Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: T4afp8mDa6nTg0yhkSumt+otlILx+t6fVaJtXp9yB68=
Subject key identifier: 23:32:78:FE:B7:3D:A3:B8:2C:F2:D1:4F:AE:03:80:49:6D:0B:8B:16
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 019D28847F91D0F00CE1DD1F2A4BFB8BAB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0A9B
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: VrVYiz7KSoqGV97J8WufWJMUt94p39Z9xsrfUnhgIDA=)
2: dIklPH6MQVoi4FKEgOv-ZNvLOdQ.roa (hash: 8vf5FWodBfFQuv37hN2+e65ZSB5TlTHJUcgDUZ0ExBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7f:91:d0:f0:0c:e1:dd:1f:2a:4b:fb:8b:ab:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=233278feb73da3b82cf2d14fae0380496d0b8b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:9c:9d:3a:34:26:7a:b3:99:62:db:f7:d6:
73:57:f5:0a:7f:7d:8d:8d:7d:f9:8a:ee:9f:c2:bf:
1f:39:94:c7:18:06:22:9a:ef:70:f1:48:f3:8f:0a:
ea:aa:e4:0c:b4:f3:04:38:02:55:de:76:22:4c:55:
98:a1:cb:78:65:dd:78:64:6a:be:a8:e6:cd:0c:e9:
7e:7a:87:a6:01:5b:79:58:14:50:e2:84:f0:2e:26:
03:12:a3:4c:90:c1:23:af:92:90:15:f6:b9:5b:8d:
34:ee:28:fb:3b:b2:a3:4d:61:ee:fa:a7:26:a8:53:
c0:c4:5b:88:43:45:a0:22:40:51:34:b8:54:7e:ba:
d0:02:f4:d9:f5:10:c2:26:05:e8:af:5d:d1:78:4e:
b2:40:89:fe:28:c1:03:85:89:cb:f0:9c:a9:7e:97:
f6:44:83:ba:63:4d:2d:72:88:83:72:3e:9a:c8:9f:
ce:22:5b:4c:be:f7:96:57:e7:0a:8a:c3:78:5f:c7:
13:c1:8e:e6:79:1f:59:e9:6b:62:88:31:db:de:1a:
fe:34:66:d1:e7:d9:ec:67:49:b2:9b:bb:ca:df:42:
fa:ea:45:6b:7a:f2:62:ef:b3:a3:e6:c2:6f:bb:d0:
75:e5:44:95:bf:93:cb:70:f3:20:8a:ae:13:f7:2a:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:78:FE:B7:3D:A3:B8:2C:F2:D1:4F:AE:03:80:49:6D:0B:8B:16
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f8:69:73:21:6d:1d:79:4d:e0:12:c3:fc:27:8a:54:d3:6f:
d9:85:02:c0:05:85:8f:25:5e:47:4d:2a:ae:17:a9:eb:ac:45:
0b:d2:7b:2b:39:3f:80:2a:a1:9c:34:78:a6:a2:bf:4d:09:96:
68:73:f7:a4:a9:68:f7:9c:29:d0:91:2b:c9:86:59:8f:ab:ec:
1c:88:1d:9c:d1:ce:f5:59:d0:7a:db:5b:45:fc:3f:67:84:d6:
72:9a:f8:8a:46:80:0e:dd:9e:a3:2e:a2:66:5c:4d:a4:60:00:
1b:55:10:55:2e:d0:f6:30:07:ef:99:c5:ad:68:56:bc:80:34:
0c:98:27:2f:52:4c:9d:a2:cf:98:5b:69:45:ec:95:4d:a6:4d:
08:5f:f8:97:c6:9e:d8:a4:d8:7f:e8:3f:e7:80:dd:24:5c:6c:
e4:99:d8:38:a1:2f:a4:f7:d0:d0:ae:a0:a4:bc:97:5b:b9:15:
fa:54:07:69:b9:bc:d2:8b:83:a7:7b:a3:8b:4a:d1:12:1f:cf:
2f:5e:0e:61:fb:f8:25:fb:bf:c2:a0:e1:e3:40:72:f8:44:d8:
29:ac:8c:99:ed:20:53:5e:52:be:77:41:08:88:c3:e3:07:15:
61:0a:b4:3f:17:a8:2e:e4:fa:39:03:ba:0f:04:ee:16:28:5c:
62:02:36:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ohH+R0PAM4d0fKkv7i6toMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy
ZTcwZjUwHhcNMjYwMzI2MDUwMTA1WhcNMjYwMzI3MDUwMTA1WjAzMTEwLwYDVQQD
EygyMzMyNzhmZWI3M2RhM2I4MmNmMmQxNGZhZTAzODA0OTZkMGI4YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4WcnTo0JnqzmWLb99ZzV/UKf32N
jX35iu6fwr8fOZTHGAYimu9w8UjzjwrqquQMtPMEOAJV3nYiTFWYoct4Zd14ZGq+
qObNDOl+eoemAVt5WBRQ4oTwLiYDEqNMkMEjr5KQFfa5W4007ij7O7KjTWHu+qcm
qFPAxFuIQ0WgIkBRNLhUfrrQAvTZ9RDCJgXor13ReE6yQIn+KMEDhYnL8Jypfpf2
RIO6Y00tcoiDcj6ayJ/OIltMvveWV+cKisN4X8cTwY7meR9Z6WtiiDHb3hr+NGbR
59nsZ0mym7vK30L66kVrevJi77Oj5sJvu9B15USVv5PLcPMgiq4T9yrmmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCMyeP63PaO4LPLRT64DgEltC4sWMB8GA1UdIwQY
MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw
LWE1NGViODU2NmJlZi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhLzdlN2ZjZS00ODQxLTQ3NmItODRjMC1hNTRlYjg1NjZi
ZWYvMS8xLWVJUGZUb3N5VjJkNXZUak5NdExaNUl1Y1BVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/hp
cyFtHXlN4BLD/CeKVNNv2YUCwAWFjyVeR00qrhep66xFC9J7Kzk/gCqhnDR4pqK/
TQmWaHP3pKlo95wp0JEryYZZj6vsHIgdnNHO9VnQettbRfw/Z4TWcpr4ikaADt2e
oy6iZlxNpGAAG1UQVS7Q9jAH75nFrWhWvIA0DJgnL1JMnaLPmFtpReyVTaZNCF/4
l8ae2KTYf+g/54DdJFxs5JnYOKEvpPfQ0K6gpLyXW7kV+lQHabm80ouDp3uji0rR
Eh/PL14OYfv4Jfu/wqDh40By+ETYKayMme0gU15SvndBCIjD4wcVYQq0PxeoLuT6
OQO6DwTuFihcYgI2sQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:44 2026 by rpki-client