Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: gu4Z/saN7FApSvrOQlRfrt/oVkVh2u4KdFsn3a6P68U=
Subject key identifier: 42:5B:8E:BE:AD:1D:B0:36:AF:5D:98:5E:2F:B5:40:81:33:82:D5:C2
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019D265FB626E39898B6597052D7AF8144BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1817
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: wHvAWcC+kGsjzc8pDbzPrVtC5+LGJlgSmmOTdFMpQ3k=)
2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b6:26:e3:98:98:b6:59:70:52:d7:af:81:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=425b8ebead1db036af5d985e2fb540813382d5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:f0:cd:14:a3:2b:8c:83:d6:1c:03:34:d1:
86:39:e2:e7:be:f8:99:25:4f:a4:9d:db:ab:dd:67:
08:2a:1d:c0:20:92:29:48:41:af:f4:4e:ce:29:d4:
4e:35:9c:52:64:f2:6a:c7:e2:3b:82:9f:4d:d5:cf:
63:fd:d4:63:8f:65:84:b5:71:2e:db:20:3a:f8:75:
85:b2:7c:c1:67:57:19:c5:bb:31:6c:e2:f0:dc:6c:
c4:c1:cc:1d:43:c6:e1:17:ae:e0:d7:eb:76:c3:22:
82:a0:af:f4:b1:b1:b4:f8:41:5e:3b:ce:10:a4:9b:
e5:8a:aa:71:5b:c8:57:95:da:f3:cd:fb:94:51:f1:
d9:26:c2:ad:7b:02:73:9d:49:71:08:5f:45:31:c4:
55:dc:9d:55:7c:ca:f7:74:ad:28:b7:15:68:f0:61:
1b:0b:5d:03:9b:33:96:36:59:b9:be:05:05:a6:a0:
ba:1d:3f:ad:f0:03:cd:d1:2b:3b:bf:3b:91:2f:e7:
1d:f4:f8:ff:25:24:2c:b4:b3:eb:87:55:d0:a5:5a:
e2:3f:2d:4a:39:22:e3:1a:66:79:72:82:cf:06:bf:
af:fb:66:75:88:b4:9f:80:ad:d9:57:b0:44:55:a1:
b3:e8:d0:f3:b4:ae:af:03:cd:6f:7a:6a:36:cf:0b:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:8E:BE:AD:1D:B0:36:AF:5D:98:5E:2F:B5:40:81:33:82:D5:C2
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ce:90:96:38:40:08:85:b5:a4:fb:cb:63:3c:16:a4:2a:af:
c3:ec:a0:1f:89:81:ad:0c:07:7f:76:bf:08:23:c4:1b:e9:ff:
c7:03:0f:d3:f9:e1:50:4c:97:06:a9:d5:4e:82:45:92:fa:db:
0d:65:c8:c8:4b:b7:74:d6:36:78:18:51:4b:ec:cb:ce:7d:48:
52:3c:1b:ab:b0:67:fa:f4:4b:e1:11:30:5f:ef:a7:28:b3:eb:
9b:b2:68:61:db:9d:fa:c2:24:54:e5:bb:9d:f9:44:95:08:d3:
3c:47:73:c7:4d:a5:ad:d1:60:e8:8d:f9:5d:98:95:0a:d9:e2:
cd:f1:3d:1b:d0:b8:0c:0f:0f:65:60:a1:a0:2e:63:60:5a:0a:
be:bb:6c:74:de:fa:c8:ae:68:6b:64:5c:6c:15:d5:9a:cb:0b:
d2:6b:59:3d:20:18:89:d1:a2:34:cb:7c:d2:aa:60:56:59:00:
30:62:49:1d:e8:ac:9a:47:04:03:52:d3:3e:43:be:18:6d:4a:
f9:63:d2:b3:73:c6:1a:4d:e9:48:10:bb:f8:ff:8c:ae:d0:e7:
e8:96:c1:ac:e2:4b:8e:61:41:d3:bd:97:57:bc:66:9f:c2:86:
22:68:ae:36:f8:2a:c6:97:0f:e8:24:73:76:af:86:6b:bc:32:
be:f8:e9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7Ym45iYtllwUtevgUS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWE4ZDkxZmU0NGYxYTk2MzlhZWQ1NjFjMWJjYWZjYmYx
MGIyNWQwHhcNMjYwMzI1MTkwMTM5WhcNMjYwMzI2MTkwMTM5WjAzMTEwLwYDVQQD
Eyg0MjViOGViZWFkMWRiMDM2YWY1ZDk4NWUyZmI1NDA4MTMzODJkNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlLwzRSjK4yD1hwDNNGGOeLnvviZ
JU+kndur3WcIKh3AIJIpSEGv9E7OKdRONZxSZPJqx+I7gp9N1c9j/dRjj2WEtXEu
2yA6+HWFsnzBZ1cZxbsxbOLw3GzEwcwdQ8bhF67g1+t2wyKCoK/0sbG0+EFeO84Q
pJvliqpxW8hXldrzzfuUUfHZJsKtewJznUlxCF9FMcRV3J1VfMr3dK0otxVo8GEb
C10DmzOWNlm5vgUFpqC6HT+t8APN0Ss7vzuRL+cd9Pj/JSQstLPrh1XQpVriPy1K
OSLjGmZ5coLPBr+v+2Z1iLSfgK3ZV7BEVaGz6NDztK6vA81vemo2zwvcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJbjr6tHbA2r12YXi+1QIEzgtXCMB8GA1UdIwQY
MBaAFNRajZH+RPGpY5rtVhwbyvy/ELJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWIt
NTg4NjVkMWUxNGUwLzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWItNTg4NjVkMWUxNGUw
LzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsM6QljhA
CIW1pPvLYzwWpCqvw+ygH4mBrQwHf3a/CCPEG+n/xwMP0/nhUEyXBqnVToJFkvrb
DWXIyEu3dNY2eBhRS+zLzn1IUjwbq7Bn+vRL4REwX++nKLPrm7JoYdud+sIkVOW7
nflElQjTPEdzx02lrdFg6I35XZiVCtnizfE9G9C4DA8PZWChoC5jYFoKvrtsdN76
yK5oa2RcbBXVmssL0mtZPSAYidGiNMt80qpgVlkAMGJJHeismkcEA1LTPkO+GG1K
+WPSs3PGGk3pSBC7+P+MrtDn6JbBrOJLjmFB072XV7xmn8KGImiuNvgqxpcP6CRz
dq+Ga7wyvvjpMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:29 2026 by rpki-client