Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: 9mhOEmfrPPvFs9DbagE5CJ28WTb4KIe6lSIAnpOLcns=
Subject key identifier: 19:F6:86:48:9E:BE:6E:3A:F1:3F:8A:59:8F:8A:09:0D:88:6F:B9:24
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019D28165FF5A47AC75442461AF548FBC8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: e1NfF+IcZzsfxmoq3XV9utryF7tdcjWBEq1TG0Cd8bw=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5f:f5:a4:7a:c7:54:42:46:1a:f5:48:fb:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=19f686489ebe6e3af13f8a598f8a090d886fb924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7a:9c:0f:b6:9b:8d:f4:b8:4b:46:7d:34:eb:
a7:22:85:00:b1:9a:91:50:84:5a:37:9a:93:34:0e:
dc:a6:c9:ef:21:43:a5:54:f0:ff:98:a1:94:45:ad:
ab:08:b5:1f:39:76:6c:0e:04:12:6e:9a:4a:14:3f:
98:26:de:1e:25:4d:6c:62:07:82:01:4f:55:5e:83:
69:4e:a1:14:ea:a4:83:9f:8b:00:ce:e1:b4:4d:ed:
26:9a:f5:1f:bc:a3:3e:f0:bf:55:3c:30:cd:de:6a:
3a:14:85:bc:de:19:5e:54:0c:02:32:f1:2a:aa:3c:
e6:39:43:1d:ee:7f:74:21:71:51:03:b5:e9:db:56:
95:60:c3:16:46:69:0d:8d:ab:ab:f7:d6:24:48:d9:
3c:43:f7:0c:df:cd:bc:22:28:50:e3:4a:4d:93:1d:
5d:85:69:e7:3c:38:99:7a:f5:04:9d:de:1c:1b:e8:
28:7a:a8:40:4c:4d:b2:ac:6e:a5:16:e9:e8:6c:bd:
f4:9f:31:4d:2f:7a:58:9a:9a:fb:de:13:13:81:84:
99:eb:8f:b5:d2:52:39:85:b8:c9:6d:e6:bf:98:cd:
0d:c0:ed:8e:ee:8c:04:a6:ae:b9:9b:fb:46:c1:ee:
8e:e4:85:f6:d4:16:78:db:17:da:d8:e8:10:6f:94:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:86:48:9E:BE:6E:3A:F1:3F:8A:59:8F:8A:09:0D:88:6F:B9:24
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7b:7f:6e:88:ee:94:9a:b2:60:38:14:75:d4:9c:2f:02:ea:
7e:73:4e:36:69:d7:f6:b4:11:91:d8:a7:32:8e:b3:52:c4:de:
6a:73:d3:36:36:a4:26:24:fa:eb:c0:a9:59:60:db:d3:72:bb:
4e:0e:f5:69:cb:c9:1f:4b:c4:c4:b6:53:97:7f:e0:0d:7d:18:
85:0e:84:f7:b0:89:70:c9:0e:30:21:8a:4d:36:16:fc:b3:dd:
80:8b:8c:4a:eb:a4:bf:bb:c5:aa:cd:5b:4d:6d:9b:33:ad:cd:
e9:de:25:93:c6:f0:2e:2d:8a:c0:1a:40:d6:05:af:0b:41:2a:
51:f0:ea:60:e9:69:c9:25:6e:43:f4:84:ed:32:d3:d4:b1:41:
45:b9:d3:83:dc:82:b3:21:25:0b:fb:64:16:b9:7a:88:14:b0:
0b:45:17:ba:c9:80:b0:66:1c:82:76:b5:22:b2:3f:e6:a0:eb:
33:d5:d6:78:e1:8c:4a:50:38:36:c0:da:ef:c6:3c:91:1c:5d:
54:7c:e6:b5:8b:d0:f6:bd:42:91:83:ba:33:8c:3e:ca:07:b0:
65:b4:a5:29:53:99:aa:b8:ea:8c:c9:35:4c:d0:cd:85:7c:1a:
50:83:ae:b4:7c:c8:61:6d:dc:89:ec:00:50:c7:ec:a7:5e:55:
15:3b:96:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFl/1pHrHVEJGGvVI+8jjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MjU5MDAzMTJmZjNiZGE0ZDJmODk2ZjY0ZGY2NTY0NmZk
OWMyNTEwHhcNMjYwMzI2MDMwMDQ4WhcNMjYwMzI3MDMwMDQ4WjAzMTEwLwYDVQQD
EygxOWY2ODY0ODllYmU2ZTNhZjEzZjhhNTk4ZjhhMDkwZDg4NmZiOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XqcD7abjfS4S0Z9NOunIoUAsZqR
UIRaN5qTNA7cpsnvIUOlVPD/mKGURa2rCLUfOXZsDgQSbppKFD+YJt4eJU1sYgeC
AU9VXoNpTqEU6qSDn4sAzuG0Te0mmvUfvKM+8L9VPDDN3mo6FIW83hleVAwCMvEq
qjzmOUMd7n90IXFRA7Xp21aVYMMWRmkNjaur99YkSNk8Q/cM3828IihQ40pNkx1d
hWnnPDiZevUEnd4cG+goeqhATE2yrG6lFunobL30nzFNL3pYmpr73hMTgYSZ64+1
0lI5hbjJbea/mM0NwO2O7owEpq65m/tGwe6O5IX21BZ42xfa2OgQb5Q7lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn2hkievm468T+KWY+KCQ2Ib7kkMB8GA1UdIwQY
MBaAFNQlkAMS/zvaTS+Jb2TfZWRv2cJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMt
Njc2YjQyODkyNWFiLzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YmY4MjYtOTIxZS00NGY1LWFmMzMtNjc2YjQyODkyNWFi
LzEvMUNXUUF4TF9POXBOTDRsdlpOOWxaR19ad2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHt/boju
lJqyYDgUddScLwLqfnNONmnX9rQRkdinMo6zUsTeanPTNjakJiT668CpWWDb03K7
Tg71acvJH0vExLZTl3/gDX0YhQ6E97CJcMkOMCGKTTYW/LPdgIuMSuukv7vFqs1b
TW2bM63N6d4lk8bwLi2KwBpA1gWvC0EqUfDqYOlpySVuQ/SE7TLT1LFBRbnTg9yC
syElC/tkFrl6iBSwC0UXusmAsGYcgna1IrI/5qDrM9XWeOGMSlA4NsDa78Y8kRxd
VHzmtYvQ9r1CkYO6M4w+ygewZbSlKVOZqrjqjMk1TNDNhXwaUIOutHzIYW3ciewA
UMfsp15VFTuWRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:19 2026 by rpki-client