Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: yvjJkPZjx7Cukrv6o2BxOnGe9GMVKtU1Md7yHYByn8E=
Subject key identifier: B8:A3:95:19:08:CE:4F:4C:99:1C:EC:C8:91:E9:48:47:F2:F6:0B:97
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019CAAFD460CB1CBE52390A10D13073E69AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 14FD
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: /oC8L/ZK2icqdpIsYHtTo5bgda+yfxA7tv1G6CCG7uE=)
2: btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa (hash: EWQ0Oxbv6MIMLYiT86duCPS9U8DVrZlE0W+JlVlWSBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:46:0c:b1:cb:e5:23:90:a1:0d:13:07:3e:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=b8a3951908ce4f4c991cecc891e94847f2f60b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:3a:cd:07:8b:c5:c8:3f:62:93:21:80:8b:
5c:eb:88:03:56:44:8b:60:9b:e8:a5:e2:f1:53:c7:
ac:2d:35:0f:0c:45:f2:0c:6c:ec:30:00:6c:34:e4:
8f:44:34:7f:49:e8:8e:94:0f:e8:dc:03:fc:fd:48:
8d:0e:35:b0:26:8f:11:21:99:e1:56:fd:27:76:34:
77:91:94:73:0c:0b:ec:11:1a:bf:7b:fa:5d:bf:3f:
85:b9:4f:f9:68:82:1e:c3:c6:af:85:3e:7a:3b:70:
76:d3:70:20:a4:40:52:5a:7f:88:30:fb:3a:f9:26:
39:48:c8:cf:94:18:20:92:97:bc:a0:c1:54:dd:95:
46:8f:c5:e5:42:b3:82:40:2f:22:17:14:f8:9e:13:
d5:9e:07:80:5f:93:86:6a:17:9f:43:9c:01:32:08:
d4:95:c9:ac:4d:70:d2:f9:b5:04:6f:df:5f:bd:9c:
dc:59:22:4e:ab:1f:c4:1a:03:22:89:cd:87:e7:bf:
d5:1e:99:f5:23:fa:e2:88:25:47:b8:90:1e:63:b2:
80:26:bb:9d:24:20:f1:69:6b:b2:46:09:a3:74:fb:
7d:9b:44:5c:8c:f7:ea:49:5a:1b:34:3b:32:61:6e:
a0:66:10:83:56:ae:a5:1b:43:ac:03:37:60:44:41:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:95:19:08:CE:4F:4C:99:1C:EC:C8:91:E9:48:47:F2:F6:0B:97
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:67:9a:31:a8:fc:f7:ec:9c:81:32:72:09:55:bc:97:6c:
14:69:3b:bf:b4:c3:b6:d4:6f:ed:df:80:12:18:17:85:73:e5:
a2:f4:ce:51:8e:62:ff:dd:02:a7:0f:b7:f6:46:78:5b:e6:d6:
2b:e9:c2:c5:59:c8:f6:d1:64:ba:a4:22:53:ba:cc:e8:d1:77:
2e:df:c7:69:d0:ec:f4:d1:3c:13:9f:9a:0e:fe:90:dc:ac:81:
dd:64:8d:91:6e:91:b0:86:fe:2d:04:97:31:32:87:91:ab:6c:
39:3a:22:d6:f3:2d:57:33:00:aa:ff:b2:e6:6f:e3:33:a8:9c:
76:c6:dc:d9:5e:32:5b:4c:09:8f:c9:f3:99:eb:c6:f9:aa:df:
50:3e:ff:6b:8b:26:cd:48:e8:00:b2:52:3d:0c:21:29:19:3d:
40:d6:f0:1d:3f:03:a1:67:9a:a1:f7:c0:ba:68:ec:75:32:8f:
6c:e3:81:60:23:83:c5:0f:0d:cb:58:0b:da:77:0d:9a:50:b7:
c8:b0:c3:7c:fb:33:a3:de:3a:78:12:1e:1d:a7:fd:dd:30:13:
27:20:6a:f7:65:01:ec:87:24:fe:88:0c:1f:b7:63:3e:58:a5:
e4:a4:23:ca:dc:cc:96:f5:6b:65:5b:7d:e3:ea:eb:5a:5e:f1:
a9:12:65:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyq/UYMscvlI5ChDRMHPmmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjYwMzAxMjAwMDUxWhcNMjYwMzAyMjAwMDUxWjAzMTEwLwYDVQQD
EyhiOGEzOTUxOTA4Y2U0ZjRjOTkxY2VjYzg5MWU5NDg0N2YyZjYwYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx86zQeLxcg/YpMhgItc64gDVkSL
YJvopeLxU8esLTUPDEXyDGzsMABsNOSPRDR/SeiOlA/o3AP8/UiNDjWwJo8RIZnh
Vv0ndjR3kZRzDAvsERq/e/pdvz+FuU/5aIIew8avhT56O3B203AgpEBSWn+IMPs6
+SY5SMjPlBggkpe8oMFU3ZVGj8XlQrOCQC8iFxT4nhPVngeAX5OGahefQ5wBMgjU
lcmsTXDS+bUEb99fvZzcWSJOqx/EGgMiic2H57/VHpn1I/riiCVHuJAeY7KAJrud
JCDxaWuyRgmjdPt9m0RcjPfqSVobNDsyYW6gZhCDVq6lG0OsAzdgREGIiQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLijlRkIzk9MmRzsyJHpSEfy9guXMB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2LzFjOTgwOS0xZjYwLTQzYzItODEwMy1kYWQwNDIwYjg1
ZDMvMS8xLVJuaDhfNXB0T3ZmOENxYWhYNThiQ3NsTUJvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk9n
mjGo/PfsnIEycglVvJdsFGk7v7TDttRv7d+AEhgXhXPlovTOUY5i/90Cpw+39kZ4
W+bWK+nCxVnI9tFkuqQiU7rM6NF3Lt/HadDs9NE8E5+aDv6Q3KyB3WSNkW6RsIb+
LQSXMTKHkatsOToi1vMtVzMAqv+y5m/jM6icdsbc2V4yW0wJj8nzmevG+arfUD7/
a4smzUjoALJSPQwhKRk9QNbwHT8DoWeaoffAumjsdTKPbOOBYCODxQ8Ny1gL2ncN
mlC3yLDDfPszo946eBIeHaf93TATJyBq92UB7Ick/ogMH7djPlil5KQjytzMlvVr
ZVt94+rrWl7xqRJl3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:51 2026 by rpki-client