Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: KpootEWuUw6glFDQLOT/QfKS5WdxOmusEHXDhyM144w=
Subject key identifier: 0A:1E:97:46:CF:AF:7B:D0:5A:83:82:A6:C5:E7:1A:80:39:84:E3:F7
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019D258409B92FD7CDA06B0A63F5E033652B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 1895
Signing time: Wed 25 Mar 2026 15:01:43 +0000
Manifest this update: Wed 25 Mar 2026 15:01:43 +0000
Manifest next update: Thu 26 Mar 2026 15:01:43 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: WCAmPJXTvPrYxW7iwErrT27EtEb+GIuBxxuBqZWKwK4=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:09:b9:2f:d7:cd:a0:6b:0a:63:f5:e0:33:65:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Mar 25 15:01:43 2026 GMT
Not After : Mar 26 15:01:43 2026 GMT
Subject: CN=0a1e9746cfaf7bd05a8382a6c5e71a803984e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:69:af:0a:eb:66:fa:0d:ab:9c:d3:dd:de:
6d:e2:53:34:cf:bb:cb:48:50:35:8a:17:ff:2e:28:
72:a1:32:3c:a8:83:c6:cd:a6:24:7c:e3:a4:d8:65:
8c:6c:46:6b:23:33:83:39:ea:ad:0f:27:1b:21:79:
15:4e:f4:9c:b2:02:05:c8:c4:78:4a:7c:c1:87:29:
8e:eb:4d:cb:c8:d7:00:bd:fb:6a:4b:0c:a7:5e:b4:
38:eb:10:cc:f3:41:99:b6:3c:7e:57:a3:7c:33:f8:
68:a1:0d:c9:8e:c0:f4:12:24:e2:a5:6e:03:48:0d:
b7:ac:58:dd:c6:b9:54:d4:34:6f:9b:31:34:49:e6:
e6:f0:39:21:02:b6:75:06:66:d5:11:af:5f:68:53:
08:b7:e8:f5:54:fc:7d:b0:7f:c4:a9:a2:30:ba:1e:
98:80:39:a5:ed:d0:fd:b4:e5:8a:40:ad:a8:9f:ba:
81:d1:32:05:d1:41:30:5b:03:d6:4d:b2:88:c8:cb:
33:39:dc:8d:d2:52:03:76:74:43:d3:1b:af:e5:44:
3e:fc:53:57:71:81:3d:18:db:bc:85:be:81:9f:62:
1a:90:ed:39:87:9a:c7:c4:c3:61:3f:9c:28:a1:25:
8c:91:e5:a8:7a:c9:9c:9d:b8:04:0e:ad:b8:97:1d:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1E:97:46:CF:AF:7B:D0:5A:83:82:A6:C5:E7:1A:80:39:84:E3:F7
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:c6:89:06:99:1e:27:e4:85:90:81:42:1d:6c:4f:ed:b9:
f1:2a:da:2e:20:81:c5:0e:2f:14:86:99:c3:80:e1:a8:08:dd:
6e:77:c5:27:bc:4b:10:e2:eb:18:65:5e:e1:c9:16:26:c1:77:
9d:71:32:e4:d1:0c:90:af:4c:77:50:f7:74:12:9b:97:f8:32:
e7:82:74:36:94:14:48:f3:d5:d6:44:30:d5:9b:21:ad:7c:ef:
63:6a:3c:50:2c:a2:5e:d9:f5:39:b1:4b:a7:d8:79:f0:05:46:
b8:cc:ba:4d:92:54:ce:dd:41:3d:23:06:10:fc:77:48:dd:62:
00:44:ed:6a:56:dc:85:6b:18:28:69:b7:81:13:42:78:72:60:
eb:b4:47:85:a5:30:58:75:64:97:ea:4f:0a:08:fa:2f:60:f9:
42:2f:20:28:ba:54:ee:ed:a5:8f:49:38:13:bc:1e:1c:49:aa:
62:49:e4:2a:6d:2b:ea:07:8d:cf:3f:7c:bb:df:1c:48:e8:b5:
74:84:19:c2:49:88:dd:87:62:a3:ff:0a:57:1f:5a:0a:00:36:
17:ee:da:9f:13:22:88:2a:d0:5b:69:6b:b3:79:81:6d:86:b7:
e1:cd:a0:3e:98:5b:97:cf:4f:05:b5:93:0c:b8:97:b0:d1:fa:
ea:c6:b4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhAm5L9fNoGsKY/XgM2UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjYwMzI1MTUwMTQzWhcNMjYwMzI2MTUwMTQzWjAzMTEwLwYDVQQD
EygwYTFlOTc0NmNmYWY3YmQwNWE4MzgyYTZjNWU3MWE4MDM5ODRlM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKJprwrrZvoNq5zT3d5t4lM0z7vL
SFA1ihf/LihyoTI8qIPGzaYkfOOk2GWMbEZrIzODOeqtDycbIXkVTvScsgIFyMR4
SnzBhymO603LyNcAvftqSwynXrQ46xDM80GZtjx+V6N8M/hooQ3JjsD0EiTipW4D
SA23rFjdxrlU1DRvmzE0Sebm8DkhArZ1BmbVEa9faFMIt+j1VPx9sH/EqaIwuh6Y
gDml7dD9tOWKQK2on7qB0TIF0UEwWwPWTbKIyMszOdyN0lIDdnRD0xuv5UQ+/FNX
cYE9GNu8hb6Bn2IakO05h5rHxMNhP5wooSWMkeWoesmcnbgEDq24lx1fWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoel0bPr3vQWoOCpsXnGoA5hOP3MB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVXGiQaZ
HifkhZCBQh1sT+258SraLiCBxQ4vFIaZw4DhqAjdbnfFJ7xLEOLrGGVe4ckWJsF3
nXEy5NEMkK9Md1D3dBKbl/gy54J0NpQUSPPV1kQw1ZshrXzvY2o8UCyiXtn1ObFL
p9h58AVGuMy6TZJUzt1BPSMGEPx3SN1iAETtalbchWsYKGm3gRNCeHJg67RHhaUw
WHVkl+pPCgj6L2D5Qi8gKLpU7u2lj0k4E7weHEmqYknkKm0r6geNzz98u98cSOi1
dIQZwkmI3Ydio/8KVx9aCgA2F+7anxMiiCrQW2lrs3mBbYa34c2gPphbl89PBbWT
DLiXsNH66sa0NQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:17 2026 by rpki-client