Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: TOkRoYaVqZlPlEHgreXyOJfQJHCPQEqeoC9OvN9q3cw=
Subject key identifier: A9:A0:0D:51:CC:8D:70:B7:B5:07:4A:0E:03:7D:A9:F5:50:E1:96:21
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019D2703DCB965E1D1039484601D5E079654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 08D5
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: q/QOaUUy5ZmOaROAGaR5Qyvc1dxD5e/IimsoKT7KWiA=)
2: 2yhdKHvPD6x57cR2KCiWvDWOuNI.roa (hash: P8G4fD653ANAlH3OwS5YzFRY2dEK5yZI+P33CF+4huY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:dc:b9:65:e1:d1:03:94:84:60:1d:5e:07:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=a9a00d51cc8d70b7b5074a0e037da9f550e19621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:ed:c0:ec:0c:be:83:f1:23:08:78:83:52:
9a:ad:be:ab:a5:a0:0c:cf:2f:af:67:1b:cc:63:69:
8e:3e:7d:fe:8a:78:de:ef:0b:f1:7d:1f:bf:78:21:
81:f9:b4:69:7c:46:95:d2:b7:80:c6:c7:5e:4c:5c:
8b:95:d8:88:ca:2a:b1:e9:54:f7:70:04:4b:95:a4:
ab:e3:4f:8f:3f:9a:23:30:61:11:a4:d1:11:de:98:
b2:55:4e:1d:f3:63:f2:83:24:cf:7b:08:0a:19:1d:
cb:10:36:59:cd:37:25:77:f3:64:b6:d0:d7:4b:17:
66:da:86:b1:e8:9a:9c:f5:98:30:e2:59:bb:11:f1:
1c:02:dd:09:54:f4:3e:e6:c8:3f:c2:80:3a:63:a4:
14:07:1f:6d:85:0e:1d:1a:ec:62:08:6a:82:04:9e:
5e:98:34:48:ee:c5:8a:b3:2e:5d:82:73:db:9f:6a:
69:6a:10:87:7e:0a:7b:6b:94:aa:5c:33:6c:ec:33:
9a:c6:61:a3:91:d4:90:1b:48:82:e6:8e:9f:64:7a:
16:49:26:2e:63:dd:c7:2e:67:dd:74:ce:8a:fd:d3:
36:c3:31:2c:aa:bc:57:c2:ed:9f:95:da:ef:fd:0f:
45:e7:16:31:6b:89:17:3a:93:c5:84:b4:41:c4:6e:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:0D:51:CC:8D:70:B7:B5:07:4A:0E:03:7D:A9:F5:50:E1:96:21
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:1e:af:fd:4b:41:1a:da:51:33:e2:ff:6e:27:74:9b:61:
3b:da:9e:4c:c1:66:6d:1d:43:38:b2:bf:ed:41:a6:42:ec:01:
11:08:7d:f3:e0:92:82:7f:94:cf:40:80:25:61:07:27:b8:1f:
fd:a4:61:7f:1d:14:81:a7:62:3e:25:fe:c8:f9:f3:83:3f:7e:
1c:d2:7c:80:a3:aa:20:67:da:3a:90:51:30:08:d8:02:2e:17:
40:1d:f4:fa:2b:6f:98:a2:0d:bc:8b:51:3e:91:2e:e8:e4:af:
41:f6:75:1b:6b:b4:6c:ed:7a:6a:5f:8d:7b:4d:d7:fc:a2:6f:
db:8c:fc:3a:0b:3e:35:b9:0d:eb:b8:71:05:e3:e5:3a:6a:32:
74:97:69:b9:28:1b:d8:06:ee:6a:05:3e:da:17:18:7d:45:1a:
dc:dc:40:36:e9:0b:f5:a8:40:ca:7b:78:64:26:50:e6:c7:bd:
5e:89:ff:b3:c6:64:83:f2:81:ba:02:71:71:70:b2:c5:6f:f0:
5c:43:8e:d1:3a:28:19:92:57:54:68:7c:88:2a:20:c9:cb:96:
3c:24:a1:bb:3f:98:35:af:c4:e0:ad:ad:2d:2e:fe:ec:ad:bc:
c5:23:80:f7:fa:e8:6b:dc:bb:32:49:33:f0:7c:1e:79:a4:33:
a7:2b:2d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9y5ZeHRA5SEYB1eB5ZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmFiNzhlZGE3YmYwMWQ5NWI1OTc3NGVkMzQ2YmNiZjk2
YTI2ODQwHhcNMjYwMzI1MjIwMDU3WhcNMjYwMzI2MjIwMDU3WjAzMTEwLwYDVQQD
EyhhOWEwMGQ1MWNjOGQ3MGI3YjUwNzRhMGUwMzdkYTlmNTUwZTE5NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnXtwOwMvoPxIwh4g1Karb6rpaAM
zy+vZxvMY2mOPn3+inje7wvxfR+/eCGB+bRpfEaV0reAxsdeTFyLldiIyiqx6VT3
cARLlaSr40+PP5ojMGERpNER3piyVU4d82PygyTPewgKGR3LEDZZzTcld/NkttDX
Sxdm2oax6Jqc9Zgw4lm7EfEcAt0JVPQ+5sg/woA6Y6QUBx9thQ4dGuxiCGqCBJ5e
mDRI7sWKsy5dgnPbn2ppahCHfgp7a5SqXDNs7DOaxmGjkdSQG0iC5o6fZHoWSSYu
Y93HLmfddM6K/dM2wzEsqrxXwu2fldrv/Q9F5xYxa4kXOpPFhLRBxG7LZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmgDVHMjXC3tQdKDgN9qfVQ4ZYhMB8GA1UdIwQY
MBaAFNQqt47ae/AdlbWXdO00a8v5aiaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2Et
OTAxMmJlYWUyODUyLzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2EtOTAxMmJlYWUyODUy
LzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1Ier/1L
QRraUTPi/24ndJthO9qeTMFmbR1DOLK/7UGmQuwBEQh98+CSgn+Uz0CAJWEHJ7gf
/aRhfx0UgadiPiX+yPnzgz9+HNJ8gKOqIGfaOpBRMAjYAi4XQB30+itvmKINvItR
PpEu6OSvQfZ1G2u0bO16al+Ne03X/KJv24z8Ogs+NbkN67hxBePlOmoydJdpuSgb
2AbuagU+2hcYfUUa3NxANukL9ahAynt4ZCZQ5se9Xon/s8Zkg/KBugJxcXCyxW/w
XEOO0TooGZJXVGh8iCogycuWPCShuz+YNa/E4K2tLS7+7K28xSOA9/roa9y7Mkkz
8HweeaQzpystBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:35 2026 by rpki-client