Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: ONhR+SqAXDOTcZ5Asv9UhF0rNxC4B1J6sAOvuDedjCQ=
Subject key identifier: E8:E3:95:FC:F3:63:BD:40:B7:EF:59:1C:F8:55:FD:39:34:03:A9:63
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019D2A3B62C25E3FD86B3739A574301328D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 16B1
Signing time: Thu 26 Mar 2026 13:00:28 +0000
Manifest this update: Thu 26 Mar 2026 13:00:28 +0000
Manifest next update: Fri 27 Mar 2026 13:00:28 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: L2qxA3NuZme5ShlC0lu1y7IzieKoU/VUj0WWcqa+Y1w=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:62:c2:5e:3f:d8:6b:37:39:a5:74:30:13:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Mar 26 13:00:28 2026 GMT
Not After : Mar 27 13:00:28 2026 GMT
Subject: CN=e8e395fcf363bd40b7ef591cf855fd393403a963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:a9:63:b1:22:e1:1a:a5:d9:6b:4f:ef:63:
b1:21:a7:a0:28:fd:69:5a:60:bc:ca:f6:83:f5:80:
44:2f:37:c9:50:e4:8f:dd:a2:f1:91:6a:74:92:aa:
d7:03:9e:f0:bc:47:84:8a:2f:66:19:61:df:a9:93:
87:f6:7e:f1:fc:4f:00:bf:dc:7c:1d:ec:d4:28:7d:
f0:cb:65:e8:42:bf:1a:cc:ba:88:23:d9:8e:d9:95:
ef:b7:9d:19:a3:e9:d4:1a:f8:9c:67:0f:dc:f3:82:
35:0a:52:92:31:b1:f5:d5:6c:65:e1:ee:cb:72:72:
29:f1:16:af:ae:ea:a4:55:f7:9a:f7:17:cc:cd:cd:
7a:b8:b9:31:d4:ef:19:f8:55:b7:58:ca:3c:05:46:
de:21:8a:8d:4c:b9:f8:11:30:35:87:4b:05:97:2e:
9c:57:81:47:c0:be:6f:91:e0:15:3d:ef:1f:f2:6b:
a1:99:87:11:da:a6:bd:d3:76:e0:ab:b0:16:1a:12:
dd:f8:d1:06:10:46:23:7f:d1:e6:05:32:e4:23:42:
0b:62:0d:30:61:a7:a7:a2:bd:6b:5b:74:48:c0:c6:
b1:6a:e4:51:0b:8d:5f:0b:d5:61:53:14:dc:35:81:
d3:cd:be:8b:2e:0c:f7:39:46:5d:42:12:db:c3:da:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:95:FC:F3:63:BD:40:B7:EF:59:1C:F8:55:FD:39:34:03:A9:63
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ba:2f:b2:88:84:3c:71:1e:0c:f6:e9:1f:83:a0:e4:60:98:
ea:d1:2d:bf:dc:67:8b:63:3f:cb:ee:cb:31:59:28:cb:bb:33:
c9:e1:03:97:cf:9b:ac:6c:b2:73:23:e0:d0:27:47:43:ca:6a:
06:25:5f:6b:7a:f9:51:fc:22:a2:26:4f:40:22:a2:ee:f7:78:
95:f0:4e:9f:9b:b0:3a:96:77:6b:27:a1:04:04:36:cc:bf:8a:
3a:a0:00:0f:a8:ec:ac:a0:9c:d8:87:d8:38:e1:d7:53:46:82:
fe:ce:23:75:c1:e8:2c:d6:42:ec:3d:27:88:75:34:ac:d6:c3:
30:cf:e8:2b:6a:8d:42:ab:fe:01:98:c0:a8:fc:71:1f:a7:3e:
7b:f1:32:9a:9c:d0:05:06:f3:87:5d:f6:50:ce:fb:bc:f8:27:
87:4e:72:c9:d2:22:9c:55:8d:a3:89:a9:20:96:d9:c5:69:c8:
f8:4c:59:23:1d:6f:17:21:51:5e:2e:65:1d:6e:4c:a7:fd:b2:
00:34:79:db:3e:0b:e4:96:8b:95:a8:0a:60:79:65:30:c1:1f:
1f:c2:86:2a:4e:ad:e2:8f:42:d6:3b:1f:24:d8:ad:bc:43:f8:
41:71:78:71:7d:ae:1e:ef:07:e9:0e:0b:8d:56:2d:b2:a2:8a:
e9:d3:17:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO2LCXj/Yazc5pXQwEyjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm
ZDJjZWQwHhcNMjYwMzI2MTMwMDI4WhcNMjYwMzI3MTMwMDI4WjAzMTEwLwYDVQQD
EyhlOGUzOTVmY2YzNjNiZDQwYjdlZjU5MWNmODU1ZmQzOTM0MDNhOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXipY7Ei4Rql2WtP72OxIaegKP1p
WmC8yvaD9YBELzfJUOSP3aLxkWp0kqrXA57wvEeEii9mGWHfqZOH9n7x/E8Av9x8
HezUKH3wy2XoQr8azLqII9mO2ZXvt50Zo+nUGvicZw/c84I1ClKSMbH11Wxl4e7L
cnIp8RavruqkVfea9xfMzc16uLkx1O8Z+FW3WMo8BUbeIYqNTLn4ETA1h0sFly6c
V4FHwL5vkeAVPe8f8muhmYcR2qa903bgq7AWGhLd+NEGEEYjf9HmBTLkI0ILYg0w
Yaenor1rW3RIwMaxauRRC41fC9VhUxTcNYHTzb6LLgz3OUZdQhLbw9oxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjjlfzzY71At+9ZHPhV/Tk0A6ljMB8GA1UdIwQY
MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt
ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx
LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLovsoiE
PHEeDPbpH4Og5GCY6tEtv9xni2M/y+7LMVkoy7szyeEDl8+brGyycyPg0CdHQ8pq
BiVfa3r5UfwioiZPQCKi7vd4lfBOn5uwOpZ3ayehBAQ2zL+KOqAAD6jsrKCc2IfY
OOHXU0aC/s4jdcHoLNZC7D0niHU0rNbDMM/oK2qNQqv+AZjAqPxxH6c+e/EympzQ
BQbzh132UM77vPgnh05yydIinFWNo4mpIJbZxWnI+ExZIx1vFyFRXi5lHW5Mp/2y
ADR52z4L5JaLlagKYHllMMEfH8KGKk6t4o9C1jsfJNitvEP4QXF4cX2uHu8H6Q4L
jVYtsqKK6dMXzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:10 2026 by rpki-client