Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: UDEfsoXk+JWGlU4QA8snMJUv4EjJ+dzVrrFxdiuBt5c=
Subject key identifier: CD:B5:AE:29:3E:F7:E2:1E:60:F5:2B:9A:06:05:5F:EB:FA:8B:9D:00
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019CAC0FF25975E4D91904B2CD71E7B6FD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: v4ugOw5iVDTmr4UAm4FZlfPtMdp7rw+HISGc3Nb43yY=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f2:59:75:e4:d9:19:04:b2:cd:71:e7:b6:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=cdb5ae293ef7e21e60f52b9a06055febfa8b9d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:c9:27:6f:b4:86:79:f7:b7:86:2a:2f:73:
de:31:8c:43:fd:16:84:38:2a:a5:42:f3:67:27:58:
ff:d3:5f:86:3a:50:e2:b1:ef:5e:9e:37:7b:41:36:
36:ef:ea:ea:27:b0:ee:41:1f:68:f5:dc:bb:b5:5b:
84:25:5f:00:41:17:0e:41:18:0d:4d:c6:94:64:20:
b0:8c:0b:6d:46:ef:5c:f5:df:4e:27:93:5f:04:0b:
2e:8a:db:55:05:ba:d0:01:ab:29:de:87:47:a3:ba:
1a:eb:5d:c6:5e:cd:44:e6:a5:3d:0c:8a:f2:1c:6f:
c5:e5:11:25:b6:6b:d6:cc:8d:9b:98:52:31:86:4d:
cc:89:5d:e7:32:69:ac:43:56:22:81:1e:a9:7e:de:
3c:62:d2:5f:62:61:24:88:38:b4:2e:cb:c5:a9:72:
be:f7:2c:7d:6d:e2:e1:0b:85:a0:56:a9:1a:67:58:
50:f7:f4:40:ab:56:fe:ec:dc:11:b4:b8:42:d5:14:
b7:d9:d4:0c:cc:0e:76:7c:4a:fa:87:32:ca:65:92:
17:8e:4f:81:9b:ce:9e:f1:a9:c9:7e:04:79:b9:24:
86:bb:a0:d7:0e:4c:c2:ff:7e:1c:73:a8:ba:cf:1c:
0b:02:36:83:92:d7:85:0b:32:10:79:6b:e5:ca:f3:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:AE:29:3E:F7:E2:1E:60:F5:2B:9A:06:05:5F:EB:FA:8B:9D:00
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:eb:76:54:93:e5:e7:61:f2:14:69:88:ec:da:72:4a:83:2e:
20:77:73:14:f1:3c:5a:91:1f:35:1a:cf:8c:16:75:ab:da:c7:
8f:8b:d9:05:28:36:03:a1:68:46:96:9c:13:ad:84:e7:fe:00:
f1:71:77:ae:aa:5a:95:27:d1:27:c2:55:15:1f:66:84:03:8d:
27:73:a5:69:25:1c:97:45:2f:e8:39:ce:ef:b0:d3:83:ae:f8:
e8:0e:f6:f4:fd:ab:a1:bd:ba:80:f4:a3:7e:7e:85:d9:c0:95:
72:ac:22:bd:bc:10:56:86:09:1d:d9:9a:91:fe:9e:1a:c2:96:
8d:55:01:49:9f:40:71:10:d2:00:3f:be:dd:08:b8:c1:3b:bd:
d7:d0:f1:e4:b8:4c:2f:e7:f0:e0:d4:13:f7:21:f1:13:8f:31:
d5:2b:90:cc:c5:14:a7:c0:7f:e2:92:f0:4f:56:02:1d:4b:f5:
cb:c6:27:f9:96:d7:04:6f:37:ad:e7:11:30:00:f1:cc:03:07:
6f:19:7f:5c:20:df:95:c5:59:ab:ef:06:fb:d8:e2:79:f6:79:
31:92:ae:a2:74:91:d2:6a:97:15:c3:97:3b:78:0b:4c:7c:f4:
d5:f5:4f:9b:24:bb:87:2e:0b:2b:ae:a2:52:93:e1:87:ac:7e:
b6:02:59:ef
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysD/JZdeTZGQSyzXHntv2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTY1OWU3ZWVmNmQ3M2I2ODZlYjFkMjk1NmM3MWYzYmU1
YmJkNzcwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
EyhjZGI1YWUyOTNlZjdlMjFlNjBmNTJiOWEwNjA1NWZlYmZhOGI5ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZnJJ2+0hnn3t4YqL3PeMYxD/RaE
OCqlQvNnJ1j/01+GOlDise9enjd7QTY27+rqJ7DuQR9o9dy7tVuEJV8AQRcOQRgN
TcaUZCCwjAttRu9c9d9OJ5NfBAsuittVBbrQAasp3odHo7oa613GXs1E5qU9DIry
HG/F5REltmvWzI2bmFIxhk3MiV3nMmmsQ1YigR6pft48YtJfYmEkiDi0LsvFqXK+
9yx9beLhC4WgVqkaZ1hQ9/RAq1b+7NwRtLhC1RS32dQMzA52fEr6hzLKZZIXjk+B
m86e8anJfgR5uSSGu6DXDkzC/34cc6i6zxwLAjaDkteFCzIQeWvlyvN3qQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM21rik+9+IeYPUrmgYFX+v6i50AMB8GA1UdIwQY
MBaAFPnmWefu9tc7aG6x0pVscfO+W713MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lWlo1LTcyMXp0b2JySFNsV3h4ODc1YnZYYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvZmI4ZGI1LTExODktNDM1MS1iZGU3
LTIwNmJjY2E3ODQyMS8xLzEtZVpaNS03MjF6dG9ickhTbFd4eDg3NWJ2WGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JmL2ZiOGRiNS0xMTg5LTQzNTEtYmRlNy0yMDZiY2NhNzg0
MjEvMS8xLWVaWjUtNzIxenRvYnJIU2xXeHg4NzVidlhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqet2
VJPl52HyFGmI7NpySoMuIHdzFPE8WpEfNRrPjBZ1q9rHj4vZBSg2A6FoRpacE62E
5/4A8XF3rqpalSfRJ8JVFR9mhAONJ3OlaSUcl0Uv6DnO77DTg6746A729P2rob26
gPSjfn6F2cCVcqwivbwQVoYJHdmakf6eGsKWjVUBSZ9AcRDSAD++3Qi4wTu919Dx
5LhML+fw4NQT9yHxE48x1SuQzMUUp8B/4pLwT1YCHUv1y8Yn+ZbXBG83recRMADx
zAMHbxl/XCDflcVZq+8G+9jiefZ5MZKuonSR0mqXFcOXO3gLTHz01fVPmyS7hy4L
K66iUpPhh6x+tgJZ7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:27 2026 by rpki-client