Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: Jvs//iCAH5YWYUAKrPbVzgFcdQ2J8fT32F3MElFfvvE=
Subject key identifier: 9F:94:10:28:63:DD:6E:A2:CF:D2:7E:E2:B7:A2:DE:CF:49:8B:0C:E8
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019CAE35F01C21BD651E7DE1E0D5196D75A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 15C0
Signing time: Mon 02 Mar 2026 11:01:36 +0000
Manifest this update: Mon 02 Mar 2026 11:01:36 +0000
Manifest next update: Tue 03 Mar 2026 11:01:36 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 21Cno0glgH8/QPQRnsOysuPyQqv5cTtHN2UovdiSxcY=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f0:1c:21:bd:65:1e:7d:e1:e0:d5:19:6d:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Mar 2 11:01:36 2026 GMT
Not After : Mar 3 11:01:36 2026 GMT
Subject: CN=9f94102863dd6ea2cfd27ee2b7a2decf498b0ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:24:7c:18:78:98:86:98:5a:c2:0b:f9:9a:
07:28:b0:77:d1:08:c1:54:17:17:d4:de:72:bf:d6:
cf:29:71:32:91:90:37:08:6f:9c:af:ec:46:85:6b:
81:6e:bd:9c:49:ac:06:d1:0b:ad:5b:7d:0a:9b:c2:
7e:55:6a:bc:2c:73:ee:7d:10:f5:be:81:de:b4:52:
10:7e:0b:34:bd:ec:c2:bb:62:9c:98:ec:3b:86:91:
d6:00:92:6f:1c:9b:84:53:e9:6d:64:36:7d:b0:fa:
66:33:0b:61:e0:8b:25:7d:ba:ab:e8:3a:c1:fe:67:
88:48:ba:24:62:67:7e:43:8a:0e:d1:b2:95:56:ff:
89:75:8a:c7:5e:da:6a:18:ff:5c:57:92:5d:ad:8d:
21:4b:1e:e5:d5:b8:66:66:25:bc:e9:42:49:ff:d8:
00:ed:ce:9d:5b:7a:30:9d:c0:d0:2d:50:5e:8b:13:
89:8d:0f:ab:15:98:90:09:a5:58:af:7b:25:50:55:
bf:3b:49:5d:47:21:e2:bb:63:e0:69:c8:ae:b1:89:
08:3f:d0:bc:4e:95:8e:e8:74:16:99:9f:e9:2f:91:
b0:8e:61:a8:7e:cd:f6:a0:87:a4:40:5b:5b:f9:13:
fa:17:07:dd:ff:72:c0:cc:06:27:68:25:8b:37:6f:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:10:28:63:DD:6E:A2:CF:D2:7E:E2:B7:A2:DE:CF:49:8B:0C:E8
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:36:61:85:54:69:33:46:49:cd:01:13:42:39:50:9e:24:02:
80:10:ee:23:ea:f1:fe:c3:88:ac:af:a8:b3:cd:89:a9:67:56:
70:80:04:1d:1c:37:7e:3b:d6:51:e2:50:3f:00:ad:86:6e:59:
4a:67:65:58:b5:6d:83:21:4c:03:24:95:7b:fd:25:bb:7e:85:
cc:fe:98:4e:2c:c1:1b:b8:67:85:50:a2:24:7c:f0:d9:3f:c0:
78:1a:d6:b8:cd:42:db:62:b6:0a:9d:13:ec:f8:3e:ed:d0:8b:
f0:7a:1e:5b:4a:fb:5d:e5:3c:7a:3e:1b:f2:9f:30:3a:62:a7:
ee:3c:dd:6b:11:40:ec:93:03:79:25:0b:85:0d:7e:10:81:e9:
0d:ac:64:44:ac:23:09:b9:19:30:d0:dc:21:33:3b:4c:52:76:
6c:3d:39:fc:e2:34:4c:b7:0b:14:33:72:f8:a7:fa:91:9b:23:
85:2f:a1:6d:33:55:92:db:0b:e2:55:43:29:1d:ef:6f:3d:61:
ec:c2:f5:8f:4e:f9:6a:09:da:dd:1e:60:83:89:32:86:7f:da:
fd:92:e4:4c:0f:2b:ec:82:2d:14:a4:87:e2:ff:3f:b1:92:cf:
08:7f:61:a5:36:2b:e7:34:2b:86:f5:fa:3b:60:de:45:7a:8b:
6f:81:0c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNfAcIb1lHn3h4NUZbXWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2
Y2U0NzkwHhcNMjYwMzAyMTEwMTM2WhcNMjYwMzAzMTEwMTM2WjAzMTEwLwYDVQQD
Eyg5Zjk0MTAyODYzZGQ2ZWEyY2ZkMjdlZTJiN2EyZGVjZjQ5OGIwY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyYkfBh4mIaYWsIL+ZoHKLB30QjB
VBcX1N5yv9bPKXEykZA3CG+cr+xGhWuBbr2cSawG0QutW30Km8J+VWq8LHPufRD1
voHetFIQfgs0vezCu2KcmOw7hpHWAJJvHJuEU+ltZDZ9sPpmMwth4Islfbqr6DrB
/meISLokYmd+Q4oO0bKVVv+JdYrHXtpqGP9cV5JdrY0hSx7l1bhmZiW86UJJ/9gA
7c6dW3owncDQLVBeixOJjQ+rFZiQCaVYr3slUFW/O0ldRyHiu2PgaciusYkIP9C8
TpWO6HQWmZ/pL5GwjmGofs32oIekQFtb+RP6Fwfd/3LAzAYnaCWLN29s8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+UEChj3W6iz9J+4rei3s9JiwzoMB8GA1UdIwQY
MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt
NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4
LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajZhhVRp
M0ZJzQETQjlQniQCgBDuI+rx/sOIrK+os82JqWdWcIAEHRw3fjvWUeJQPwCthm5Z
SmdlWLVtgyFMAySVe/0lu36FzP6YTizBG7hnhVCiJHzw2T/AeBrWuM1C22K2Cp0T
7Pg+7dCL8HoeW0r7XeU8ej4b8p8wOmKn7jzdaxFA7JMDeSULhQ1+EIHpDaxkRKwj
CbkZMNDcITM7TFJ2bD05/OI0TLcLFDNy+Kf6kZsjhS+hbTNVktsL4lVDKR3vbz1h
7ML1j075agna3R5gg4kyhn/a/ZLkTA8r7IItFKSH4v8/sZLPCH9hpTYr5zQrhvX6
O2DeRXqLb4EMLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:49 2026 by rpki-client