Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: 5qvXOjRjPtGmzvWH8ss7JoXQT1+6PWvbA27bksVVwqI=
Subject key identifier: 85:9E:A1:81:C0:34:46:32:44:3F:AD:45:4E:73:BE:D0:61:7B:17:D8
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 019CAAFD32C6343EDC2BC9F43246E3EBD87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:46 +0000
Manifest this update: Sun 01 Mar 2026 20:00:46 +0000
Manifest next update: Mon 02 Mar 2026 20:00:46 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: H5zcKeamLKEOrYo7MoZxPQP+Bxdbr7AxM5MDSIJAztM=)
2: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (hash: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:32:c6:34:3e:dc:2b:c9:f4:32:46:e3:eb:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Mar 1 20:00:46 2026 GMT
Not After : Mar 2 20:00:46 2026 GMT
Subject: CN=859ea181c0344632443fad454e73bed0617b17d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:13:13:58:7f:87:64:c6:76:a2:ac:8c:a3:
f8:78:da:e1:fc:5a:48:1e:2c:37:4d:98:53:db:be:
bd:2d:66:a0:91:ba:c6:66:b7:11:0d:0b:6e:55:b4:
94:b1:7e:25:13:46:3f:59:66:eb:d1:fd:f5:6d:82:
a3:9a:38:01:c4:a0:60:35:5e:75:4d:73:6e:75:e1:
6d:36:90:a2:83:83:aa:41:a8:b9:83:e3:ac:69:25:
ee:88:86:49:a9:6e:53:a8:d5:6f:f1:8a:5c:3d:92:
52:5f:61:14:1b:78:ec:e8:38:61:64:7b:48:59:c3:
e5:5f:a1:30:6f:4a:c3:f5:2c:0d:6c:c2:1f:1b:8a:
84:0f:9e:32:cd:64:58:94:fe:94:f1:21:2f:82:48:
4a:be:ce:ac:ed:6f:6a:6a:bc:58:58:22:a4:0d:52:
f9:9e:0b:06:1f:bf:30:f7:fb:c5:c0:87:d8:67:bd:
86:c9:1a:f9:f3:ee:e7:8b:2b:7a:60:69:3f:68:75:
dc:a9:56:c5:06:b8:03:72:d7:29:10:c2:65:39:40:
77:82:15:9a:6f:f8:0f:12:2a:68:9c:93:f3:87:fd:
e7:6b:5d:24:1e:c4:59:dd:63:b9:11:2d:ab:dd:27:
54:bb:cf:8d:a9:6a:9b:04:09:7a:06:71:da:7c:64:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:A1:81:C0:34:46:32:44:3F:AD:45:4E:73:BE:D0:61:7B:17:D8
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:bb:19:63:4c:a5:ef:74:56:49:53:6d:c9:58:51:61:e3:
89:a6:90:bf:12:dc:74:12:da:1c:83:35:05:92:a6:e1:bf:e3:
a4:80:c9:92:99:9e:bc:d8:b4:65:b6:4f:c8:7a:d7:dd:67:6c:
99:d6:93:90:a7:86:58:d6:dd:14:68:a3:34:35:12:01:11:4f:
1e:73:d3:be:3d:7f:7f:4c:8f:79:3b:7e:4d:8c:26:ce:31:76:
ea:e2:9f:69:5d:98:df:30:4f:19:14:9b:72:7b:2f:ac:0f:92:
9f:b1:ca:df:63:77:f9:0a:15:11:d0:dd:2d:bf:8e:96:72:4a:
72:77:73:7a:c8:c1:a5:ea:e8:b1:4c:55:33:26:bc:07:0a:59:
98:8b:e7:26:52:cc:94:4b:9e:29:29:c4:6f:1c:f7:1a:61:22:
56:7d:c6:80:fc:b8:12:46:16:7e:d7:76:1d:7f:e1:29:e7:49:
fa:c8:cc:60:29:45:c8:55:19:fa:83:2a:fa:e1:68:a4:fc:4d:
16:a3:1a:7b:b3:4a:6a:48:96:33:c0:d7:c1:bd:31:31:95:ce:
f6:c7:51:13:73:b0:7d:4f:c5:97:49:46:45:8e:c8:d2:ea:48:
2f:9b:d5:8d:8e:30:db:f7:75:25:d9:89:d2:11:b1:16:80:0b:
40:5d:e5:c0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyq/TLGND7cK8n0Mkbj69h7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZGNlNjM3ZWZiMjgxOTQ3MTVhYzJhNzIxMjllMjA1NzFi
OTgzYWYwHhcNMjYwMzAxMjAwMDQ2WhcNMjYwMzAyMjAwMDQ2WjAzMTEwLwYDVQQD
Eyg4NTllYTE4MWMwMzQ0NjMyNDQzZmFkNDU0ZTczYmVkMDYxN2IxN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kTE1h/h2TGdqKsjKP4eNrh/FpI
Hiw3TZhT2769LWagkbrGZrcRDQtuVbSUsX4lE0Y/WWbr0f31bYKjmjgBxKBgNV51
TXNudeFtNpCig4OqQai5g+OsaSXuiIZJqW5TqNVv8YpcPZJSX2EUG3js6DhhZHtI
WcPlX6Ewb0rD9SwNbMIfG4qED54yzWRYlP6U8SEvgkhKvs6s7W9qarxYWCKkDVL5
ngsGH78w9/vFwIfYZ72GyRr58+7niyt6YGk/aHXcqVbFBrgDctcpEMJlOUB3ghWa
b/gPEiponJPzh/3na10kHsRZ3WO5ES2r3SdUu8+NqWqbBAl6BnHafGT45QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIWeoYHANEYyRD+tRU5zvtBhexfYMB8GA1UdIwQY
MBaAFPrc5jfvsoGUcVrCpyEp4gVxuYOvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10em1OLS15Z1pSeFdzS25JU25pQlhHNWc2OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNh
LTY0MTE3ZGIyYzRlMS8xLzEtdHptTi0teWdaUnhXc0tuSVNuaUJYRzVnNjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzU1ZmJjNS1iMmRjLTQ2MzktOWEzYS02NDExN2RiMmM0
ZTEvMS8xLXR6bU4tLXlnWlJ4V3NLbklTbmlCWEc1ZzY4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU+7
GWNMpe90VklTbclYUWHjiaaQvxLcdBLaHIM1BZKm4b/jpIDJkpmevNi0ZbZPyHrX
3WdsmdaTkKeGWNbdFGijNDUSARFPHnPTvj1/f0yPeTt+TYwmzjF26uKfaV2Y3zBP
GRSbcnsvrA+Sn7HK32N3+QoVEdDdLb+OlnJKcndzesjBperosUxVMya8BwpZmIvn
JlLMlEueKSnEbxz3GmEiVn3GgPy4EkYWftd2HX/hKedJ+sjMYClFyFUZ+oMq+uFo
pPxNFqMae7NKakiWM8DXwb0xMZXO9sdRE3OwfU/Fl0lGRY7I0upIL5vVjY4w2/d1
JdmJ0hGxFoALQF3lwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:54 2026 by rpki-client