Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: YUr/f3Kziy2WwUCA6E1voQjFtE3ugB5sIOLxIZQjBH0=
Subject key identifier: 2D:61:DB:D6:89:03:96:11:CD:00:A1:FA:3A:F2:20:28:A8:6E:58:ED
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019D2884B413154241434103DB92A4DFFE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 166D
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: kU/AOV5kkL/Kj1MdITjALiYRghN8Gy1FgyDtPsdi4sQ=)
2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b4:13:15:42:41:43:41:03:db:92:a4:df:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=2d61dbd689039611cd00a1fa3af22028a86e58ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:2a:ff:40:64:9c:a0:c7:a3:aa:8e:40:64:
28:0a:a6:7f:46:51:83:b6:fb:78:70:4a:75:54:7f:
1a:21:a5:87:2f:5f:37:80:05:78:f4:8b:25:ab:61:
5c:f9:f7:ca:50:59:ae:b6:2d:25:f9:56:dd:b2:a5:
83:b5:5b:2a:a5:a9:70:76:b1:58:06:32:64:89:ad:
f5:8a:4f:aa:29:93:91:30:42:ef:7a:1b:f0:8b:e5:
61:49:e1:4a:32:65:3e:63:a2:de:42:d4:d4:a2:ab:
c8:65:03:7e:11:68:6c:71:2f:ed:96:1c:c2:1b:3b:
7c:07:e5:31:24:75:fd:cc:2d:e8:8b:13:7e:ca:97:
42:c3:d0:04:c4:a4:92:e1:74:23:bc:4e:b1:51:e2:
37:2c:7e:14:51:a9:d5:36:be:ad:9e:c2:42:74:4d:
31:cb:28:01:63:17:27:c7:f8:96:c1:ce:c4:36:c8:
71:b8:d9:23:ee:48:45:b0:98:fe:79:06:22:6b:62:
16:3e:ac:7d:0e:69:c7:26:78:60:41:55:a6:38:89:
8c:1c:1e:45:0f:96:18:e5:45:43:8b:88:c0:a5:0e:
e4:07:72:79:80:5d:a6:65:34:00:73:3b:b8:00:47:
f2:05:95:aa:da:2d:a8:95:5a:db:56:c6:e5:26:0a:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:DB:D6:89:03:96:11:CD:00:A1:FA:3A:F2:20:28:A8:6E:58:ED
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:13:2e:59:94:28:9e:f2:26:9f:17:a0:e0:5e:3d:32:7e:ac:
d1:43:fe:d0:7e:0b:3d:43:01:98:ad:36:3f:08:c6:41:91:32:
c0:a3:db:2b:8e:7e:0b:91:bc:6a:5e:79:30:3b:11:62:46:31:
05:7f:d6:32:30:3e:ce:54:74:f6:fa:bf:f9:55:e6:47:ff:3a:
81:84:cc:b8:ce:60:61:14:0e:a1:30:3e:29:5d:2a:b6:23:bb:
80:fb:3b:7a:04:c2:72:15:4d:b1:85:d6:79:7d:0f:74:4a:99:
10:64:ba:e3:ad:ae:02:43:de:ac:a5:e0:30:69:cf:dc:f3:5a:
ff:12:93:6d:3d:0e:06:6f:19:72:df:29:70:45:4c:e2:50:e8:
0c:a8:bc:4f:1d:1d:55:8a:62:e8:e0:70:77:87:b2:6b:aa:08:
4a:c1:9c:3e:14:79:31:1d:8a:e3:6b:66:5a:9f:bf:8c:65:6f:
7a:02:d2:0a:7f:30:e4:d7:47:bc:01:22:aa:8d:2b:be:17:31:
0f:56:2d:cf:9b:e8:94:d1:2b:17:b7:1a:7b:9d:42:7c:a9:40:
e0:8e:1b:0b:62:b9:92:a8:c1:10:1c:73:f2:78:ec:99:d2:24:
bf:0a:a7:14:53:15:5f:b4:0c:19:a3:c7:d5:6d:85:5f:7c:86:
9b:be:c1:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohLQTFUJBQ0ED25Kk3/5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2
ZDI1YTEwHhcNMjYwMzI2MDUwMTE4WhcNMjYwMzI3MDUwMTE4WjAzMTEwLwYDVQQD
EygyZDYxZGJkNjg5MDM5NjExY2QwMGExZmEzYWYyMjAyOGE4NmU1OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Iq/0BknKDHo6qOQGQoCqZ/RlGD
tvt4cEp1VH8aIaWHL183gAV49Islq2Fc+ffKUFmuti0l+VbdsqWDtVsqpalwdrFY
BjJkia31ik+qKZORMELvehvwi+VhSeFKMmU+Y6LeQtTUoqvIZQN+EWhscS/tlhzC
Gzt8B+UxJHX9zC3oixN+ypdCw9AExKSS4XQjvE6xUeI3LH4UUanVNr6tnsJCdE0x
yygBYxcnx/iWwc7ENshxuNkj7khFsJj+eQYia2IWPqx9DmnHJnhgQVWmOImMHB5F
D5YY5UVDi4jApQ7kB3J5gF2mZTQAczu4AEfyBZWq2i2olVrbVsblJgr3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1h29aJA5YRzQCh+jryICiobljtMB8GA1UdIwQY
MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt
N2QzYzMzNTE0OTJjLzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj
LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBMuWZQo
nvImnxeg4F49Mn6s0UP+0H4LPUMBmK02PwjGQZEywKPbK45+C5G8al55MDsRYkYx
BX/WMjA+zlR09vq/+VXmR/86gYTMuM5gYRQOoTA+KV0qtiO7gPs7egTCchVNsYXW
eX0PdEqZEGS6462uAkPerKXgMGnP3PNa/xKTbT0OBm8Zct8pcEVM4lDoDKi8Tx0d
VYpi6OBwd4eya6oISsGcPhR5MR2K42tmWp+/jGVvegLSCn8w5NdHvAEiqo0rvhcx
D1Ytz5volNErF7cae51CfKlA4I4bC2K5kqjBEBxz8njsmdIkvwqnFFMVX7QMGaPH
1W2FX3yGm77BNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:18 2026 by rpki-client