Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: qonxyGBINw+8Ch+XFRYb0kYzoGKJep+be/anm/WBDgI=
Subject key identifier: BB:CF:BB:E5:8C:7C:F6:9D:4B:CC:A2:25:FB:4F:1B:49:33:90:F6:71
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019CAB6B8D0736A4C2FE6D0460F52EAFC677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 1546
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: pUWFbbzVjwTrcl+5lqhNRda/1hmV0ZuJpi/pseCK4QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8d:07:36:a4:c2:fe:6d:04:60:f5:2e:af:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=bbcfbbe58c7cf69d4bcca225fb4f1b493390f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:74:da:59:59:81:54:c7:c7:1d:7d:1f:b0:
f9:ae:08:96:63:d0:04:c5:19:14:1b:5c:3f:8d:53:
cd:46:fb:41:da:ee:4c:76:2d:71:ee:9e:27:92:8a:
3f:ba:40:17:1b:d8:73:86:39:af:f5:fd:a6:ae:85:
e5:3c:07:f5:36:2f:cf:7f:f9:93:b9:56:af:4f:6c:
3c:08:5f:54:f7:7d:25:dc:ba:1c:69:e1:6e:24:aa:
2d:60:d0:96:ae:c3:f4:35:5b:60:d8:7e:19:63:b5:
51:9b:e1:13:41:62:84:c9:2d:4b:c5:8d:35:d7:d8:
98:f1:8b:1f:19:ca:9f:3f:81:ea:ce:6c:ae:20:30:
ec:06:6d:2e:e0:16:58:fe:9f:53:d1:73:85:0a:5b:
cb:9c:e2:82:df:2e:85:ff:82:73:5c:c1:23:32:de:
08:6d:dc:39:8e:58:ba:fc:fd:8c:c2:c7:26:4b:c9:
00:e5:3b:8a:14:7e:96:11:fa:c3:9a:da:66:2f:bb:
63:42:08:9e:ec:fc:22:36:0e:ea:3e:5c:18:53:d3:
fa:6d:b8:70:18:35:c3:42:5b:c2:c7:10:b2:c0:71:
ba:11:59:d3:64:da:f5:4a:d2:10:5a:84:01:03:05:
80:09:11:0b:e7:d4:68:ec:a3:68:c4:6e:a3:bf:0c:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:BB:E5:8C:7C:F6:9D:4B:CC:A2:25:FB:4F:1B:49:33:90:F6:71
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:36:50:d7:2f:bf:d1:51:9e:1e:76:93:1d:f9:a5:36:1e:17:
21:88:1e:cc:99:14:d4:41:04:43:ac:e4:26:d1:67:5b:c1:9b:
07:90:96:0e:d8:01:de:2a:d3:ea:b7:34:33:ef:b4:c7:27:97:
dd:69:d6:4d:c1:10:17:cf:a8:6b:9c:a2:8f:22:f6:89:2f:3a:
2d:c4:01:c6:dc:ad:da:3f:71:7c:29:45:9e:89:e2:6a:06:e3:
e5:ed:f9:f5:8f:dd:a3:b6:df:a3:3f:c4:1d:4a:5d:96:6b:77:
ba:cc:a7:30:bb:ca:3f:78:14:7b:e7:c2:c0:3b:99:a9:d5:e8:
fa:a4:0c:4a:ff:30:ce:2c:51:12:24:99:c9:d2:aa:79:fc:65:
ea:5f:d4:4b:9c:46:1c:d1:68:b5:51:b1:7c:93:23:07:ff:2e:
1b:76:ee:b8:f2:ee:b7:b2:d6:52:53:a5:c0:95:80:20:11:d2:
98:aa:2f:b2:e2:9a:71:40:10:87:6c:b9:34:00:f3:7d:69:67:
47:b7:1d:8b:bb:46:22:29:af:5c:cd:2b:11:05:53:3a:96:32:
06:28:b4:10:78:a2:66:c9:35:a9:24:24:1b:2b:27:29:9d:fe:
e9:33:5d:8e:d8:8e:f6:29:c0:e0:68:05:ac:2e:54:01:46:14:
81:45:a7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra40HNqTC/m0EYPUur8Z3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmMwNDg1NTQwMGYzMGQ4ZDgzY2Q5YWNhODU2OGZjN2Y0
YTAxODgwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EyhiYmNmYmJlNThjN2NmNjlkNGJjY2EyMjVmYjRmMWI0OTMzOTBmNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ht02llZgVTHxx19H7D5rgiWY9AE
xRkUG1w/jVPNRvtB2u5Mdi1x7p4nkoo/ukAXG9hzhjmv9f2mroXlPAf1Ni/Pf/mT
uVavT2w8CF9U930l3LocaeFuJKotYNCWrsP0NVtg2H4ZY7VRm+ETQWKEyS1LxY01
19iY8YsfGcqfP4HqzmyuIDDsBm0u4BZY/p9T0XOFClvLnOKC3y6F/4JzXMEjMt4I
bdw5jli6/P2MwscmS8kA5TuKFH6WEfrDmtpmL7tjQgie7PwiNg7qPlwYU9P6bbhw
GDXDQlvCxxCywHG6EVnTZNr1StIQWoQBAwWACREL59Ro7KNoxG6jvwy7vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvPu+WMfPadS8yiJftPG0kzkPZxMB8GA1UdIwQY
MBaAFPwsBIVUAPMNjYPNmsqFaPx/SgGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9lNzM3NWUtNmFjNS00YzhiLTk1ZjMt
NGVjYTRjOWFmNGI1LzEvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9lNzM3NWUtNmFjNS00YzhiLTk1ZjMtNGVjYTRjOWFmNGI1
LzEvX0N3RWhWUUE4dzJOZzgyYXlvVm9fSDlLQVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzZQ1y+/
0VGeHnaTHfmlNh4XIYgezJkU1EEEQ6zkJtFnW8GbB5CWDtgB3irT6rc0M++0xyeX
3WnWTcEQF8+oa5yijyL2iS86LcQBxtyt2j9xfClFnoniagbj5e359Y/do7bfoz/E
HUpdlmt3usynMLvKP3gUe+fCwDuZqdXo+qQMSv8wzixREiSZydKqefxl6l/US5xG
HNFotVGxfJMjB/8uG3buuPLut7LWUlOlwJWAIBHSmKovsuKacUAQh2y5NADzfWln
R7cdi7tGIimvXM0rEQVTOpYyBii0EHiiZsk1qSQkGysnKZ3+6TNdjtiO9inA4GgF
rC5UAUYUgUWnQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:31 2026 by rpki-client