Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: ol2WpIGsjRiR7gQidcI54k7Z+kclPCKbhnCznXDeDoU=
Subject key identifier: A0:29:19:25:39:2B:73:1B:50:15:5B:70:96:61:B7:3C:7E:95:DB:26
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019CABD91B44FACF2BA76758EC53FD0066CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 136E
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: Q9XL4NPAzca4q1Coa7TPQMGCuCdPb8ADLbdAtDhjY9U=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1b:44:fa:cf:2b:a7:67:58:ec:53:fd:00:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=a0291925392b731b50155b709661b73c7e95db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:b3:96:c4:c4:eb:d5:a1:60:94:54:82:61:
23:66:30:34:c7:56:b1:6c:87:e2:88:df:2d:82:dc:
1d:60:63:a7:16:a6:29:a7:e2:61:89:92:3e:e9:c6:
30:39:3b:fe:cc:98:08:40:bb:11:9e:d9:1b:b5:9b:
10:00:16:ea:09:ec:6b:4b:a5:64:06:72:64:cf:62:
d8:84:fb:a9:f5:ed:68:ad:a9:29:02:80:73:e7:89:
67:97:79:8e:7a:9b:e6:d7:e2:9d:85:1e:b1:5f:36:
1b:bf:05:db:e3:87:5f:fd:d7:60:be:20:79:8c:75:
24:67:a3:fa:3a:e0:2f:bb:bb:4f:73:6a:ae:45:d0:
cd:90:76:ff:cc:6c:27:da:6a:2f:f6:97:8d:b0:ba:
8e:10:6a:b8:b8:3a:21:6d:51:95:40:fd:0e:d4:be:
00:27:9e:5d:db:54:87:87:86:5f:b2:00:81:42:62:
6d:a7:a4:67:e4:24:88:3a:73:52:3c:20:ce:54:61:
dd:f3:92:be:03:ad:b3:0a:e6:a8:c7:a5:be:8a:18:
00:4c:d7:ce:cb:c8:4f:e9:46:b6:28:47:48:9f:d3:
41:90:29:29:50:b9:28:2b:93:dc:9f:d7:90:5d:61:
85:96:bf:13:b7:48:8c:ec:af:29:1d:b2:d5:1b:15:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:19:25:39:2B:73:1B:50:15:5B:70:96:61:B7:3C:7E:95:DB:26
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:aa:1f:74:d3:a5:e4:a9:27:1c:66:95:9e:98:95:b0:82:
77:3d:34:4e:c7:f8:75:2c:40:9b:80:48:88:a7:89:73:d2:95:
1a:0c:1d:81:1a:6b:78:44:74:ee:22:9c:fc:e5:69:d7:9e:7e:
8c:04:b1:af:33:cf:1e:0a:82:29:53:2e:1d:b6:f1:dd:f1:0d:
07:01:6f:a9:e8:35:36:54:ce:0f:0a:ee:06:97:fb:42:4c:a1:
c9:60:5e:b2:fe:64:35:85:ba:0d:f6:36:37:8e:bd:ee:ca:9b:
e1:be:cc:5c:c2:51:6c:1f:26:34:e9:73:5d:23:ab:36:78:1d:
5d:0f:dd:0f:be:4b:82:f0:d0:ff:8c:20:bf:1b:bd:07:ed:68:
f4:85:5c:b6:52:cb:6e:41:d2:ec:03:8f:94:63:52:3b:5f:15:
c0:9b:d2:3e:47:e9:70:56:da:11:f9:d3:cd:40:9e:74:ad:53:
f7:59:00:aa:67:41:53:50:3d:7b:c9:23:60:40:f5:41:08:36:
a9:03:12:9c:48:8d:9f:39:b0:1d:bb:d8:07:bf:50:93:e3:83:
38:f0:5a:5c:83:90:25:c6:d3:6b:84:24:d0:51:cf:c1:dc:14:
1e:a0:92:ad:26:a1:72:e2:e4:72:4e:68:93:76:21:e2:76:2e:
43:48:dc:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyr2RtE+s8rp2dY7FP9AGbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5
YzY5MzQwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
EyhhMDI5MTkyNTM5MmI3MzFiNTAxNTViNzA5NjYxYjczYzdlOTVkYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SizlsTE69WhYJRUgmEjZjA0x1ax
bIfiiN8tgtwdYGOnFqYpp+JhiZI+6cYwOTv+zJgIQLsRntkbtZsQABbqCexrS6Vk
BnJkz2LYhPup9e1orakpAoBz54lnl3mOepvm1+KdhR6xXzYbvwXb44df/ddgviB5
jHUkZ6P6OuAvu7tPc2quRdDNkHb/zGwn2mov9peNsLqOEGq4uDohbVGVQP0O1L4A
J55d21SHh4ZfsgCBQmJtp6Rn5CSIOnNSPCDOVGHd85K+A62zCuaox6W+ihgATNfO
y8hP6Ua2KEdIn9NBkCkpULkoK5Pcn9eQXWGFlr8Tt0iM7K8pHbLVGxVekwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKApGSU5K3MbUBVbcJZhtzx+ldsmMB8GA1UdIwQY
MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh
LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4
OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIOq
H3TTpeSpJxxmlZ6YlbCCdz00Tsf4dSxAm4BIiKeJc9KVGgwdgRpreER07iKc/OVp
155+jASxrzPPHgqCKVMuHbbx3fENBwFvqeg1NlTODwruBpf7QkyhyWBesv5kNYW6
DfY2N4697sqb4b7MXMJRbB8mNOlzXSOrNngdXQ/dD75LgvDQ/4wgvxu9B+1o9IVc
tlLLbkHS7AOPlGNSO18VwJvSPkfpcFbaEfnTzUCedK1T91kAqmdBU1A9e8kjYED1
QQg2qQMSnEiNnzmwHbvYB79Qk+ODOPBaXIOQJcbTa4Qk0FHPwdwUHqCSrSahcuLk
ck5ok3Yh4nYuQ0jcxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:00 2026 by rpki-client