Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier: jn8pEMBpFThO5K3H34gigvi+KBCTG5sGMCxhubPk8Mg=
Subject key identifier: 9B:C9:13:DF:82:24:AC:89:CC:86:DA:17:67:3B:7A:25:46:F6:A0:BC
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019D2704439C602DE41C38553DCC9472B527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number: 1895
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: B0nY26JAiCxk0KWyLb506NA9K+snNd7eu+6R8nDGrYE=)
2: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
3: fa7QQf3mwNaqx6Q9YVB4JOEPT1Y.roa (hash: cuDfOcc4rXjt55ZYwZL2MoLNfkQ/Mx73QisLDCI3qEU=)
4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:9c:60:2d:e4:1c:38:55:3d:cc:94:72:b5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=9bc913df8224ac89cc86da17673b7a2546f6a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:ae:42:65:20:6d:04:d9:8a:e8:b4:6e:dc:
c4:42:3c:ea:54:6d:a9:43:17:30:fb:20:95:bc:b8:
5d:bd:f8:e4:52:d7:f9:45:85:4a:27:2f:6d:88:15:
57:fe:e7:5c:d7:34:b7:34:8d:24:34:58:a8:b9:dc:
9d:06:0d:6f:f1:86:c6:13:69:70:91:af:82:b7:78:
29:07:38:da:0c:28:b9:47:41:58:f3:65:50:0a:2f:
95:27:a8:44:ac:70:59:43:23:55:03:c1:23:84:b1:
c9:e0:2d:53:48:bb:75:86:3d:54:5d:0f:ce:b6:3e:
3f:0f:16:dc:76:3a:a0:15:6b:56:d0:cf:ec:33:12:
77:98:71:51:a9:9f:33:ae:69:66:66:3d:b4:82:ad:
96:25:16:66:9e:a2:2d:22:50:1f:1c:21:dd:3a:1a:
2f:c4:e6:1e:41:82:bd:7a:39:22:6d:84:50:09:f0:
68:0c:7a:07:73:7f:91:62:03:8f:7d:4d:b8:66:61:
34:7a:7c:6f:d0:44:40:7c:b2:33:6a:1c:8e:46:ac:
db:3e:29:39:40:a5:b4:b9:78:0f:a7:c7:6e:46:01:
e5:69:79:48:d2:71:12:d3:90:17:69:45:f1:77:cf:
4d:68:18:54:13:af:f8:aa:62:af:b3:b2:11:93:99:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:13:DF:82:24:AC:89:CC:86:DA:17:67:3B:7A:25:46:F6:A0:BC
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:c7:1d:5f:d3:c8:43:67:23:e5:83:69:c0:17:46:44:31:
4c:7d:d0:9e:3a:97:60:e8:58:c6:8b:ce:99:c2:c7:15:53:49:
e2:75:55:c9:79:b8:a9:42:5d:12:cb:bf:f5:ad:eb:1e:b4:07:
1a:05:1d:ec:2b:e1:c4:95:78:ac:c9:1a:0e:86:58:d0:f6:5f:
22:bf:6a:f9:40:8b:03:85:6c:55:a2:27:20:a9:6c:0e:6e:d8:
5f:cb:1a:d4:31:0b:2d:03:0a:9e:ef:98:69:50:0d:55:5d:e3:
7b:74:9e:fd:ff:ac:67:bd:36:38:22:82:a4:00:e4:84:7e:77:
60:fe:e0:62:c1:bb:00:fb:59:66:0a:65:f1:64:b3:74:3c:6a:
2c:7a:41:36:e3:2c:42:56:2f:e5:55:52:c6:cf:53:ef:c5:e7:
de:39:da:c7:56:fb:fb:24:0b:c5:dd:f1:51:46:19:fd:73:00:
48:9e:ec:06:5a:be:87:d1:7f:a0:47:9b:01:84:1b:a3:90:a6:
1b:4f:ce:0d:79:2e:3b:3d:21:23:bb:5b:12:95:c3:ed:00:44:
8f:e3:ef:74:0c:e2:87:0d:29:17:3b:72:91:32:33:d8:63:b1:
6e:78:c0:25:dc:1f:cf:f3:ac:2d:fa:e2:b9:e4:00:84:9e:fc:
b8:0a:68:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEOcYC3kHDhVPcyUcrUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwMzI1MjIwMTI0WhcNMjYwMzI2MjIwMTI0WjAzMTEwLwYDVQQD
Eyg5YmM5MTNkZjgyMjRhYzg5Y2M4NmRhMTc2NzNiN2EyNTQ2ZjZhMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooKuQmUgbQTZiui0btzEQjzqVG2p
Qxcw+yCVvLhdvfjkUtf5RYVKJy9tiBVX/udc1zS3NI0kNFioudydBg1v8YbGE2lw
ka+Ct3gpBzjaDCi5R0FY82VQCi+VJ6hErHBZQyNVA8EjhLHJ4C1TSLt1hj1UXQ/O
tj4/DxbcdjqgFWtW0M/sMxJ3mHFRqZ8zrmlmZj20gq2WJRZmnqItIlAfHCHdOhov
xOYeQYK9ejkibYRQCfBoDHoHc3+RYgOPfU24ZmE0enxv0ERAfLIzahyORqzbPik5
QKW0uXgPp8duRgHlaXlI0nES05AXaUXxd89NaBhUE6/4qmKvs7IRk5mgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvJE9+CJKyJzIbaF2c7eiVG9qC8MB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbnHHV/T
yENnI+WDacAXRkQxTH3QnjqXYOhYxovOmcLHFVNJ4nVVyXm4qUJdEsu/9a3rHrQH
GgUd7CvhxJV4rMkaDoZY0PZfIr9q+UCLA4VsVaInIKlsDm7YX8sa1DELLQMKnu+Y
aVANVV3je3Se/f+sZ702OCKCpADkhH53YP7gYsG7APtZZgpl8WSzdDxqLHpBNuMs
QlYv5VVSxs9T78Xn3jnax1b7+yQLxd3xUUYZ/XMASJ7sBlq+h9F/oEebAYQbo5Cm
G0/ODXkuOz0hI7tbEpXD7QBEj+PvdAzihw0pFztykTIz2GOxbnjAJdwfz/OsLfri
ueQAhJ78uApoRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:27 2026 by rpki-client