Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: xWxuEKq76QCxvx0STzlKCZFFnqslG4M8IkRjVPqgo3c=
Subject key identifier: DD:80:B7:BA:1A:13:21:EF:D4:49:59:11:62:C9:71:CC:29:8F:5B:3C
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019D265FCE9A4A60C36024ED9D359AD64C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 1548
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: TFLzeFutJ6wymKlK7ZquThSNnzZtOMR50NYABKuERug=)
2: q2-IGhwQSLSx5V9fY6kSeD39pbA.roa (hash: DfOwmBNWH7uAhJlIMJxO08FzHN1+2RmMZDRpAI6F/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ce:9a:4a:60:c3:60:24:ed:9d:35:9a:d6:4c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=dd80b7ba1a1321efd449591162c971cc298f5b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:f1:b1:b8:0e:7c:a1:3d:e4:4f:a0:de:50:
29:43:05:41:d9:fd:31:eb:cd:48:3a:17:96:15:d8:
90:e8:52:56:cf:31:7b:8d:62:ac:89:02:3f:13:d0:
13:03:df:38:34:ac:7a:00:f9:8f:03:84:57:e0:72:
2d:2a:0c:f1:7c:c4:79:40:f2:d4:4f:1d:9a:4c:e7:
1e:9b:9c:49:71:26:e7:bc:4d:a8:04:b1:53:64:fa:
f5:fc:6a:db:b3:ae:85:a5:af:77:9f:a9:56:87:5b:
2c:57:5d:91:1f:4d:89:18:cb:70:a8:54:32:11:7f:
de:30:b1:b5:77:d1:3c:8e:be:93:f4:90:e2:e7:4f:
d2:9b:00:d1:0b:64:51:e3:25:35:50:62:2e:35:32:
25:05:9d:ff:da:d0:03:ac:6f:c8:45:bb:b7:12:4c:
9d:67:e2:d4:2e:a2:f3:88:f3:61:93:b4:2a:78:38:
55:e2:9d:56:1d:82:49:0f:a5:32:a6:c7:28:21:2a:
0b:99:10:61:bd:35:d0:bf:bb:47:e9:87:12:46:52:
a8:f3:3c:03:4e:96:4f:bd:26:3b:46:9a:d7:0d:c8:
e7:e5:2b:0c:e7:07:5f:70:ce:0a:76:0f:9d:e7:ac:
fa:0d:54:66:8e:19:54:4b:94:83:38:10:3f:3f:cd:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:80:B7:BA:1A:13:21:EF:D4:49:59:11:62:C9:71:CC:29:8F:5B:3C
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:77:84:1e:fe:03:b8:d0:0d:a0:10:af:23:4d:6e:38:2a:c0:
4c:17:54:97:9b:2a:6c:15:0a:a4:d1:eb:3e:83:ed:48:21:9d:
63:01:bf:50:46:94:62:8a:c2:95:ac:d3:53:d6:0c:d6:a7:b8:
a6:5f:5e:83:e5:e3:4c:42:e3:4b:d8:44:e4:4b:2d:7c:b6:5f:
51:79:89:1e:9f:d2:aa:87:91:c9:14:da:ac:d8:cb:a7:fa:db:
2a:a1:6b:f1:ea:17:d9:a0:45:1a:d1:69:e2:f4:a7:f8:f3:4d:
09:0f:a4:01:f7:8c:2a:87:30:ec:97:88:89:96:dc:cd:f5:09:
e2:08:a3:04:ca:c5:05:ee:88:76:3c:24:56:9d:0e:7d:2c:44:
0a:1d:52:22:b0:12:15:f5:91:cd:e3:e4:3f:09:26:2f:27:70:
56:0a:d7:1d:81:85:7f:a3:7e:5d:27:6f:89:63:96:de:9b:21:
11:5f:d5:9f:97:a1:b0:0b:f9:59:60:ad:2b:45:8d:09:51:68:
ec:ec:12:22:af:ff:a8:99:a2:8f:aa:be:ef:90:ae:18:61:d3:
12:66:db:41:24:ba:b2:cf:0e:83:9e:63:b6:ee:34:8c:cf:c6:
a7:e1:1b:44:45:5e:2d:87:a6:3d:72:c2:e0:60:73:06:40:6e:
9a:cc:c8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX86aSmDDYCTtnTWa1kwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDg2ZGRkOTdiYTM4MTM4OTM1N2UwZTU2Y2ExMWU1Y2Zl
OGY0NTMwHhcNMjYwMzI1MTkwMTQ2WhcNMjYwMzI2MTkwMTQ2WjAzMTEwLwYDVQQD
EyhkZDgwYjdiYTFhMTMyMWVmZDQ0OTU5MTE2MmM5NzFjYzI5OGY1YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vjxsbgOfKE95E+g3lApQwVB2f0x
681IOheWFdiQ6FJWzzF7jWKsiQI/E9ATA984NKx6APmPA4RX4HItKgzxfMR5QPLU
Tx2aTOcem5xJcSbnvE2oBLFTZPr1/Grbs66Fpa93n6lWh1ssV12RH02JGMtwqFQy
EX/eMLG1d9E8jr6T9JDi50/SmwDRC2RR4yU1UGIuNTIlBZ3/2tADrG/IRbu3Ekyd
Z+LULqLziPNhk7QqeDhV4p1WHYJJD6UypscoISoLmRBhvTXQv7tH6YcSRlKo8zwD
TpZPvSY7RprXDcjn5SsM5wdfcM4Kdg+d56z6DVRmjhlUS5SDOBA/P80lvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2At7oaEyHv1ElZEWLJccwpj1s8MB8GA1UdIwQY
MBaAFNYIbd2XujgTiTV+DlbKEeXP6PRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAt
ODE1Zjk5MGJkNDMxLzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAtODE1Zjk5MGJkNDMx
LzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3eEHv4D
uNANoBCvI01uOCrATBdUl5sqbBUKpNHrPoPtSCGdYwG/UEaUYorClazTU9YM1qe4
pl9eg+XjTELjS9hE5EstfLZfUXmJHp/SqoeRyRTarNjLp/rbKqFr8eoX2aBFGtFp
4vSn+PNNCQ+kAfeMKocw7JeIiZbczfUJ4gijBMrFBe6IdjwkVp0OfSxECh1SIrAS
FfWRzePkPwkmLydwVgrXHYGFf6N+XSdviWOW3pshEV/Vn5ehsAv5WWCtK0WNCVFo
7OwSIq//qJmij6q+75CuGGHTEmbbQSS6ss8Og55jtu40jM/Gp+EbREVeLYemPXLC
4GBzBkBumszIuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:56 2026 by rpki-client