key identifier: C3:02:26:AF:A7:FC:A2:E1:09:CA:2F:D8:F1:FA:F7:4C:EF:81:DF:D4
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 019CAA584CEF70BD0D05F8FE3585D17F28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: dBi9ouJ752k+xs4/57fHN7zIbDnBTm17mLw71bhjRfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4c:ef:70:bd:0d:05:f8:fe:35:85:d1:7f:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=c30226afa7fca2e109ca2fd8f1faf74cef81dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:2d:0a:5c:a7:b5:f9:41:de:13:ed:75:fb:
00:2a:26:4a:2d:4e:14:24:0d:46:0b:7b:c1:bd:3a:
c3:3a:db:34:f9:c4:7a:a0:16:0b:c9:06:01:09:41:
87:a8:0b:7b:ce:e7:12:40:44:73:ef:2c:4b:e5:21:
5e:59:c9:82:2d:06:cf:56:7c:3c:c8:9a:29:75:a4:
6f:64:fb:7f:df:42:29:2b:c8:08:ff:a7:60:97:c0:
e8:92:1e:3d:66:df:8f:21:24:e3:0d:e1:c9:0e:09:
a5:6e:58:00:f9:34:62:c6:35:81:46:22:a1:b1:ec:
7e:11:48:89:11:29:dc:2a:fd:8c:48:e3:0e:5c:4e:
4b:e2:54:d7:07:97:82:ee:18:99:fe:f0:c3:95:61:
a3:bf:91:76:73:32:8a:e2:26:93:ca:19:59:5b:1a:
46:ff:2c:a5:a8:92:2b:36:c3:53:89:f9:ba:4d:e8:
8e:87:27:9e:00:04:cd:d9:6a:43:a4:32:80:09:ab:
9f:6a:2b:ad:88:43:2d:92:04:45:25:3b:d0:68:c1:
a4:ac:ab:6a:f8:f9:2a:a2:a4:c7:7f:86:9b:a7:39:
d6:42:ac:44:95:16:3c:10:25:6d:84:8a:7e:ac:12:
ec:20:9f:13:80:ce:9e:ad:5c:1a:a2:c6:5e:b2:0c:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:26:AF:A7:FC:A2:E1:09:CA:2F:D8:F1:FA:F7:4C:EF:81:DF:D4
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:63:6a:c7:bc:cb:6b:9e:8c:4f:2e:4e:08:3c:cc:7b:b9:fc:
4f:2b:a7:3c:30:ae:bb:a6:9c:6b:77:ed:57:50:df:2c:2b:26:
b7:b4:b4:27:64:97:57:15:86:2f:cf:25:a5:23:fd:20:56:3c:
95:a8:a1:19:d6:a6:0c:38:cf:21:b5:f8:5f:a4:80:f5:65:76:
d8:15:75:35:75:62:bd:55:e4:81:9d:53:50:b4:59:61:ba:ad:
31:0d:f9:78:d2:91:2d:70:4a:2f:0c:e9:ba:47:cb:93:18:63:
15:f8:63:30:91:3a:e7:dd:4b:f6:e8:13:2b:b9:6f:9e:96:b7:
6d:2e:15:a0:af:43:49:bf:be:25:cd:f6:5f:e8:c9:89:0b:88:
9d:18:c0:e0:f7:6b:2b:6e:a0:71:30:f2:ac:86:94:ab:9f:15:
f8:80:e2:15:66:57:04:54:b9:02:f5:a5:a7:00:aa:27:2b:5e:
a6:4b:04:45:52:d3:c5:93:fe:fb:ff:7c:78:44:80:93:52:92:
55:c7:f6:6d:09:65:ac:71:fa:f5:b6:18:c6:0f:47:76:49:88:
ec:be:cb:55:6f:9f:a3:cd:0e:08:bb:f2:eb:76:5d:fa:d8:4a:
61:c6:62:a0:bc:ed:80:4b:c9:42:2b:1d:cc:cc:26:28:e3:97:
56:d8:2e:fc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyqWEzvcL0NBfj+NYXRfyj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm
NDYyNWIwHhcNMjYwMzAxMTcwMDM5WhcNMjYwMzAyMTcwMDM5WjAzMTEwLwYDVQQD
EyhjMzAyMjZhZmE3ZmNhMmUxMDljYTJmZDhmMWZhZjc0Y2VmODFkZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/otClyntflB3hPtdfsAKiZKLU4U
JA1GC3vBvTrDOts0+cR6oBYLyQYBCUGHqAt7zucSQERz7yxL5SFeWcmCLQbPVnw8
yJopdaRvZPt/30IpK8gI/6dgl8Dokh49Zt+PISTjDeHJDgmlblgA+TRixjWBRiKh
sex+EUiJESncKv2MSOMOXE5L4lTXB5eC7hiZ/vDDlWGjv5F2czKK4iaTyhlZWxpG
/yylqJIrNsNTifm6TeiOhyeeAATN2WpDpDKACaufaiutiEMtkgRFJTvQaMGkrKtq
+PkqoqTHf4abpznWQqxElRY8ECVthIp+rBLsIJ8TgM6erVwaosZesgykZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMMCJq+n/KLhCcov2PH690zvgd/UMB8GA1UdIwQY
MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk
LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2
ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWNq
x7zLa56MTy5OCDzMe7n8TyunPDCuu6aca3ftV1DfLCsmt7S0J2SXVxWGL88lpSP9
IFY8laihGdamDDjPIbX4X6SA9WV22BV1NXVivVXkgZ1TULRZYbqtMQ35eNKRLXBK
LwzpukfLkxhjFfhjMJE6591L9ugTK7lvnpa3bS4VoK9DSb++Jc32X+jJiQuInRjA
4PdrK26gcTDyrIaUq58V+IDiFWZXBFS5AvWlpwCqJytepksERVLTxZP++/98eESA
k1KSVcf2bQllrHH69bYYxg9HdkmI7L7LVW+fo80OCLvy63Zd+thKYcZioLztgEvJ
QisdzMwmKOOXVtgu/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:14 2026 by rpki-client