Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: 5lGSHE7bBA+EeffecsltuqdY3iQ3fN/UTbocRCcr0Lw=
Subject key identifier: 5C:D5:0B:FE:DF:36:44:19:41:84:61:5D:CC:83:DE:97:C3:F1:D1:8C
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 019CAC0FC67193E05771A2E46574E7D0AAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 120F
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: oZjFIUpBBZIdmGL+EeYpITccW08rxJCgPZXSmP0qKVs=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c6:71:93:e0:57:71:a2:e4:65:74:e7:d0:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=5cd50bfedf3644194184615dcc83de97c3f1d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:bc:3e:49:8e:e5:48:6b:f1:77:1e:53:e4:
6f:01:60:0c:20:8e:ee:b8:28:09:88:af:fe:e4:ba:
b4:96:9c:1c:2b:51:29:46:76:76:dd:90:43:58:41:
df:15:08:c9:67:8e:eb:83:7e:f2:45:ca:58:c2:99:
11:cb:a7:38:79:e5:67:26:99:76:d7:82:4c:a3:9c:
2f:49:88:95:41:ee:6a:8c:b6:32:69:11:19:47:1c:
ff:b6:de:5f:75:c6:ee:9d:6c:92:9e:3b:59:0b:89:
72:4e:3b:9b:9f:d5:04:3d:10:fe:b5:e3:de:3a:76:
bc:8c:48:63:6f:b1:48:6d:73:1c:ed:88:3b:96:b2:
7f:d1:bc:7e:9d:11:38:6f:d7:fb:19:e5:63:fc:18:
b2:d4:a1:cc:e3:b2:30:1c:cd:75:a2:84:df:2d:0d:
2c:ab:6b:ce:c1:41:f4:b3:f3:6c:2e:6f:c6:c6:ce:
d3:d8:26:3e:b2:38:4e:b0:54:3c:a3:f0:0b:1d:47:
f9:7d:32:a9:3c:85:65:9b:c1:c4:d3:57:a8:d4:2e:
d1:4b:f6:03:6b:27:6c:00:94:96:6a:f5:96:ee:fa:
37:9c:f7:f7:20:a1:ff:7b:28:30:2b:96:ad:50:85:
0a:dd:de:47:ac:ec:e5:0f:6d:bf:07:67:f0:50:a4:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:0B:FE:DF:36:44:19:41:84:61:5D:CC:83:DE:97:C3:F1:D1:8C
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:55:c8:e7:bf:23:72:ff:94:e1:ec:40:dc:90:db:fa:f2:
e0:ed:4a:d5:06:cc:56:46:26:36:f5:d7:10:90:c5:d2:93:65:
3a:e7:2f:86:e4:d9:de:23:a1:5a:cc:56:00:e1:f7:e4:16:18:
77:c0:d9:ca:14:58:c4:04:63:c8:63:14:e5:8f:d2:30:b4:2f:
b9:6e:2e:34:00:78:9a:cd:ef:4b:0b:00:87:34:03:59:b9:dd:
78:c9:d2:81:49:58:e4:94:74:a7:ac:e9:df:16:11:eb:59:09:
3b:ae:84:69:f8:f2:08:06:c0:ec:67:60:2a:6d:01:0f:0f:4a:
92:0d:79:33:83:4f:90:a4:4d:36:5a:7c:70:05:e2:0c:d5:d4:
ab:05:0a:8f:ad:d6:f7:ce:64:4f:97:fd:08:28:bb:30:c0:ba:
54:67:9d:ba:26:64:62:0b:8e:d8:66:21:6a:87:16:8a:6c:06:
ac:22:91:77:97:a7:a9:ed:28:e7:47:2e:4a:73:83:24:56:ce:
e1:6b:17:30:46:87:7d:16:d4:bc:d6:83:84:47:67:6c:9a:13:
c8:7d:58:a8:ed:5d:2a:b5:c4:28:54:34:02:d0:31:ae:65:bb:
e9:4f:bc:68:03:14:92:96:12:01:db:40:d8:a3:ab:0b:d0:f9:
aa:ac:ab:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD8Zxk+BXcaLkZXTn0KrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGNkZTIxMjVmMDQwNThhZDRmNDc4ZTE3ODg4NDE0MmNm
MmRhZDAwHhcNMjYwMzAyMDEwMDQwWhcNMjYwMzAzMDEwMDQwWjAzMTEwLwYDVQQD
Eyg1Y2Q1MGJmZWRmMzY0NDE5NDE4NDYxNWRjYzgzZGU5N2MzZjFkMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyum8PkmO5Uhr8XceU+RvAWAMII7u
uCgJiK/+5Lq0lpwcK1EpRnZ23ZBDWEHfFQjJZ47rg37yRcpYwpkRy6c4eeVnJpl2
14JMo5wvSYiVQe5qjLYyaREZRxz/tt5fdcbunWySnjtZC4lyTjubn9UEPRD+tePe
Ona8jEhjb7FIbXMc7Yg7lrJ/0bx+nRE4b9f7GeVj/Biy1KHM47IwHM11ooTfLQ0s
q2vOwUH0s/NsLm/Gxs7T2CY+sjhOsFQ8o/ALHUf5fTKpPIVlm8HE01eo1C7RS/YD
aydsAJSWavWW7vo3nPf3IKH/eygwK5atUIUK3d5HrOzlD22/B2fwUKQ7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzVC/7fNkQZQYRhXcyD3pfD8dGMMB8GA1UdIwQY
MBaAFNXc3iEl8EBYrU9HjheIhBQs8trQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMt
Y2ZkYWRiZGM0OGVjLzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81OTE1YzgtMDAzYy00ZDk4LTgyNDMtY2ZkYWRiZGM0OGVj
LzEvMWR6ZUlTWHdRRml0VDBlT0Y0aUVGQ3p5MnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbNVyOe/
I3L/lOHsQNyQ2/ry4O1K1QbMVkYmNvXXEJDF0pNlOucvhuTZ3iOhWsxWAOH35BYY
d8DZyhRYxARjyGMU5Y/SMLQvuW4uNAB4ms3vSwsAhzQDWbndeMnSgUlY5JR0p6zp
3xYR61kJO66EafjyCAbA7GdgKm0BDw9Kkg15M4NPkKRNNlp8cAXiDNXUqwUKj63W
985kT5f9CCi7MMC6VGeduiZkYguO2GYhaocWimwGrCKRd5enqe0o50cuSnODJFbO
4WsXMEaHfRbUvNaDhEdnbJoTyH1YqO1dKrXEKFQ0AtAxrmW76U+8aAMUkpYSAdtA
2KOrC9D5qqyrVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:11 2026 by rpki-client