Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: a5VqyG27PLceOkCWu0eCuxBnWwlasf3dv7/77ET9AU4=
Subject key identifier: A2:D5:B3:8B:6B:2A:2D:FF:C6:08:1B:A7:90:86:B8:12:27:14:1A:F3
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019E1CB49FBCD16E9406B160BF62837C12BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0C35
Signing time: Tue 12 May 2026 15:00:59 +0000
Manifest this update: Tue 12 May 2026 15:00:59 +0000
Manifest next update: Wed 13 May 2026 15:00:59 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: RoBz8OeWInygvRjnTdfQg4h/5TMxN2MEAuAMExAVTxg=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:9f:bc:d1:6e:94:06:b1:60:bf:62:83:7c:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: May 12 15:00:59 2026 GMT
Not After : May 13 15:00:59 2026 GMT
Subject: CN=a2d5b38b6b2a2dffc6081ba79086b81227141af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:65:b9:3a:9d:e0:9d:65:fc:1a:45:b8:b2:
a1:17:f0:cd:79:e1:21:0a:6d:03:2e:4c:f3:1f:c3:
16:f8:f7:f4:00:20:85:ab:c4:a6:94:b1:d9:98:98:
7d:29:cb:a5:34:72:5c:93:c1:a0:03:71:ec:da:0b:
9f:2f:69:13:6b:ed:1e:c1:69:71:b6:52:ed:57:97:
01:0a:b6:64:be:39:9b:12:a6:8d:ac:a1:c7:0f:85:
ff:d0:91:51:71:d1:1c:d1:bc:e0:d9:43:b8:ef:21:
ef:24:37:29:0d:af:f7:a4:6c:37:01:02:16:95:20:
b5:fe:64:ce:9f:ce:af:8d:8e:64:50:8b:c7:3a:53:
fe:1f:c6:be:10:09:86:b2:ea:e6:60:30:4f:c5:9f:
2e:2d:2b:32:36:0a:c2:1d:88:6c:f5:59:ab:98:28:
7c:01:01:6c:53:f5:96:a0:7d:98:ca:9c:23:50:10:
cf:14:ab:fc:b0:ae:6b:49:15:fe:41:f0:06:ad:ea:
d1:05:79:cd:bd:6a:09:87:8f:ff:3f:5b:ec:80:e5:
b4:58:ed:63:9e:4c:cc:a4:08:72:fc:34:ac:a8:39:
39:ab:01:da:dc:d6:fc:71:19:90:dd:5f:b4:52:11:
2f:a8:11:db:59:ac:6e:93:fb:6b:8e:16:30:6b:08:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:B3:8B:6B:2A:2D:FF:C6:08:1B:A7:90:86:B8:12:27:14:1A:F3
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:81:79:7c:55:81:5b:a2:dc:97:14:46:f5:7f:df:95:e3:f4:
03:f8:ca:2d:ce:7b:c6:bd:a6:02:72:78:ec:b6:ba:e5:0a:91:
5e:43:9f:29:68:14:6d:c9:27:f1:1f:87:50:29:0c:41:dd:d5:
99:a5:9b:cd:40:c1:38:99:9a:78:25:c5:6b:2f:81:59:09:7a:
0c:17:91:fa:4c:88:38:b8:59:41:59:12:40:56:91:5c:3d:b0:
c0:10:f5:2e:a2:6f:55:38:d8:3c:96:3f:50:4e:4c:3a:31:74:
46:20:79:35:e9:d4:87:7e:a2:2d:19:30:07:75:11:b3:f6:d7:
b8:15:37:68:56:f7:c2:b0:ca:5e:83:8e:bd:c4:9f:b0:84:21:
1e:54:3d:8c:b8:17:89:b4:03:42:19:64:eb:3a:42:9c:43:cf:
67:49:b5:03:37:d3:64:f3:31:89:7b:9c:99:2a:85:3e:41:b6:
cc:fc:0e:01:b7:0f:b8:19:56:97:67:2f:f3:13:03:67:d6:68:
a3:0c:a9:74:a3:c8:37:16:d8:29:e6:66:98:9a:dd:e0:70:26:
c9:c2:77:9d:a3:34:6e:39:58:d6:15:a8:13:65:58:4c:58:75:
55:88:38:3d:0c:4d:59:5a:0f:54:71:43:34:5c:a3:ec:36:7a:
94:eb:fc:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4ctJ+80W6UBrFgv2KDfBK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjYwNTEyMTUwMDU5WhcNMjYwNTEzMTUwMDU5WjAzMTEwLwYDVQQD
EyhhMmQ1YjM4YjZiMmEyZGZmYzYwODFiYTc5MDg2YjgxMjI3MTQxYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBNluTqd4J1l/BpFuLKhF/DNeeEh
Cm0DLkzzH8MW+Pf0ACCFq8SmlLHZmJh9KculNHJck8GgA3Hs2gufL2kTa+0ewWlx
tlLtV5cBCrZkvjmbEqaNrKHHD4X/0JFRcdEc0bzg2UO47yHvJDcpDa/3pGw3AQIW
lSC1/mTOn86vjY5kUIvHOlP+H8a+EAmGsurmYDBPxZ8uLSsyNgrCHYhs9VmrmCh8
AQFsU/WWoH2YypwjUBDPFKv8sK5rSRX+QfAGrerRBXnNvWoJh4//P1vsgOW0WO1j
nkzMpAhy/DSsqDk5qwHa3Nb8cRmQ3V+0UhEvqBHbWaxuk/trjhYwawiJuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKLVs4trKi3/xggbp5CGuBInFBrzMB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoF5
fFWBW6LclxRG9X/fleP0A/jKLc57xr2mAnJ47La65QqRXkOfKWgUbckn8R+HUCkM
Qd3VmaWbzUDBOJmaeCXFay+BWQl6DBeR+kyIOLhZQVkSQFaRXD2wwBD1LqJvVTjY
PJY/UE5MOjF0RiB5NenUh36iLRkwB3URs/bXuBU3aFb3wrDKXoOOvcSfsIQhHlQ9
jLgXibQDQhlk6zpCnEPPZ0m1AzfTZPMxiXucmSqFPkG2zPwOAbcPuBlWl2cv8xMD
Z9ZoowypdKPINxbYKeZmmJrd4HAmycJ3naM0bjlY1hWoE2VYTFh1VYg4PQxNWVoP
VHFDNFyj7DZ6lOv8ZQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:32 2026 by rpki-client