Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: zrFg+G13x0YyfecsExhoAe/UF0FHrp7jEcanLqcEHJ8=
Subject key identifier: 91:B4:34:7D:37:94:C3:AD:2B:A4:8B:95:1B:EF:CA:49:3D:E4:C0:B1
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 019D29CE2EE2500EAC1D4D3AF1738B51C04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 1504
Signing time: Thu 26 Mar 2026 11:01:11 +0000
Manifest this update: Thu 26 Mar 2026 11:01:11 +0000
Manifest next update: Fri 27 Mar 2026 11:01:11 +0000
Files and hashes: 1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: 7PO1X+yB0fsWwjcQv2nE7y+UmbCwDsEE7iKnMG1Hq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2e:e2:50:0e:ac:1d:4d:3a:f1:73:8b:51:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Mar 26 11:01:11 2026 GMT
Not After : Mar 27 11:01:11 2026 GMT
Subject: CN=91b4347d3794c3ad2ba48b951befca493de4c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:cf:d3:b3:e4:dc:42:81:d6:6f:f2:80:0a:
f0:e2:75:96:ad:07:78:7e:51:08:61:e2:03:11:0b:
a8:bd:70:8c:e4:8a:4a:f9:12:71:0a:39:73:63:92:
0b:0c:96:52:18:04:8e:8b:7f:d6:e3:67:32:d2:5c:
44:a0:35:80:a8:5d:e5:1d:8f:fa:13:19:45:42:8d:
14:c6:8e:94:d3:7a:a6:f0:d3:90:4d:68:84:31:3e:
bd:4b:e9:f7:4c:ad:85:77:fd:9f:bd:6d:8e:ca:ce:
13:d6:46:12:04:dc:fb:b0:48:fa:7b:cb:b8:4c:5a:
a7:d1:93:e7:50:cc:0f:91:7d:0f:3c:7a:29:3e:22:
95:b8:d0:d3:c4:9b:65:37:81:6f:d5:71:7f:ab:81:
a9:8f:c9:5a:ad:78:da:a0:0e:58:d9:5f:54:d6:bc:
74:13:92:82:78:98:28:6c:7b:42:20:dc:5e:a3:de:
c7:a8:54:e0:26:a7:0f:5c:8c:02:a9:78:76:2a:0b:
e8:38:12:79:18:58:38:79:77:55:ec:cf:aa:8f:e0:
0a:61:1e:fa:2d:b8:82:ee:ba:24:a1:fb:e4:f7:7b:
f7:4c:0d:8c:d2:59:22:0b:96:17:81:e9:37:80:f7:
62:dc:57:82:a1:89:f4:c4:25:07:34:9f:56:5f:65:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:34:7D:37:94:C3:AD:2B:A4:8B:95:1B:EF:CA:49:3D:E4:C0:B1
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:3c:b3:b1:8d:ef:3c:cf:08:2a:cb:36:14:e8:30:01:11:
17:2e:9b:09:94:44:e6:8b:98:2a:6d:24:86:e4:e7:00:6f:81:
95:95:fd:11:a1:1a:ed:62:05:ba:11:0c:0d:fe:39:e6:bb:07:
07:45:e3:94:42:cc:dd:30:f7:f2:2f:ce:72:16:36:7b:3e:5f:
ce:e2:c3:37:2f:42:bb:95:f0:8e:28:49:5b:e9:87:6b:4a:b6:
c2:1e:da:48:b2:63:50:7a:38:d6:32:83:60:17:ff:52:34:4a:
31:87:24:6b:1f:2c:69:2a:13:a1:fd:da:90:e3:e9:03:25:4a:
a5:6b:4b:c3:15:a4:b9:42:48:02:70:ab:1a:d6:6b:75:ad:3a:
cd:36:b5:2e:d4:5c:09:1b:10:0f:cb:86:c5:7b:b8:40:da:2b:
88:01:05:a9:32:41:ff:a7:63:e7:24:b3:a5:76:e4:d1:1f:45:
a4:d1:92:46:cf:03:d8:a4:fa:f4:f1:77:94:b8:db:a6:7b:fb:
74:e7:8a:9c:5c:14:a3:86:80:40:5e:95:4c:01:c2:56:9e:91:
2b:06:59:77:da:17:c7:f1:f5:77:e8:e4:9d:bf:3b:5e:83:13:
81:8f:5e:6e:86:73:69:da:31:c0:d1:fa:7e:96:54:ef:14:32:
e8:89:04:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzi7iUA6sHU068XOLUcBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz
ZGY4YmYwHhcNMjYwMzI2MTEwMTExWhcNMjYwMzI3MTEwMTExWjAzMTEwLwYDVQQD
Eyg5MWI0MzQ3ZDM3OTRjM2FkMmJhNDhiOTUxYmVmY2E0OTNkZTRjMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts/P07Pk3EKB1m/ygArw4nWWrQd4
flEIYeIDEQuovXCM5IpK+RJxCjlzY5ILDJZSGASOi3/W42cy0lxEoDWAqF3lHY/6
ExlFQo0Uxo6U03qm8NOQTWiEMT69S+n3TK2Fd/2fvW2Oys4T1kYSBNz7sEj6e8u4
TFqn0ZPnUMwPkX0PPHopPiKVuNDTxJtlN4Fv1XF/q4Gpj8larXjaoA5Y2V9U1rx0
E5KCeJgobHtCINxeo97HqFTgJqcPXIwCqXh2KgvoOBJ5GFg4eXdV7M+qj+AKYR76
LbiC7rokofvk93v3TA2M0lkiC5YXgek3gPdi3FeCoYn0xCUHNJ9WX2VI9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG0NH03lMOtK6SLlRvvykk95MCxMB8GA1UdIwQY
MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt
NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3
LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrE8s7GN
7zzPCCrLNhToMAERFy6bCZRE5ouYKm0khuTnAG+BlZX9EaEa7WIFuhEMDf455rsH
B0XjlELM3TD38i/OchY2ez5fzuLDNy9Cu5XwjihJW+mHa0q2wh7aSLJjUHo41jKD
YBf/UjRKMYckax8saSoTof3akOPpAyVKpWtLwxWkuUJIAnCrGtZrda06zTa1LtRc
CRsQD8uGxXu4QNoriAEFqTJB/6dj5ySzpXbk0R9FpNGSRs8D2KT69PF3lLjbpnv7
dOeKnFwUo4aAQF6VTAHCVp6RKwZZd9oXx/H1d+jknb87XoMTgY9eboZzadoxwNH6
fpZU7xQy6IkEoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:24 2026 by rpki-client