Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: tUmKCPF6G142kSyZ/9GUeYm+8Q9uwE3UYMxGvBNegck=
Subject key identifier: F5:6A:24:B6:54:63:33:F0:37:68:48:29:1A:37:30:5D:87:A7:04:8E
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019D2961B8129AE4BFA811A3798DB12A3219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 06D0
Signing time: Thu 26 Mar 2026 09:02:43 +0000
Manifest this update: Thu 26 Mar 2026 09:02:43 +0000
Manifest next update: Fri 27 Mar 2026 09:02:43 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: u2haxUsUGl/BemjYPwBJC57nDhRV5DrKz7hQ/2MfJfs=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:b8:12:9a:e4:bf:a8:11:a3:79:8d:b1:2a:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Mar 26 09:02:43 2026 GMT
Not After : Mar 27 09:02:43 2026 GMT
Subject: CN=f56a24b6546333f0376848291a37305d87a7048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:7c:48:f6:bf:89:a7:f6:d7:4e:2f:64:f9:
51:7d:e3:ac:10:32:30:0c:1d:50:f2:be:f1:37:37:
1b:70:59:ca:e8:ec:f7:e1:5a:81:ce:18:c6:55:ac:
a5:bf:59:de:b3:2d:d6:49:24:8a:d9:68:35:d8:b0:
4b:5f:f1:1a:6f:18:1f:7e:ae:1e:14:b2:e5:a5:e2:
dc:06:b8:7d:12:a7:88:f1:98:89:d4:d8:01:b8:37:
1a:66:f7:52:f8:c3:a9:e4:72:a3:7d:66:40:f6:cb:
b0:b4:6a:e9:da:eb:db:0e:6e:c9:7b:66:ed:29:96:
78:50:03:ce:3b:96:b7:13:68:e0:22:55:a4:6b:04:
d4:59:f6:d2:26:57:46:3c:44:89:5e:c5:d7:6d:3f:
62:73:9c:61:ae:9d:ed:d2:97:0c:4b:2c:dc:39:19:
bc:83:93:8b:f0:91:0d:62:cb:43:c9:8e:32:c1:47:
d5:f3:23:2e:ed:eb:5e:a0:f2:2f:18:d0:e6:f5:b2:
5d:47:81:a3:76:4f:6c:cd:27:42:ad:b4:08:f2:87:
e1:90:79:ac:bd:ca:27:a0:3d:08:2d:7d:74:45:a9:
45:00:c8:60:a2:43:52:68:91:37:24:f5:82:ae:f8:
bb:38:e6:93:bc:3f:20:a1:ba:1e:ae:75:82:0b:0a:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:24:B6:54:63:33:F0:37:68:48:29:1A:37:30:5D:87:A7:04:8E
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d1:69:65:2d:02:00:78:1f:81:a6:89:69:eb:c3:8f:13:5d:
6e:35:94:3d:1d:e7:78:5f:48:fb:5c:90:7c:98:6c:57:82:25:
9f:13:e2:c2:85:a4:13:41:c3:2e:c9:08:0d:99:a3:73:c0:d9:
20:f2:e8:b6:1c:d9:e4:9b:dd:2e:f6:04:cb:2c:6a:d2:dd:e4:
43:65:d8:6c:b7:67:02:5b:d9:12:95:99:37:6b:d1:a5:68:b7:
c6:cc:f8:58:82:bb:cd:40:63:ff:f9:70:89:0c:b4:3c:cb:24:
ec:3c:ad:c0:8a:85:2d:36:50:f9:cd:60:88:37:bb:e8:05:ae:
3b:01:f3:3f:55:72:61:eb:c7:7e:f2:14:3e:db:46:99:b5:fa:
8f:d5:76:4f:fb:ef:1b:41:a2:10:bf:f0:45:7a:7f:77:c2:96:
6f:83:7a:18:59:f0:4c:23:ea:17:37:7e:7d:0d:23:41:9f:3b:
e6:c0:26:e2:a1:ed:fe:31:15:70:30:81:19:a0:93:5d:34:8c:
e9:bc:d7:56:ea:48:fb:68:97:aa:b4:8a:04:6a:f2:be:16:95:
51:d7:4c:78:e3:7d:e6:1d:13:d3:b5:88:ec:43:cf:5e:1d:69:
eb:99:bf:31:67:01:35:99:cf:65:96:49:3f:f4:98:ce:92:3b:
e8:3c:1b:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pYbgSmuS/qBGjeY2xKjIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy
MzFmZjIwHhcNMjYwMzI2MDkwMjQzWhcNMjYwMzI3MDkwMjQzWjAzMTEwLwYDVQQD
EyhmNTZhMjRiNjU0NjMzM2YwMzc2ODQ4MjkxYTM3MzA1ZDg3YTcwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HV8SPa/iaf2104vZPlRfeOsEDIw
DB1Q8r7xNzcbcFnK6Oz34VqBzhjGVaylv1nesy3WSSSK2Wg12LBLX/Eabxgffq4e
FLLlpeLcBrh9EqeI8ZiJ1NgBuDcaZvdS+MOp5HKjfWZA9suwtGrp2uvbDm7Je2bt
KZZ4UAPOO5a3E2jgIlWkawTUWfbSJldGPESJXsXXbT9ic5xhrp3t0pcMSyzcORm8
g5OL8JENYstDyY4ywUfV8yMu7eteoPIvGNDm9bJdR4Gjdk9szSdCrbQI8ofhkHms
vconoD0ILX10RalFAMhgokNSaJE3JPWCrvi7OOaTvD8goboernWCCwqz5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPVqJLZUYzPwN2hIKRo3MF2HpwSOMB8GA1UdIwQY
MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4
LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1
NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtFp
ZS0CAHgfgaaJaevDjxNdbjWUPR3neF9I+1yQfJhsV4IlnxPiwoWkE0HDLskIDZmj
c8DZIPLothzZ5JvdLvYEyyxq0t3kQ2XYbLdnAlvZEpWZN2vRpWi3xsz4WIK7zUBj
//lwiQy0PMsk7DytwIqFLTZQ+c1giDe76AWuOwHzP1VyYevHfvIUPttGmbX6j9V2
T/vvG0GiEL/wRXp/d8KWb4N6GFnwTCPqFzd+fQ0jQZ875sAm4qHt/jEVcDCBGaCT
XTSM6bzXVupI+2iXqrSKBGryvhaVUddMeON95h0T07WI7EPPXh1p65m/MWcBNZnP
ZZZJP/SYzpI76DwbsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:50 2026 by rpki-client