Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: mLA/CDOHCq1PXjA6P1D++dJWzS+G9RkZsj0zpCExdjQ=
Subject key identifier: 7C:A0:9E:A7:F2:DC:D8:FC:8D:B9:CE:F5:22:22:A6:EE:AF:92:70:2F
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019D2884CFD2CBDB583A5375415FA8A24596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 11D7
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: NHNtljkX3TyD94C09a22yliTfAblerFw/iOL65GjFfc=)
2: jM4bCus_MOUyOpnMWkBG4DEReus.roa (hash: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8=)
3: v4vgN5S5raK6CZzGiAArElrxR7M.roa (hash: xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cf:d2:cb:db:58:3a:53:75:41:5f:a8:a2:45:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=7ca09ea7f2dcd8fc8db9cef52222a6eeaf92702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:a4:46:78:15:99:ea:63:de:3e:56:be:c1:
89:5b:61:ae:31:af:c5:0d:b1:ed:cc:a3:d3:b9:98:
aa:60:f3:d3:28:c2:a8:13:4a:b6:e1:85:60:c1:c3:
bc:0c:76:a6:df:38:dc:41:b5:0f:0c:2d:8f:3e:4e:
59:9f:cb:f5:8e:a8:86:49:40:5b:50:f4:c7:40:70:
48:37:35:2c:7a:5e:8a:eb:68:76:d0:b0:b1:1f:35:
bf:56:5d:e4:34:07:ac:24:dc:ae:0e:24:6a:33:51:
df:d1:62:8f:bc:db:e0:37:55:16:2c:3c:66:36:f5:
4b:d6:05:2e:53:0a:de:6e:0a:68:c9:3a:06:80:a0:
0b:7f:23:bd:a7:21:2b:31:9c:e6:1e:78:1c:cb:43:
da:f9:da:5a:bc:3e:bc:2f:f6:4e:b0:1a:c5:57:c6:
b2:99:f3:b2:d9:86:b6:ca:63:8f:18:a7:66:1c:30:
f0:cd:ce:74:0b:3a:90:68:2c:04:2d:dc:e3:6a:f8:
59:11:ef:2e:1f:f0:c2:19:8f:53:53:32:41:d1:5b:
33:d5:84:16:99:3b:ab:88:fe:c7:e4:f6:aa:be:ab:
11:15:46:37:07:dd:a7:16:b3:7e:73:a6:49:91:47:
4a:e1:79:28:e4:51:7e:b0:11:33:dc:38:28:25:0f:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:9E:A7:F2:DC:D8:FC:8D:B9:CE:F5:22:22:A6:EE:AF:92:70:2F
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2f:f8:38:4a:39:d8:35:a0:23:06:77:6a:ed:56:9a:50:d3:
3d:d0:93:5c:4d:e4:c6:7f:59:3b:c2:04:a7:24:39:f9:aa:38:
60:d5:68:17:ce:85:91:81:58:0e:4d:9c:40:97:ad:84:29:c1:
9b:24:b4:91:85:75:a1:76:d5:c7:f8:91:e6:5b:5a:97:d6:59:
0b:dd:16:a4:4d:e2:d5:da:1a:87:05:a4:9d:c6:9e:e6:2c:a5:
06:45:d9:b4:ef:99:17:a0:91:e2:db:0f:d5:d7:cd:a2:0d:4b:
a0:7d:f1:46:ed:5e:1c:36:4d:a1:ab:8c:39:dc:f7:2d:8f:f5:
1f:b2:69:be:e9:df:b4:d7:7e:00:94:3f:c8:09:72:a2:b4:65:
a1:da:7a:b3:c0:0e:2d:50:49:86:d8:51:62:33:10:e4:9e:e6:
14:d0:cc:9e:22:03:1e:c5:e0:c7:a5:b3:5c:ed:a9:28:63:b9:
f2:1a:4b:9c:a6:75:df:22:ac:cd:3a:01:74:30:c0:38:ee:59:
bb:dc:89:20:5b:43:e1:f8:11:74:44:50:51:d5:08:a6:26:62:
16:75:76:82:99:c0:dc:77:db:6f:f7:de:3f:f9:83:64:9b:97:
8c:90:ad:12:68:d0:7e:9c:87:9b:01:4a:95:b4:f3:a8:46:72:
53:62:73:c1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ohM/Sy9tYOlN1QV+ookWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjYwMzI2MDUwMTI1WhcNMjYwMzI3MDUwMTI1WjAzMTEwLwYDVQQD
Eyg3Y2EwOWVhN2YyZGNkOGZjOGRiOWNlZjUyMjIyYTZlZWFmOTI3MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUKkRngVmepj3j5WvsGJW2GuMa/F
DbHtzKPTuZiqYPPTKMKoE0q24YVgwcO8DHam3zjcQbUPDC2PPk5Zn8v1jqiGSUBb
UPTHQHBINzUsel6K62h20LCxHzW/Vl3kNAesJNyuDiRqM1Hf0WKPvNvgN1UWLDxm
NvVL1gUuUwrebgpoyToGgKALfyO9pyErMZzmHngcy0Pa+dpavD68L/ZOsBrFV8ay
mfOy2Ya2ymOPGKdmHDDwzc50CzqQaCwELdzjavhZEe8uH/DCGY9TUzJB0Vsz1YQW
mTuriP7H5PaqvqsRFUY3B92nFrN+c6ZJkUdK4Xko5FF+sBEz3DgoJQ+7oQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHygnqfy3Nj8jbnO9SIipu6vknAvMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS/4
OEo52DWgIwZ3au1WmlDTPdCTXE3kxn9ZO8IEpyQ5+ao4YNVoF86FkYFYDk2cQJet
hCnBmyS0kYV1oXbVx/iR5ltal9ZZC90WpE3i1doahwWkncae5iylBkXZtO+ZF6CR
4tsP1dfNog1LoH3xRu1eHDZNoauMOdz3LY/1H7JpvunftNd+AJQ/yAlyorRlodp6
s8AOLVBJhthRYjMQ5J7mFNDMniIDHsXgx6WzXO2pKGO58hpLnKZ13yKszToBdDDA
OO5Zu9yJIFtD4fgRdERQUdUIpiZiFnV2gpnA3Hfbb/feP/mDZJuXjJCtEmjQfpyH
mwFKlbTzqEZyU2JzwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:50 2026 by rpki-client