Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: MGQ21L3wwETqbiJA/duTIsK65A3XIccwW1CMafLMo9k=
Subject key identifier: C8:C7:AC:47:D2:F6:0D:53:33:1D:B6:10:64:11:F3:C5:41:56:85:5F
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019D28BB31200C14366E99952334596ADF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0FB0
Signing time: Thu 26 Mar 2026 06:00:49 +0000
Manifest this update: Thu 26 Mar 2026 06:00:49 +0000
Manifest next update: Fri 27 Mar 2026 06:00:49 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: UasHoIvCmT/jBSynsy/pvMcNhGWrD1ryGbFHbFP6zNc=)
2: oRIsfmte-X2jgFEWjQtLvblexNM.roa (hash: MABvxM4XCQeB057f0MMoN4gprPL+JKjwKeyBUI1E5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:31:20:0c:14:36:6e:99:95:23:34:59:6a:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Mar 26 06:00:49 2026 GMT
Not After : Mar 27 06:00:49 2026 GMT
Subject: CN=c8c7ac47d2f60d53331db6106411f3c54156855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:93:39:23:e2:52:e2:21:47:80:6e:86:92:
56:41:16:af:7b:fa:79:96:03:4d:d3:1f:2c:25:30:
e0:a7:61:1c:5b:46:65:f9:ae:10:6a:f3:93:ae:5e:
78:df:86:24:b6:36:b7:c0:a2:51:c9:14:1d:dd:74:
29:b5:7b:38:0e:f7:f2:1a:80:e0:d1:84:de:1c:4e:
88:ae:dd:e5:dc:da:7f:7a:c4:ac:5e:e3:d6:40:cd:
35:ed:09:56:e7:7f:6c:ae:69:14:69:bf:66:ea:14:
57:65:ec:eb:ca:96:87:92:85:a4:37:56:32:34:2c:
ba:15:e8:d3:f2:a2:c1:b7:1b:16:81:d9:cf:57:13:
34:78:90:c2:8e:08:ed:41:d6:4f:92:78:d0:59:63:
25:9e:cc:f6:fc:bf:c2:e7:98:92:87:5e:27:83:e1:
98:ac:78:a9:8c:7a:e1:64:d1:78:0a:e6:d4:57:0c:
6b:b7:38:f3:4a:cd:71:d1:8d:02:db:08:c6:e7:95:
91:0b:b0:d3:72:4b:b3:de:4e:ab:22:d3:aa:4e:13:
1e:ec:48:2b:22:33:8b:b9:82:80:3a:e0:d0:4e:4e:
f6:4a:3c:43:24:49:4d:f0:f3:04:1b:c1:78:f8:ee:
77:dd:62:f2:df:8d:d1:f9:e4:96:e0:9b:16:7d:1d:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:AC:47:D2:F6:0D:53:33:1D:B6:10:64:11:F3:C5:41:56:85:5F
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:1a:3c:15:cb:4b:4c:94:2e:ca:6f:de:9c:f9:0f:b4:09:
90:9e:3a:16:00:5c:9c:d2:6f:bb:73:28:dd:88:cc:72:29:85:
63:2b:b9:77:05:40:8a:0c:86:02:65:6e:1a:fd:8c:cb:b8:18:
05:ce:ff:72:92:59:7a:c8:55:a7:94:7d:b6:f5:52:6a:d6:ae:
5c:c6:42:d9:f5:a5:e8:02:c1:40:f6:41:f7:40:ba:bf:85:2e:
7f:29:9b:49:2b:58:19:8c:1b:e7:df:5b:f9:99:4d:76:0b:d8:
bf:97:50:cc:03:fb:01:1c:cd:73:74:16:c3:b2:0e:20:34:a3:
0c:a1:89:01:13:79:75:7b:14:f5:b1:d3:d6:30:b4:75:86:4d:
3f:dd:95:55:51:2f:f3:2f:18:54:a5:2a:c1:06:2e:f6:eb:8a:
82:50:cc:a1:04:3e:90:11:9d:85:c1:bd:e0:a2:84:4d:d5:58:
14:78:04:54:0b:80:62:09:40:4d:09:69:ad:26:ef:d5:24:33:
3f:d1:fb:4e:c6:81:1d:2c:15:1b:59:dc:42:5d:ef:76:a1:2f:
c2:c5:d0:a0:aa:f2:c1:cf:4f:5d:95:8c:7b:90:5d:af:6d:54:
cb:14:2f:41:7d:1e:81:f5:d1:4f:21:4b:04:1c:1e:7d:b9:72:
1b:e7:73:c9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ouzEgDBQ2bpmVIzRZat9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjYwMzI2MDYwMDQ5WhcNMjYwMzI3MDYwMDQ5WjAzMTEwLwYDVQQD
EyhjOGM3YWM0N2QyZjYwZDUzMzMxZGI2MTA2NDExZjNjNTQxNTY4NTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B+TOSPiUuIhR4BuhpJWQRave/p5
lgNN0x8sJTDgp2EcW0Zl+a4QavOTrl5434Yktja3wKJRyRQd3XQptXs4DvfyGoDg
0YTeHE6Irt3l3Np/esSsXuPWQM017QlW539srmkUab9m6hRXZezrypaHkoWkN1Yy
NCy6FejT8qLBtxsWgdnPVxM0eJDCjgjtQdZPknjQWWMlnsz2/L/C55iSh14ng+GY
rHipjHrhZNF4CubUVwxrtzjzSs1x0Y0C2wjG55WRC7DTckuz3k6rItOqThMe7Egr
IjOLuYKAOuDQTk72SjxDJElN8PMEG8F4+O533WLy343R+eSW4JsWfR3tzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMjHrEfS9g1TMx22EGQR88VBVoVfMB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1Lzk5NWU0Zi1jZDQyLTRkYzktYWUyNC0wZWMxMmNmY2U0
MjEvMS8xLWRkR20tRFp4THFJblQ0Z0pxMkszRUxEejFNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlAa
PBXLS0yULspv3pz5D7QJkJ46FgBcnNJvu3Mo3YjMcimFYyu5dwVAigyGAmVuGv2M
y7gYBc7/cpJZeshVp5R9tvVSatauXMZC2fWl6ALBQPZB90C6v4UufymbSStYGYwb
599b+ZlNdgvYv5dQzAP7ARzNc3QWw7IOIDSjDKGJARN5dXsU9bHT1jC0dYZNP92V
VVEv8y8YVKUqwQYu9uuKglDMoQQ+kBGdhcG94KKETdVYFHgEVAuAYglATQlprSbv
1SQzP9H7TsaBHSwVG1ncQl3vdqEvwsXQoKrywc9PXZWMe5Bdr21UyxQvQX0egfXR
TyFLBBwefblyG+dzyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:32 2026 by rpki-client