Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: vmFCkS3qSZXDna5kMfRZV5pc/kcbxYQMeKMtwUBywrg=
Subject key identifier: F9:09:6F:15:C5:5D:77:B6:B4:33:BC:D2:B1:8F:F5:7B:BF:F4:3A:20
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019D29CE347470C507D57907AEA9415B151F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 122E
Signing time: Thu 26 Mar 2026 11:01:12 +0000
Manifest this update: Thu 26 Mar 2026 11:01:12 +0000
Manifest next update: Fri 27 Mar 2026 11:01:12 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: DMkCLJfcwPgqcTc27erfn+5Zx6n0K+MJd21EdVN+Ab8=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:34:74:70:c5:07:d5:79:07:ae:a9:41:5b:15:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Mar 26 11:01:12 2026 GMT
Not After : Mar 27 11:01:12 2026 GMT
Subject: CN=f9096f15c55d77b6b433bcd2b18ff57bbff43a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:81:1b:12:7c:5a:70:ab:5a:dc:cb:e8:b4:
44:e1:3d:50:d2:ec:df:08:c6:4c:17:ab:65:4b:e1:
1c:c2:59:e3:bd:1e:85:ed:03:52:9d:0f:36:f3:3f:
d5:af:58:0e:e6:ff:c5:27:c9:c4:f9:e9:c7:4b:e9:
6b:9a:0c:26:b2:66:ce:88:ec:21:8a:51:93:43:7b:
49:0b:80:d4:80:75:dd:e7:ce:fb:c2:ac:11:94:bb:
27:5b:8f:4f:07:89:a2:70:83:cc:bb:83:8f:24:73:
47:27:73:2d:6a:d8:04:36:ec:92:e9:19:55:0f:41:
09:52:8a:be:33:e1:ed:a8:dc:e6:3a:20:09:a9:3e:
94:26:51:f9:0c:76:a6:e6:09:f3:e5:a1:93:16:de:
f5:ed:6b:4f:d5:02:54:ad:92:d9:b4:aa:90:07:d6:
4e:92:35:b5:57:61:f1:e0:45:48:52:52:72:a6:41:
58:2d:06:d1:a7:ed:70:39:8c:55:75:3d:ee:ac:66:
82:d1:f5:1f:9a:5e:8a:2a:76:8c:ee:75:03:d9:fe:
ac:1e:f6:01:fd:3f:54:bd:a1:cf:48:48:bd:4f:b7:
ec:2d:70:55:20:77:b6:c5:ed:85:a8:58:c3:e8:07:
1b:d5:8a:36:c8:89:42:a4:3e:33:80:67:a2:04:55:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:6F:15:C5:5D:77:B6:B4:33:BC:D2:B1:8F:F5:7B:BF:F4:3A:20
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c0:5f:d9:58:5a:e4:64:98:c4:e4:26:81:02:81:3f:89:14:
df:12:38:51:31:02:e9:30:df:34:8d:9f:34:40:93:bb:7a:d5:
74:9c:2d:cc:2b:81:0d:2d:fd:7f:f1:4d:ff:84:2a:58:b2:05:
80:9d:36:be:28:33:7b:99:eb:05:92:db:10:03:d4:bc:f0:b9:
31:c4:ac:70:3a:e8:f7:88:06:58:5e:56:13:f7:8a:2d:4a:c5:
bc:b8:ba:f9:a4:b5:f7:c8:82:7d:2f:01:b1:e4:4f:45:5e:9c:
60:d3:09:18:70:c5:0f:b3:4a:a3:98:ff:31:7d:44:ac:49:34:
c9:32:38:95:2e:00:ce:d8:ec:5a:d6:d5:e2:10:31:24:c0:37:
48:ff:c0:3f:66:b9:98:45:b6:d2:90:d2:ec:e5:88:49:6b:cc:
16:94:f0:07:90:62:53:f4:c9:4e:2c:15:72:e6:8f:a4:eb:8e:
49:df:a0:a6:5a:e4:ba:2e:ef:98:15:b9:57:24:57:62:54:36:
db:21:09:fd:59:e8:e9:22:49:47:86:e5:4d:b3:cf:9f:d8:47:
8f:76:e8:7c:c0:8d:30:26:57:3e:ac:cd:51:36:c3:29:ce:81:
01:21:19:b1:ba:f4:46:5c:37:d4:56:f0:f7:63:65:59:64:9f:
8e:14:87:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pzjR0cMUH1XkHrqlBWxUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2
NTc2MmMwHhcNMjYwMzI2MTEwMTEyWhcNMjYwMzI3MTEwMTEyWjAzMTEwLwYDVQQD
EyhmOTA5NmYxNWM1NWQ3N2I2YjQzM2JjZDJiMThmZjU3YmJmZjQzYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6BGxJ8WnCrWtzL6LRE4T1Q0uzf
CMZMF6tlS+EcwlnjvR6F7QNSnQ828z/Vr1gO5v/FJ8nE+enHS+lrmgwmsmbOiOwh
ilGTQ3tJC4DUgHXd5877wqwRlLsnW49PB4micIPMu4OPJHNHJ3MtatgENuyS6RlV
D0EJUoq+M+HtqNzmOiAJqT6UJlH5DHam5gnz5aGTFt717WtP1QJUrZLZtKqQB9ZO
kjW1V2Hx4EVIUlJypkFYLQbRp+1wOYxVdT3urGaC0fUfml6KKnaM7nUD2f6sHvYB
/T9UvaHPSEi9T7fsLXBVIHe2xe2FqFjD6Acb1Yo2yIlCpD4zgGeiBFWlkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPkJbxXFXXe2tDO80rGP9Xu/9DogMB8GA1UdIwQY
MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx
LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj
ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8Bf
2Vha5GSYxOQmgQKBP4kU3xI4UTEC6TDfNI2fNECTu3rVdJwtzCuBDS39f/FN/4Qq
WLIFgJ02vigze5nrBZLbEAPUvPC5McSscDro94gGWF5WE/eKLUrFvLi6+aS198iC
fS8BseRPRV6cYNMJGHDFD7NKo5j/MX1ErEk0yTI4lS4AztjsWtbV4hAxJMA3SP/A
P2a5mEW20pDS7OWISWvMFpTwB5BiU/TJTiwVcuaPpOuOSd+gplrkui7vmBW5VyRX
YlQ22yEJ/Vno6SJJR4blTbPPn9hHj3bofMCNMCZXPqzNUTbDKc6BASEZsbr0Rlw3
1Fbw92NlWWSfjhSHtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:23 2026 by rpki-client