Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: z1DYZ8aJxRmZa3f6r+Kygz5QrujeplKwOv+v31SfT1Y=
Subject key identifier: 3C:D2:B3:8D:EB:6D:22:0B:DD:97:59:FF:2F:B0:2D:ED:C8:16:97:F6
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019D254CA4CDFE8CDABCD071D9FAA49936C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 14:01:13 +0000
Manifest this update: Wed 25 Mar 2026 14:01:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: t9HKA3TTZgZ+VruGqEdQSONY4NJGZclhWW9nMx+UFhI=)
2: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (hash: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ=)
3: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (hash: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a4:cd:fe:8c:da:bc:d0:71:d9:fa:a4:99:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Mar 25 14:01:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=3cd2b38deb6d220bdd9759ff2fb02dedc81697f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:30:3b:c5:ac:77:b0:94:d8:a0:67:f5:11:
5a:13:b3:25:ae:65:95:e9:17:da:c4:a3:21:e4:de:
7e:92:b4:78:e8:7f:b8:68:ea:60:20:c9:40:a1:31:
a3:92:6d:2d:a8:17:15:f1:b2:23:3e:27:88:22:fc:
08:6b:43:32:71:73:5d:b3:47:2a:d9:c3:a2:ff:cb:
b1:65:41:05:28:1a:b9:c6:2e:96:51:0b:4e:6e:e5:
b3:68:2f:3e:08:e5:46:5e:5e:03:11:42:14:11:1c:
39:e5:3b:a2:da:d0:f9:9b:09:98:ef:51:5d:69:75:
8b:f1:ed:84:f9:e5:3b:41:4a:e8:9c:f5:46:eb:b2:
72:70:c8:46:95:4f:3c:2d:c7:fe:8c:7d:d5:cc:29:
fa:14:ee:7f:16:52:58:d4:a0:0f:5e:c0:e8:5c:a6:
6b:88:17:fb:9e:b2:30:17:5e:af:97:bb:49:88:27:
d5:91:1b:3c:83:01:0d:64:36:09:00:57:05:ab:52:
3c:cb:ae:b5:f6:1d:d1:b1:f5:f9:93:fc:f7:ff:4f:
d8:df:f8:54:f7:33:17:78:21:0d:a7:12:0d:88:d1:
73:da:b7:cf:22:79:ea:61:89:35:0c:b4:1f:5e:76:
da:9e:85:c0:51:22:3f:e0:5a:27:b4:66:3f:24:72:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:B3:8D:EB:6D:22:0B:DD:97:59:FF:2F:B0:2D:ED:C8:16:97:F6
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c4:3a:19:b9:ab:cb:a5:cc:a6:31:83:d4:28:ed:54:3d:11:
4e:58:1d:21:4d:36:49:37:65:ad:c4:59:e8:b1:d5:f5:d1:6b:
55:50:0e:f9:04:7a:ae:2c:a7:24:b9:74:60:7e:1b:00:dd:90:
80:de:68:63:59:2f:09:6b:78:a9:b1:c8:bf:5d:05:c7:21:15:
ee:43:64:2b:d7:e0:5c:b4:2e:81:bd:e2:0a:13:a0:44:70:44:
77:3d:a2:67:0c:0c:03:42:42:22:06:dc:c1:79:3f:d9:27:e1:
3f:49:fd:b5:82:e5:c4:9c:fa:6a:88:29:bb:63:3d:fe:92:2a:
a9:88:67:fe:61:e7:c8:03:a5:94:fe:f6:c7:6d:ea:ff:67:1a:
3d:70:75:00:0f:c9:1c:91:06:2a:68:a2:de:e3:50:d4:2e:e2:
18:2f:e1:ed:07:6a:2d:ca:82:29:79:f8:5a:a8:98:ee:54:5a:
3a:d2:38:95:1e:e0:9f:fa:c4:62:25:0c:cb:6f:14:21:19:e6:
2b:4d:21:a9:7f:87:7f:82:29:a2:f7:63:9c:30:2e:f5:87:52:
e4:40:04:71:83:9b:26:53:45:a7:51:15:64:4f:de:14:73:56:
22:cc:b4:16:91:d4:b0:65:f7:ad:c6:36:d3:a0:3e:a0:cb:43:
64:26:84:eb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0lTKTN/ozavNBx2fqkmTbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw
NjM1NzAwHhcNMjYwMzI1MTQwMTEzWhcNMjYwMzI2MTQwMTEzWjAzMTEwLwYDVQQD
EygzY2QyYjM4ZGViNmQyMjBiZGQ5NzU5ZmYyZmIwMmRlZGM4MTY5N2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2cwO8Wsd7CU2KBn9RFaE7MlrmWV
6RfaxKMh5N5+krR46H+4aOpgIMlAoTGjkm0tqBcV8bIjPieIIvwIa0MycXNds0cq
2cOi/8uxZUEFKBq5xi6WUQtObuWzaC8+COVGXl4DEUIUERw55Tui2tD5mwmY71Fd
aXWL8e2E+eU7QUronPVG67JycMhGlU88Lcf+jH3VzCn6FO5/FlJY1KAPXsDoXKZr
iBf7nrIwF16vl7tJiCfVkRs8gwENZDYJAFcFq1I8y6619h3RsfX5k/z3/0/Y3/hU
9zMXeCENpxINiNFz2rfPInnqYYk1DLQfXnbanoXAUSI/4FontGY/JHIGxQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDzSs43rbSIL3ZdZ/y+wLe3IFpf2MB8GA1UdIwQY
MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5
LWI5MTQxNTliYThhZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZhL2QzYmZlNi03OGI1LTQzN2ItOThlOS1iOTE0MTU5YmE4
YWQvMS8xLW5DMExYcjJyWGdpS3pEd1h5dDVFX2dHTlhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMQ6
Gbmry6XMpjGD1CjtVD0RTlgdIU02STdlrcRZ6LHV9dFrVVAO+QR6riynJLl0YH4b
AN2QgN5oY1kvCWt4qbHIv10FxyEV7kNkK9fgXLQugb3iChOgRHBEdz2iZwwMA0JC
IgbcwXk/2SfhP0n9tYLlxJz6aogpu2M9/pIqqYhn/mHnyAOllP72x23q/2caPXB1
AA/JHJEGKmii3uNQ1C7iGC/h7QdqLcqCKXn4WqiY7lRaOtI4lR7gn/rEYiUMy28U
IRnmK00hqX+Hf4IpovdjnDAu9YdS5EAEcYObJlNFp1EVZE/eFHNWIsy0FpHUsGX3
rcY206A+oMtDZCaE6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:33 2026 by rpki-client