Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: GJql32qvGnLbsuA8ZRF+MdasFO9mPC6t9dTUtHwIrJU=
Subject key identifier: 50:63:85:DF:B0:B7:5F:FE:07:7E:CA:70:14:C4:64:98:49:9B:53:E9
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019CABD91C31901D0FA84250E7A196C2C82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 05FC
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: TyqrarCNE+E7QXJ6Zzlbx2jXPSbdOeYwVNarxcM6siM=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1c:31:90:1d:0f:a8:42:50:e7:a1:96:c2:c8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=506385dfb0b75ffe077eca7014c46498499b53e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:fb:bd:e9:da:16:c3:57:45:a9:17:7f:1a:
33:f9:55:01:3e:00:72:63:4a:f1:82:a0:e8:03:a3:
d1:7b:71:30:7c:dd:3f:c0:e6:97:a9:92:5c:50:5a:
76:ef:a7:9a:e2:9e:b2:4b:f0:25:c1:8a:16:73:04:
c6:69:7c:66:fe:24:ff:5f:ef:3c:8b:2a:98:4b:4c:
84:4b:2d:05:ed:3c:42:76:3e:e6:13:2a:7b:73:12:
e6:1f:f5:af:fd:8e:9a:4d:92:05:ee:81:be:a3:70:
5e:2f:dd:bf:71:3d:28:fa:b1:84:3c:0f:6f:fe:58:
f7:bf:a0:5e:e4:15:da:59:00:94:19:f3:d2:cb:2e:
9c:e9:63:cd:f4:38:22:73:92:12:4d:19:e7:ec:62:
c6:af:74:32:ff:7b:7e:2b:d4:b6:95:31:69:b4:36:
97:ee:88:d3:a8:45:15:c6:d0:a8:44:1e:20:3f:05:
85:e9:a5:68:06:70:5f:dc:70:6d:cd:c7:76:a0:c7:
a3:30:ab:4c:78:0a:c7:56:3c:e3:af:0e:8b:30:fe:
b0:85:48:01:c6:ef:ca:44:fc:fd:aa:fb:91:93:04:
d3:e1:94:de:70:5c:97:c3:12:a3:db:5b:01:8b:40:
aa:bd:0a:df:bd:a2:40:f6:47:35:52:fa:6b:65:f3:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:85:DF:B0:B7:5F:FE:07:7E:CA:70:14:C4:64:98:49:9B:53:E9
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c8:f9:1d:0a:a0:47:da:af:2b:5c:f9:e3:27:47:47:29:cb:
ee:6a:cb:92:6e:6c:9c:ec:9a:88:43:e8:7c:54:88:82:ce:fb:
f6:f6:6b:a3:c4:ce:cd:6a:60:f1:2b:07:c5:18:b1:89:47:72:
40:ef:ec:8b:00:ca:b0:d8:dd:81:99:3b:bf:a6:f3:02:48:a7:
c2:ea:6b:8b:b7:29:c2:71:13:f1:c7:f6:f0:ed:5d:fb:24:78:
d6:9a:d0:83:97:ad:c0:5a:0a:72:e9:93:58:9a:df:00:e6:44:
41:b5:cc:6f:50:98:a7:d6:0a:db:33:2b:b8:01:19:b0:9b:5a:
b0:66:f5:cc:96:f0:c1:d5:2e:18:2c:09:d2:a0:30:f3:cb:1a:
bf:62:31:a4:33:31:e2:76:5d:9e:7e:0e:ef:e4:80:33:8c:6a:
0c:e7:ff:48:24:80:73:fd:d3:68:f9:99:0c:ce:e3:64:b4:6f:
4a:af:4c:f3:34:6f:85:5f:0f:9c:e5:4f:98:c0:3e:c9:ad:44:
06:a2:28:26:01:3a:ef:d7:7b:57:53:44:ed:16:ed:fb:2a:20:
5c:66:93:74:ea:ce:88:08:0b:f8:99:9f:6c:16:ab:15:cb:f6:
ef:0a:4e:79:99:48:97:12:f5:79:13:b5:63:e8:6f:b5:26:73:
99:28:dc:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RwxkB0PqEJQ56GWwsgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODljYjcxODkxYzZkOTRiZDllNmYxNGYxNmU3ZTM3YzJj
NzI4YmYwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
Eyg1MDYzODVkZmIwYjc1ZmZlMDc3ZWNhNzAxNGM0NjQ5ODQ5OWI1M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUn7venaFsNXRakXfxoz+VUBPgBy
Y0rxgqDoA6PRe3EwfN0/wOaXqZJcUFp276ea4p6yS/AlwYoWcwTGaXxm/iT/X+88
iyqYS0yESy0F7TxCdj7mEyp7cxLmH/Wv/Y6aTZIF7oG+o3BeL92/cT0o+rGEPA9v
/lj3v6Be5BXaWQCUGfPSyy6c6WPN9Dgic5ISTRnn7GLGr3Qy/3t+K9S2lTFptDaX
7ojTqEUVxtCoRB4gPwWF6aVoBnBf3HBtzcd2oMejMKtMeArHVjzjrw6LMP6whUgB
xu/KRPz9qvuRkwTT4ZTecFyXwxKj21sBi0CqvQrfvaJA9kc1UvprZfOHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBjhd+wt1/+B37KcBTEZJhJm1PpMB8GA1UdIwQY
MBaAFNaJy3GJHG2UvZ5vFPFufjfCxyi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0Yjgt
ODI0ZmZjNjk0MmY0LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wZGYyOGQtOTI0ZC00YjRlLTk0YjgtODI0ZmZjNjk0MmY0
LzEvMW9uTGNZa2NiWlM5bm04VThXNS1OOExIS0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsj5HQqg
R9qvK1z54ydHRynL7mrLkm5snOyaiEPofFSIgs779vZro8TOzWpg8SsHxRixiUdy
QO/siwDKsNjdgZk7v6bzAkinwupri7cpwnET8cf28O1d+yR41prQg5etwFoKcumT
WJrfAOZEQbXMb1CYp9YK2zMruAEZsJtasGb1zJbwwdUuGCwJ0qAw88sav2IxpDMx
4nZdnn4O7+SAM4xqDOf/SCSAc/3TaPmZDM7jZLRvSq9M8zRvhV8PnOVPmMA+ya1E
BqIoJgE679d7V1NE7Rbt+yogXGaTdOrOiAgL+JmfbBarFcv27wpOeZlIlxL1eRO1
Y+hvtSZzmSjc+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:27 2026 by rpki-client