Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: Jgo0+B31Ubx3AxUq1rSsgZNpuNOD193xugkbLgElGbw=
Subject key identifier: 51:2B:CD:94:AA:E6:4B:99:2F:B5:1F:43:2D:D0:89:52:90:DD:A2:F5
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 019D2772A3399628AB5A43A6F5201F5CE576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: ZdTDFSUSMhCqI+Hyp4qOZ3wDGDvchPkZmkG1iklJ+dQ=)
2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a3:39:96:28:ab:5a:43:a6:f5:20:1f:5c:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=512bcd94aae64b992fb51f432dd0895290dda2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:ea:a0:bd:12:47:f1:f3:6f:6a:f8:6b:ce:
25:a5:6e:77:43:87:4f:65:12:1c:b9:9a:99:c0:ea:
67:aa:50:26:a7:7e:fd:90:a9:eb:50:9c:ea:52:46:
95:c8:b9:f5:1b:dd:e3:d4:ae:87:6e:d4:7a:6b:46:
c8:03:cf:93:48:5c:e7:ed:91:9d:ba:d2:43:ed:27:
8d:ab:2b:81:05:e0:69:39:6d:44:dd:8c:3b:9e:0b:
5f:92:4f:ce:3f:8c:75:d9:a4:ad:38:41:d0:d6:5f:
94:5a:ee:b9:5c:41:01:4c:08:0c:17:2f:36:fd:ee:
7b:5b:e9:28:0b:cd:ca:d1:8c:dc:8a:c0:97:e8:16:
60:c2:4e:45:a4:ec:a2:e4:0b:85:9e:a0:35:bc:83:
a0:64:ee:4f:80:e0:4e:71:aa:52:c9:27:33:74:e6:
c7:8e:9e:01:96:af:33:4d:29:95:29:5e:47:81:c2:
7d:da:0f:b1:bd:dc:6f:39:76:86:6f:08:a6:d0:02:
72:ca:7c:1b:9c:c1:d2:c7:8d:1f:f5:7f:81:e0:19:
0c:83:fc:48:f2:7e:d5:ee:0e:68:16:58:46:4d:67:
45:db:3f:d4:04:64:f3:0a:7c:a6:57:3a:02:35:5b:
2a:2c:0a:34:5d:79:6c:10:67:68:8d:15:62:bc:9b:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:CD:94:AA:E6:4B:99:2F:B5:1F:43:2D:D0:89:52:90:DD:A2:F5
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1a:0e:ad:11:ba:6b:27:d5:56:8d:90:34:e4:5f:97:d6:2d:
69:ce:a7:dd:04:c6:48:f4:e6:61:00:b2:f0:b0:a1:2c:ed:b6:
c3:67:f1:0b:e2:ec:40:07:87:5d:6c:a7:c1:cd:82:b4:3b:91:
54:36:96:4d:64:ad:14:43:41:76:4b:fd:08:ae:a8:f4:27:bd:
30:79:0e:7d:66:3c:b1:c7:02:ea:7f:37:59:d7:0c:24:c7:c1:
f6:2d:c3:db:91:dc:29:9b:3a:f0:8c:22:1b:42:de:26:86:25:
26:3a:29:d2:61:04:97:bc:fb:93:82:98:10:37:5d:6e:24:c2:
7d:36:c1:cf:a5:7f:d3:3c:48:63:29:20:c8:eb:66:d1:e6:df:
51:32:51:c2:f6:c7:2b:b2:24:6d:15:1f:e7:78:b0:b1:f1:9d:
06:15:5f:88:87:a5:cf:52:be:01:0a:2a:87:a1:d6:88:fb:8a:
02:1d:9f:0e:e7:26:18:a4:5d:2d:1a:56:8d:a8:14:4d:d8:7b:
34:d6:0c:b5:82:85:2f:7d:cf:d3:31:f1:40:54:f2:8a:cb:b6:
8b:24:a3:7d:69:33:a7:0b:63:92:9c:ae:5e:31:40:11:af:07:
f2:57:ee:68:4b:2f:c0:b0:79:ec:d5:82:3a:e5:6b:b6:d1:12:
40:eb:f1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncqM5liirWkOm9SAfXOV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2
YTBjYTUwHhcNMjYwMzI2MDAwMTU3WhcNMjYwMzI3MDAwMTU3WjAzMTEwLwYDVQQD
Eyg1MTJiY2Q5NGFhZTY0Yjk5MmZiNTFmNDMyZGQwODk1MjkwZGRhMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28XqoL0SR/Hzb2r4a84lpW53Q4dP
ZRIcuZqZwOpnqlAmp379kKnrUJzqUkaVyLn1G93j1K6HbtR6a0bIA8+TSFzn7ZGd
utJD7SeNqyuBBeBpOW1E3Yw7ngtfkk/OP4x12aStOEHQ1l+UWu65XEEBTAgMFy82
/e57W+koC83K0YzcisCX6BZgwk5FpOyi5AuFnqA1vIOgZO5PgOBOcapSySczdObH
jp4Blq8zTSmVKV5HgcJ92g+xvdxvOXaGbwim0AJyynwbnMHSx40f9X+B4BkMg/xI
8n7V7g5oFlhGTWdF2z/UBGTzCnymVzoCNVsqLAo0XXlsEGdojRVivJvd1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFErzZSq5kuZL7UfQy3QiVKQ3aL1MB8GA1UdIwQY
MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt
NzBjNjdmMTI2YmYyLzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy
LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBoOrRG6
ayfVVo2QNORfl9Ytac6n3QTGSPTmYQCy8LChLO22w2fxC+LsQAeHXWynwc2CtDuR
VDaWTWStFENBdkv9CK6o9Ce9MHkOfWY8sccC6n83WdcMJMfB9i3D25HcKZs68Iwi
G0LeJoYlJjop0mEEl7z7k4KYEDddbiTCfTbBz6V/0zxIYykgyOtm0ebfUTJRwvbH
K7IkbRUf53iwsfGdBhVfiIelz1K+AQoqh6HWiPuKAh2fDucmGKRdLRpWjagUTdh7
NNYMtYKFL33P0zHxQFTyisu2iySjfWkzpwtjkpyuXjFAEa8H8lfuaEsvwLB57NWC
OuVrttESQOvxyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:02 2026 by rpki-client