Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json)
Hash identifier: xadcRzOI2TnsCnqIWvbUEQoD3NpPy0za34a2zZqu7Hw=
Subject key identifier: 81:96:50:44:E0:90:BB:4B:87:4A:49:A4:1A:44:B9:82:40:40:4C:3A
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 019D2A04D1601660F89083BFEDA5DF5D3D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
Manifest number: 0389
Signing time: Thu 26 Mar 2026 12:00:51 +0000
Manifest this update: Thu 26 Mar 2026 12:00:51 +0000
Manifest next update: Fri 27 Mar 2026 12:00:51 +0000
Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: MrvphFih15xXiHe0xaibSUKCSyG/EWrUXOhCcLPINCU=)
2: XC4XfUnYUHL3GWJtIhpSMk_2aEg.roa (hash: nZn5ZWsX+2jr8MBM7c6IGtv9xGRydCTv/MbUPDW32YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d1:60:16:60:f8:90:83:bf:ed:a5:df:5d:3d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Mar 26 12:00:51 2026 GMT
Not After : Mar 27 12:00:51 2026 GMT
Subject: CN=81965044e090bb4b874a49a41a44b98240404c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:7e:fa:b6:1e:cf:72:14:11:8f:15:bf:9b:
48:94:df:03:00:71:2d:0c:b6:76:21:e9:5c:fb:39:
01:24:f3:47:32:e2:2b:78:3d:a5:b9:6f:dd:d6:19:
d5:f7:3c:3a:14:d0:bb:5f:db:d7:5e:d7:a5:14:ab:
8a:2b:f0:a6:30:67:e3:b2:ac:99:3f:6f:9c:e4:9a:
73:01:ca:a8:ba:f4:91:0e:2d:71:63:89:8f:ea:a9:
6a:8c:8e:9a:2e:86:9e:35:af:99:f8:c4:d2:28:85:
0c:01:33:95:99:ac:50:58:71:88:ec:6c:e8:d4:7d:
4f:bb:e4:d4:5e:13:f1:07:db:26:52:50:21:02:fd:
11:71:f4:16:b6:c0:88:d4:8d:21:c5:94:77:0c:f1:
f3:c0:53:c5:c8:e2:43:d7:4c:c9:b1:c9:2c:42:ae:
30:48:d0:7b:bd:df:9b:08:ea:b7:ea:d8:d1:73:4f:
86:59:12:af:99:b0:18:78:b2:c9:3e:d0:96:4f:c5:
f4:ea:0d:0b:9d:74:2d:0a:03:f8:37:e1:d4:1e:fd:
10:02:c2:be:ba:79:73:e0:55:c8:bb:2b:e6:fc:f4:
6b:db:6e:b2:17:d3:88:a1:51:c6:d4:4e:bd:0e:25:
5d:c5:e8:54:8c:60:80:58:ba:b2:b7:b5:9c:4f:0e:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:50:44:E0:90:BB:4B:87:4A:49:A4:1A:44:B9:82:40:40:4C:3A
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:71:f1:63:36:3b:c1:d6:9e:bc:0b:29:f6:74:1b:14:c5:
a9:fe:8e:7a:37:85:2b:f1:fa:c8:24:40:59:5d:cf:b6:46:df:
22:59:6e:a0:77:05:1c:a5:8e:e4:df:6e:4d:14:8f:eb:b7:e4:
a1:23:61:29:87:02:3c:2a:ac:5a:b7:4c:a3:42:04:ef:04:d3:
9b:74:41:18:af:2c:58:0c:ea:07:a3:bf:89:24:43:83:81:a7:
26:ac:ae:98:0a:7b:53:35:d1:1f:93:03:38:d8:27:d5:77:6a:
3b:91:cc:72:fd:d9:22:f0:85:8d:f9:c3:63:0f:2a:77:80:7e:
f9:cb:77:45:94:69:5f:6f:32:80:ff:f6:1b:cb:5d:a4:14:b0:
68:4e:c7:a4:cf:bb:96:18:a6:6b:5f:6f:32:8c:35:77:d1:73:
5c:12:3c:d2:f5:70:59:05:65:b6:5a:6b:79:eb:29:1c:fb:aa:
95:44:20:90:8a:44:13:be:b7:b2:f1:af:53:33:65:4e:25:48:
40:b9:98:b8:e8:76:33:f9:41:5a:57:ca:b5:ab:38:6b:c0:08:
7c:7a:16:28:4a:db:d7:ed:c3:33:ae:d2:9d:e1:af:a8:e7:4f:
6a:05:51:a4:b1:4d:76:6e:fb:b2:45:33:2f:ba:50:e2:9f:b4:
73:af:ce:c2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qBNFgFmD4kIO/7aXfXT1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhN2NmYWM2YWYxMDg2NjBkOTRlMmZjZWQ2MWU2MWZmMjE5
YzBhNTYwHhcNMjYwMzI2MTIwMDUxWhcNMjYwMzI3MTIwMDUxWjAzMTEwLwYDVQQD
Eyg4MTk2NTA0NGUwOTBiYjRiODc0YTQ5YTQxYTQ0Yjk4MjQwNDA0YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfZ++rYez3IUEY8Vv5tIlN8DAHEt
DLZ2Ielc+zkBJPNHMuIreD2luW/d1hnV9zw6FNC7X9vXXtelFKuKK/CmMGfjsqyZ
P2+c5JpzAcqouvSRDi1xY4mP6qlqjI6aLoaeNa+Z+MTSKIUMATOVmaxQWHGI7Gzo
1H1Pu+TUXhPxB9smUlAhAv0RcfQWtsCI1I0hxZR3DPHzwFPFyOJD10zJscksQq4w
SNB7vd+bCOq36tjRc0+GWRKvmbAYeLLJPtCWT8X06g0LnXQtCgP4N+HUHv0QAsK+
unlz4FXIuyvm/PRr226yF9OIoVHG1E69DiVdxehUjGCAWLqyt7WcTw6e7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIGWUETgkLtLh0pJpBpEuYJAQEw6MB8GA1UdIwQY
MBaAFPp8+savEIZg2U4vztYeYf8hnApWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uejZ4cThRaG1EWlRpX08xaDVoX3lHY0NsWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjgyMjMwLWI0Y2QtNDU5NS1iZDFl
LTMyYTQxYmEzZTNjNS8xLzEtbno2eHE4UWhtRFpUaV9PMWg1aF95R2NDbFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZkLzY4MjIzMC1iNGNkLTQ1OTUtYmQxZS0zMmE0MWJhM2Uz
YzUvMS8xLW56NnhxOFFobURaVGlfTzFoNWhfeUdjQ2xZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnVx
8WM2O8HWnrwLKfZ0GxTFqf6OejeFK/H6yCRAWV3PtkbfIlluoHcFHKWO5N9uTRSP
67fkoSNhKYcCPCqsWrdMo0IE7wTTm3RBGK8sWAzqB6O/iSRDg4GnJqyumAp7UzXR
H5MDONgn1XdqO5HMcv3ZIvCFjfnDYw8qd4B++ct3RZRpX28ygP/2G8tdpBSwaE7H
pM+7lhima19vMow1d9FzXBI80vVwWQVltlpreespHPuqlUQgkIpEE763svGvUzNl
TiVIQLmYuOh2M/lBWlfKtas4a8AIfHoWKErb1+3DM67SneGvqOdPagVRpLFNdm77
skUzL7pQ4p+0c6/Owg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:30 2026 by rpki-client