Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: /5WdsicZ5+HgKf4FlPPYKfAIsnbXSqvyOBq1TEPqtX8=
Subject key identifier: 30:67:B5:C3:2F:65:19:67:EA:61:F4:54:E0:92:45:A3:AC:A0:BB:53
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 019D25F191D6D0D690ABA4D4A13C4632155E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: zVX2XxN3xSZ/m5555U0u+ataREIYjq1EewgdDbfxSFo=)
2: Tqhx4Fn_ogmc03013r8yI8JBIyo.roa (hash: n+rTrm4PulAJ0u2rK6/67Sh0qOIq9tX+Xq5NsrAfUfU=)
3: tg4JcBcc72nsYKViVZxUUBgVXQQ.roa (hash: f2eYldA7z0hzEnVdnyZLBMrCbNOlEuq0KoeSWyn4Dig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:91:d6:d0:d6:90:ab:a4:d4:a1:3c:46:32:15:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=3067b5c32f651967ea61f454e09245a3aca0bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:ac:fb:5b:32:ce:13:54:b3:0d:62:04:f7:
7a:36:46:f2:69:e5:4b:c8:b0:18:f4:b7:06:3a:2b:
b0:7e:c8:b4:b9:fe:f9:5b:20:ca:4b:48:84:58:7d:
89:e6:f1:90:7a:34:04:ff:33:6d:63:49:b8:3c:25:
53:0e:69:74:08:79:68:dc:7a:a4:d7:27:8a:a1:a1:
32:f7:8c:ba:96:c6:46:e9:08:18:8d:97:6a:83:93:
3a:a9:fb:1e:aa:07:9a:d1:37:cc:36:b6:82:2a:98:
bc:8d:67:9c:7c:34:3f:2e:ae:1e:8e:b5:6d:a7:aa:
cb:c7:9b:32:ff:10:28:d8:a0:ea:e0:dc:27:75:86:
c5:cd:57:0c:df:c8:05:99:73:8e:27:fb:6c:b6:7d:
cf:fc:40:ea:67:3a:da:fc:03:fb:1a:8b:27:e3:39:
92:e6:72:e0:0a:e7:ab:67:c8:33:e0:19:7e:33:47:
5a:dc:90:09:9f:f6:73:93:3a:bb:f6:e3:c1:25:13:
a1:82:9d:19:6e:7c:ec:99:50:18:75:de:ab:78:bd:
25:d9:b6:48:b4:f0:1b:cd:90:14:73:65:f3:30:26:
97:de:fb:43:1a:fb:2d:89:3c:49:ce:68:96:05:68:
52:f3:e6:a6:80:29:74:49:aa:52:94:b0:d3:d8:a4:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:67:B5:C3:2F:65:19:67:EA:61:F4:54:E0:92:45:A3:AC:A0:BB:53
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b7:18:fc:d3:7a:5d:4f:f3:94:94:be:2a:4a:3e:09:ce:2c:
63:15:54:b9:d5:f4:25:34:f1:84:cd:72:ea:5c:7f:8b:00:68:
d1:51:41:d0:29:72:52:15:36:44:d1:ed:74:39:bd:2d:62:49:
6c:fb:1a:0d:60:d2:16:28:7a:7c:93:08:7f:35:12:5b:c0:1b:
23:46:35:a4:a6:8a:05:3e:9b:5c:ad:42:3f:6c:1b:db:40:23:
f0:a5:bb:e0:15:99:19:bd:86:ec:8f:5b:e5:ef:25:a2:2c:b3:
59:f4:14:be:3d:f6:7b:c3:e9:ae:23:84:f2:2d:13:7e:4c:f4:
54:f4:05:9f:f2:dd:73:07:92:3c:7d:e2:00:69:c7:7c:93:49:
ec:1d:f7:4e:8e:2f:82:42:8c:df:86:b3:a9:a0:6c:6a:27:e1:
ee:c1:73:63:00:61:55:7b:a9:0c:42:2f:2d:d0:94:06:93:c2:
e3:55:b1:75:ff:8b:03:86:1d:fd:5b:c2:38:7f:e5:56:39:f0:
ed:3e:a4:21:fe:e8:78:ab:9a:1e:8e:e9:2a:aa:d8:2d:30:22:
a9:a4:c3:f7:b9:7a:98:6f:8e:a9:9b:6e:9d:0a:6d:6d:e0:94:
cb:fd:b2:f9:48:0e:18:81:4a:0d:59:23:8e:45:63:10:d0:aa:
95:b6:df:09
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0l8ZHW0NaQq6TUoTxGMhVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWZjOGM4Mjk4NjMxMGM1ZjZhOWI1NmZiNzZiNmJkOTg3
N2ZjYzAwHhcNMjYwMzI1MTcwMTIxWhcNMjYwMzI2MTcwMTIxWjAzMTEwLwYDVQQD
EygzMDY3YjVjMzJmNjUxOTY3ZWE2MWY0NTRlMDkyNDVhM2FjYTBiYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFGs+1syzhNUsw1iBPd6NkbyaeVL
yLAY9LcGOiuwfsi0uf75WyDKS0iEWH2J5vGQejQE/zNtY0m4PCVTDml0CHlo3Hqk
1yeKoaEy94y6lsZG6QgYjZdqg5M6qfseqgea0TfMNraCKpi8jWecfDQ/Lq4ejrVt
p6rLx5sy/xAo2KDq4NwndYbFzVcM38gFmXOOJ/tstn3P/EDqZzra/AP7Gosn4zmS
5nLgCuerZ8gz4Bl+M0da3JAJn/Zzkzq79uPBJROhgp0ZbnzsmVAYdd6reL0l2bZI
tPAbzZAUc2XzMCaX3vtDGvstiTxJzmiWBWhS8+amgCl0SapSlLDT2KTrdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDBntcMvZRln6mH0VOCSRaOsoLtTMB8GA1UdIwQY
MBaAFPgfyMgphjEMX2qbVvt2tr2Yd/zAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CX0l5Q21HTVF4ZmFwdFctM2EydlpoM19NQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFk
LTUxM2NhOGU2Y2VjZS8xLzEtQl9JeUNtR01ReGZhcHRXLTNhMnZaaDNfTUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhmLzNlNTljOS05ZjAxLTQ1NjItOTIxZC01MTNjYThlNmNl
Y2UvMS8xLUJfSXlDbUdNUXhmYXB0Vy0zYTJ2WmgzX01BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrcY
/NN6XU/zlJS+Kko+Cc4sYxVUudX0JTTxhM1y6lx/iwBo0VFB0ClyUhU2RNHtdDm9
LWJJbPsaDWDSFih6fJMIfzUSW8AbI0Y1pKaKBT6bXK1CP2wb20Aj8KW74BWZGb2G
7I9b5e8loiyzWfQUvj32e8PpriOE8i0Tfkz0VPQFn/LdcweSPH3iAGnHfJNJ7B33
To4vgkKM34azqaBsaifh7sFzYwBhVXupDEIvLdCUBpPC41Wxdf+LA4Yd/VvCOH/l
Vjnw7T6kIf7oeKuaHo7pKqrYLTAiqaTD97l6mG+OqZtunQptbeCUy/2y+UgOGIFK
DVkjjkVjENCqlbbfCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:38 2026 by rpki-client