Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: UatGDYxiN2f6IbPaKDW+/1/B9czOm136rQLX2gBXLhg=
Subject key identifier: B1:F1:8E:E0:E4:84:C3:9A:6A:88:36:7F:70:F3:68:02:6D:37:1A:EC
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 019CABA20407EB5A64EEB1A75023E6AC6E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0B5C
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: vFFzDqXfehZ7oa8K2TEVQnlXttk3P8aHuuQoRgEdOMg=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:04:07:eb:5a:64:ee:b1:a7:50:23:e6:ac:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=b1f18ee0e484c39a6a88367f70f368026d371aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:7f:dd:bc:30:d2:91:61:56:0c:4c:6e:cb:
10:36:e3:1c:e1:da:cd:4a:9f:b9:9c:c1:a1:93:7a:
b7:78:4b:80:45:f8:ad:38:f8:b2:d8:68:6d:2e:5e:
4a:f8:0e:37:fd:8c:1d:4b:2c:18:5f:4d:34:73:df:
40:ea:d4:87:b6:f7:2a:19:29:cb:48:cd:1f:24:ef:
49:0a:56:7e:60:1c:7d:d3:df:c1:37:79:89:51:17:
d7:e1:cf:44:a0:28:5a:ed:a1:3c:5b:43:01:61:33:
ef:8e:58:1c:83:7a:32:b2:c3:bf:50:10:0e:64:6a:
e6:ea:5b:52:e4:1a:f9:21:33:01:25:a2:52:77:40:
c4:39:00:7c:4f:77:a4:2c:a2:76:7d:8c:c8:ed:5d:
b1:ea:b2:1e:fe:d0:66:02:b8:f0:f7:c7:f1:68:df:
87:0f:20:64:15:55:22:e1:cf:45:ef:b7:09:16:0d:
ad:36:20:e7:0d:9d:89:41:b4:c5:b3:ab:4a:e4:1f:
37:41:f1:ae:22:67:23:1d:53:f6:b9:29:67:af:b9:
d5:20:e1:e9:3e:79:2f:0e:d1:78:32:43:fe:76:e1:
32:c3:b4:56:c9:5b:9c:69:89:95:40:52:b9:c6:de:
8d:0c:17:56:c7:dc:62:b1:17:d1:45:4b:4d:b4:0e:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:8E:E0:E4:84:C3:9A:6A:88:36:7F:70:F3:68:02:6D:37:1A:EC
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:37:42:a3:90:9b:3d:55:87:3f:7a:48:88:f1:1b:37:71:8a:
8b:b4:28:62:bf:7c:27:5f:b7:5e:6d:0d:19:c8:f8:8f:cc:6a:
a3:d6:2f:16:7a:70:84:0a:27:92:d1:e8:0b:34:a4:cf:1f:6f:
e0:8e:36:00:e9:b0:fd:29:34:c1:73:92:e6:36:e3:68:bd:e8:
87:df:0d:85:61:57:50:e4:a2:98:df:06:05:0d:e9:90:c5:15:
bf:39:da:39:b9:e8:2b:e7:42:2d:e8:05:01:b3:92:6e:b8:5f:
64:cc:f7:9c:15:0d:73:2d:d8:2f:4b:b8:a2:e2:c3:e8:d6:4b:
b3:8b:76:5e:50:5b:20:7a:4e:88:00:1d:a9:9a:2a:c9:b6:63:
d7:00:f9:30:ae:72:23:fe:e3:54:8c:b3:60:97:2b:28:ad:46:
b9:53:02:6c:c4:76:49:ff:67:ba:8a:b8:84:ce:3b:c3:8c:0a:
53:22:c4:01:1d:d8:7b:6a:69:ab:7a:d6:da:e9:34:72:9b:fa:
4a:2f:45:87:59:02:fc:b1:bd:1c:a6:8b:3a:23:c6:52:c4:0b:
a5:e2:17:ee:f0:19:5f:95:68:a2:45:6b:ea:b4:09:40:3b:48:
8a:35:f9:69:64:cf:9d:4c:42:8a:c7:61:6c:e6:3c:8d:3d:62:
70:3c:32:22
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyrogQH61pk7rGnUCPmrG45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTc4ZTM4YmI4ZWY5OGJiZjJiMzFiODk2Mzk3ZjQ4Nzlm
NmIwZjcwHhcNMjYwMzAxMjMwMDQ3WhcNMjYwMzAyMjMwMDQ3WjAzMTEwLwYDVQQD
EyhiMWYxOGVlMGU0ODRjMzlhNmE4ODM2N2Y3MGYzNjgwMjZkMzcxYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm81/3bww0pFhVgxMbssQNuMc4drN
Sp+5nMGhk3q3eEuARfitOPiy2GhtLl5K+A43/YwdSywYX000c99A6tSHtvcqGSnL
SM0fJO9JClZ+YBx909/BN3mJURfX4c9EoCha7aE8W0MBYTPvjlgcg3oyssO/UBAO
ZGrm6ltS5Br5ITMBJaJSd0DEOQB8T3ekLKJ2fYzI7V2x6rIe/tBmArjw98fxaN+H
DyBkFVUi4c9F77cJFg2tNiDnDZ2JQbTFs6tK5B83QfGuImcjHVP2uSlnr7nVIOHp
PnkvDtF4MkP+duEyw7RWyVucaYmVQFK5xt6NDBdWx9xisRfRRUtNtA7v2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLHxjuDkhMOaaog2f3DzaAJtNxrsMB8GA1UdIwQY
MBaAFPoXjji7jvmLvysxuJY5f0h59rD3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oZU9PTHVPLVl1X0t6RzRsamxfU0huMnNQYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZhLTVlNDctNGZhOS1iZDNi
LTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0bGpsX1NIbjJzUGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U0LzY2ZTA2YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3
MTQvMS8xLWhlT09MdU8tWXVfS3pHNGxqbF9TSG4yc1BjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDdC
o5CbPVWHP3pIiPEbN3GKi7QoYr98J1+3Xm0NGcj4j8xqo9YvFnpwhAonktHoCzSk
zx9v4I42AOmw/Sk0wXOS5jbjaL3oh98NhWFXUOSimN8GBQ3pkMUVvznaObnoK+dC
LegFAbOSbrhfZMz3nBUNcy3YL0u4ouLD6NZLs4t2XlBbIHpOiAAdqZoqybZj1wD5
MK5yI/7jVIyzYJcrKK1GuVMCbMR2Sf9nuoq4hM47w4wKUyLEAR3Ye2ppq3rW2uk0
cpv6Si9Fh1kC/LG9HKaLOiPGUsQLpeIX7vAZX5VookVr6rQJQDtIijX5aWTPnUxC
isdhbOY8jT1icDwyIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:39 2026 by rpki-client