Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: fI4ZDFODscjOd1dMAsBNwW/63RCmGLIbjdQYxl9eCvc=
Subject key identifier: 12:95:34:BC:4E:69:FB:08:1A:D9:43:E7:91:7A:63:D5:3C:F8:5E:D9
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019CACB45E45316B54F21B22834D342FC82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 07F2
Signing time: Mon 02 Mar 2026 04:00:27 +0000
Manifest this update: Mon 02 Mar 2026 04:00:27 +0000
Manifest next update: Tue 03 Mar 2026 04:00:27 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: LcshK72ODyFQPe06voCUyjqoblkrwMo9W/jFuoc88F8=)
2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:5e:45:31:6b:54:f2:1b:22:83:4d:34:2f:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Mar 2 04:00:27 2026 GMT
Not After : Mar 3 04:00:27 2026 GMT
Subject: CN=129534bc4e69fb081ad943e7917a63d53cf85ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:7b:b4:d1:13:e4:e4:70:15:58:a5:12:e2:
e7:6d:64:d5:1b:8f:72:95:55:a1:ab:08:55:9c:98:
2d:5f:17:7d:17:c2:2b:b7:ee:4b:6f:39:b0:7c:01:
15:81:d6:b5:6b:0c:21:5e:e9:2a:e8:83:e7:42:86:
ff:04:0a:24:db:fe:c1:89:2c:80:c6:d7:13:e4:b3:
3d:e3:33:6a:79:58:7e:21:67:8e:30:c8:0c:65:fd:
ea:c6:43:37:87:6b:24:c0:66:22:2f:d5:0d:7a:7c:
86:c1:d0:0f:21:61:ec:cf:4a:d4:bc:cd:0b:fc:97:
37:c9:3f:c5:9c:89:e9:bd:03:2e:fa:73:77:ed:92:
f9:7d:c9:bf:3e:41:77:bf:51:ce:de:a0:4d:b7:0e:
df:89:66:e3:42:05:e3:c9:f6:ab:f4:64:12:88:db:
bd:5b:21:27:43:30:a0:38:6d:2d:ad:48:41:58:41:
79:40:43:0b:c4:4b:1f:a5:b4:a8:00:c8:41:cb:d8:
29:35:23:3a:03:ac:cc:c1:f5:38:ea:e7:bf:f4:03:
01:8b:a3:6b:1e:77:c1:cd:be:46:e5:ad:5c:23:11:
e2:0a:ea:1d:83:66:dc:8a:cd:ae:f0:35:d1:b5:62:
7e:0c:56:ed:0a:be:f9:e1:9c:df:44:99:63:dd:67:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:34:BC:4E:69:FB:08:1A:D9:43:E7:91:7A:63:D5:3C:F8:5E:D9
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f1:a0:20:01:54:9c:ec:a1:f5:0b:4c:c2:a0:f4:39:2a:f4:
a8:b4:07:02:a1:48:4b:cf:7c:52:73:62:77:28:70:db:6d:f6:
f3:c3:f6:01:8b:2a:5d:05:fb:db:bf:9d:28:29:17:51:51:88:
c9:b4:1b:4c:64:15:d6:7f:35:e7:02:6d:51:29:b4:1b:ac:a5:
11:19:5b:94:4d:c3:d8:13:e6:0d:bb:1c:82:c0:21:12:c3:64:
76:9c:09:6e:d4:87:c9:f7:33:59:e8:61:70:e7:0d:bf:87:cf:
86:ec:4a:ba:42:f9:90:31:ec:8b:74:55:36:77:82:11:9e:1f:
ea:7f:de:cc:79:1c:81:7f:58:4c:92:d2:93:2a:92:90:d9:4f:
00:ec:86:46:02:92:ce:34:f9:32:b8:e3:fb:27:68:39:ff:69:
dc:38:be:2e:1b:c0:24:8a:46:66:5f:2f:8c:b0:72:50:8c:cb:
47:24:d6:e0:12:6d:5b:45:f5:3e:6e:aa:a4:18:85:65:c4:24:
46:4e:e1:b0:f5:26:bb:bc:94:00:12:26:fc:91:34:e2:13:18:
2d:c9:73:ec:bf:b0:25:45:94:78:5d:74:94:b2:c7:b3:0d:ac:
45:57:21:66:f2:50:36:bd:57:28:78:5b:1f:e8:93:b1:e1:3b:
0e:05:07:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZystF5FMWtU8hsig000L8gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm
YTBjZWIwHhcNMjYwMzAyMDQwMDI3WhcNMjYwMzAzMDQwMDI3WjAzMTEwLwYDVQQD
EygxMjk1MzRiYzRlNjlmYjA4MWFkOTQzZTc5MTdhNjNkNTNjZjg1ZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3F7tNET5ORwFVilEuLnbWTVG49y
lVWhqwhVnJgtXxd9F8Irt+5LbzmwfAEVgda1awwhXukq6IPnQob/BAok2/7BiSyA
xtcT5LM94zNqeVh+IWeOMMgMZf3qxkM3h2skwGYiL9UNenyGwdAPIWHsz0rUvM0L
/Jc3yT/FnInpvQMu+nN37ZL5fcm/PkF3v1HO3qBNtw7fiWbjQgXjyfar9GQSiNu9
WyEnQzCgOG0trUhBWEF5QEMLxEsfpbSoAMhBy9gpNSM6A6zMwfU46ue/9AMBi6Nr
HnfBzb5G5a1cIxHiCuodg2bcis2u8DXRtWJ+DFbtCr754ZzfRJlj3WfLXQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBKVNLxOafsIGtlD55F6Y9U8+F7ZMB8GA1UdIwQY
MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj
LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm
YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPGg
IAFUnOyh9QtMwqD0OSr0qLQHAqFIS898UnNidyhw223288P2AYsqXQX727+dKCkX
UVGIybQbTGQV1n815wJtUSm0G6ylERlblE3D2BPmDbscgsAhEsNkdpwJbtSHyfcz
WehhcOcNv4fPhuxKukL5kDHsi3RVNneCEZ4f6n/ezHkcgX9YTJLSkyqSkNlPAOyG
RgKSzjT5Mrjj+ydoOf9p3Di+LhvAJIpGZl8vjLByUIzLRyTW4BJtW0X1Pm6qpBiF
ZcQkRk7hsPUmu7yUABIm/JE04hMYLclz7L+wJUWUeF10lLLHsw2sRVchZvJQNr1X
KHhbH+iTseE7DgUHtQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:29 2026 by rpki-client