Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: kBuc6CphwhZ3wI+df05OVUMAXUA26MOOinN0PN9E9Sc=
Subject key identifier: 03:B7:1A:26:97:F0:E0:02:CA:37:A4:F1:E7:1F:99:99:96:A6:68:33
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 019D3451AD570B8FDBF3081C065BDE5EAB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 12:01:01 +0000
Manifest this update: Sat 28 Mar 2026 12:01:01 +0000
Manifest next update: Sun 29 Mar 2026 12:01:01 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: vkVvKyCS+LFJtQJVRdRozzzmRxb/rHE7U/oLi+P4ACE=)
2: YPX4hTijPNtYr9QhjImFgFRXgKg.roa (hash: Uysgi8w4knYDa70kMhClAKgRlCbLW7PT65F4/2d78Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:ad:57:0b:8f:db:f3:08:1c:06:5b:de:5e:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Mar 28 12:01:01 2026 GMT
Not After : Mar 29 12:01:01 2026 GMT
Subject: CN=03b71a2697f0e002ca37a4f1e71f999996a66833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:bb:f6:82:0d:0a:ef:36:53:cd:ce:e5:44:
9e:34:33:7b:c2:ff:33:a6:dd:34:f6:25:91:96:6a:
fa:22:0f:b3:6e:79:b6:fb:74:4d:da:44:39:4a:6f:
35:23:31:b1:fc:b8:4f:64:c2:41:38:f5:45:28:c9:
f7:ff:97:3b:e4:3c:ac:bb:67:e3:f3:7e:bf:ae:a6:
26:68:c7:09:95:a4:6f:9f:78:e5:63:ab:a8:a6:be:
14:dd:f9:60:4f:33:64:8a:35:09:8d:0a:82:87:b7:
cb:f9:88:f8:1a:c4:37:0a:fe:39:6b:5f:29:fd:11:
e9:1f:cd:97:98:0a:cb:61:29:98:04:af:17:ac:67:
c3:3e:0d:63:6d:13:81:8d:d7:f6:77:09:bb:35:5b:
86:54:20:7b:fa:8c:4b:05:e1:cb:bc:ff:0e:fb:3e:
84:0d:3d:77:1d:8a:a2:1f:a7:6e:4c:06:2e:55:5f:
06:be:e1:c6:b7:38:26:64:7c:d4:30:06:2a:de:6c:
45:d4:26:92:f2:55:16:b0:ae:a9:74:dc:b3:9a:6f:
55:77:bf:86:d1:7f:f8:8b:54:da:76:78:db:1c:bc:
d3:e9:70:df:b9:09:61:e5:e9:b4:eb:2d:49:91:89:
46:b5:61:83:bb:0b:ba:d1:4f:4b:aa:d9:88:85:c7:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:1A:26:97:F0:E0:02:CA:37:A4:F1:E7:1F:99:99:96:A6:68:33
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:3f:67:bf:47:d8:cb:a4:f6:3c:1d:f2:3a:d3:df:36:02:
00:6a:07:64:91:91:7e:8e:e5:7f:0e:14:62:f0:72:81:b3:00:
8e:10:46:65:31:70:79:89:45:be:21:88:ff:be:1b:51:fa:9d:
f8:32:7b:27:14:aa:a7:a8:68:cd:ab:57:9b:1d:16:cf:22:c4:
9d:bc:b4:81:92:8e:5a:dd:e2:1e:ee:97:93:42:2a:c3:c1:a6:
7b:c8:73:59:9e:8e:1f:9d:d1:f2:97:f3:1c:c6:fb:9c:b2:49:
4e:40:40:66:93:ab:77:5f:67:da:c9:52:d4:56:5e:87:f1:39:
d7:e0:09:f1:51:e2:04:33:b8:a0:25:28:09:2e:6b:00:7e:5f:
fb:a7:3e:ff:71:b2:ba:5b:ea:40:97:f8:0c:55:f2:68:93:50:
a7:ae:15:4b:92:f1:eb:b7:12:f0:72:03:05:bb:b0:1f:10:23:
81:59:d8:57:1c:8d:14:54:4c:82:f8:5a:60:fc:f2:d3:5b:80:
da:ac:d8:77:69:1f:6b:27:54:91:8f:e7:a7:b5:b1:c8:91:bf:
b0:72:fc:7a:35:ac:7a:df:f3:1b:f6:16:d3:fc:db:6b:24:75:
bb:34:2d:0a:3c:ee:70:f5:31:cc:b6:ad:ce:39:a7:11:ee:d1:
13:b3:23:41
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ00Ua1XC4/b8wgcBlveXqsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjc5NmQ5ODBmYTYwZmUyNTE0ZmNlNjI2NDZmNDVkMTJj
OTUxNjUwHhcNMjYwMzI4MTIwMTAxWhcNMjYwMzI5MTIwMTAxWjAzMTEwLwYDVQQD
EygwM2I3MWEyNjk3ZjBlMDAyY2EzN2E0ZjFlNzFmOTk5OTk2YTY2ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvma79oINCu82U83O5USeNDN7wv8z
pt009iWRlmr6Ig+zbnm2+3RN2kQ5Sm81IzGx/LhPZMJBOPVFKMn3/5c75Dysu2fj
836/rqYmaMcJlaRvn3jlY6uopr4U3flgTzNkijUJjQqCh7fL+Yj4GsQ3Cv45a18p
/RHpH82XmArLYSmYBK8XrGfDPg1jbROBjdf2dwm7NVuGVCB7+oxLBeHLvP8O+z6E
DT13HYqiH6duTAYuVV8GvuHGtzgmZHzUMAYq3mxF1CaS8lUWsK6pdNyzmm9Vd7+G
0X/4i1TadnjbHLzT6XDfuQlh5em06y1JkYlGtWGDuwu60U9LqtmIhcfDNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAO3GiaX8OACyjek8ecfmZmWpmgzMB8GA1UdIwQY
MBaAFPq3ltmA+mD+JRT85iZG9F0SyVFlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZVcyWUQ2WVA0bEZQem1Ka2IwWFJMSlVXVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODllLTgyYjUtNDQyYi1iNjcy
LTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHptSmtiMFhSTEpVV1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE4Lzk3Zjg5ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNi
MGIvMS8xLXJlVzJZRDZZUDRsRlB6bUprYjBYUkxKVVdVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6Y/
Z79H2Muk9jwd8jrT3zYCAGoHZJGRfo7lfw4UYvBygbMAjhBGZTFweYlFviGI/74b
Ufqd+DJ7JxSqp6hozatXmx0WzyLEnby0gZKOWt3iHu6Xk0Iqw8Gme8hzWZ6OH53R
8pfzHMb7nLJJTkBAZpOrd19n2slS1FZeh/E51+AJ8VHiBDO4oCUoCS5rAH5f+6c+
/3GyulvqQJf4DFXyaJNQp64VS5Lx67cS8HIDBbuwHxAjgVnYVxyNFFRMgvhaYPzy
01uA2qzYd2kfaydUkY/np7WxyJG/sHL8ejWset/zG/YW0/zbayR1uzQtCjzucPUx
zLatzjmnEe7RE7MjQQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:05 2026 by rpki-client