Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: ViUfgziOa3qITUXWPOWnlCGyAD+koN1ZtePWPc5tOCU=
Subject key identifier: 6E:14:84:23:A7:55:CA:BD:C8:E2:BF:9B:81:33:7F:6F:E7:B5:A5:E9
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 019D2515363A9B0537A5AFE0D791F322B925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 11AA
Signing time: Wed 25 Mar 2026 13:00:40 +0000
Manifest this update: Wed 25 Mar 2026 13:00:40 +0000
Manifest next update: Thu 26 Mar 2026 13:00:40 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: neq/cgkK5qHqDl855cqM23e34c+zjezZemvSXWxEqiE=)
2: ze0YKIttxdbb_tzXyBtFJFW9zEs.asa (hash: agef/IONDj13ZajBLv9pJjFF+eXEWrm28J4AErVUvUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:36:3a:9b:05:37:a5:af:e0:d7:91:f3:22:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Mar 25 13:00:40 2026 GMT
Not After : Mar 26 13:00:40 2026 GMT
Subject: CN=6e148423a755cabdc8e2bf9b81337f6fe7b5a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:a7:2c:68:30:47:be:c1:38:f1:ad:d6:f9:
5e:64:e3:4e:1a:1d:f0:3e:ae:46:5b:67:bf:0d:a2:
0e:b4:87:da:62:d4:dc:21:d2:5c:87:a5:64:83:53:
58:f4:cc:99:0b:63:fc:26:a0:b9:4f:46:71:97:6a:
22:cf:d3:01:c3:20:88:1a:48:73:ad:37:6f:1a:3d:
c2:bb:97:8d:b7:1c:bc:dd:a9:64:10:bf:af:8b:93:
c3:0e:61:10:3d:13:54:a2:d2:c3:f0:30:82:94:4b:
19:24:e4:cf:5a:58:7b:4b:aa:08:3e:2d:18:0b:6f:
b3:78:98:be:4d:21:f8:80:40:dc:8d:c1:55:10:8f:
3f:95:f7:0c:57:1b:32:c9:c4:2e:1c:e2:5c:10:bd:
69:54:fc:df:b1:7b:2c:c5:a2:ae:77:21:f2:87:5a:
69:0b:97:65:aa:42:56:b8:e5:91:8b:63:45:d4:ca:
1b:98:d0:4d:33:82:71:c5:a8:cf:f0:a7:4e:e7:33:
a5:b4:67:38:1d:31:a5:9e:f4:ed:31:33:b0:b2:96:
37:3b:0b:2f:87:b3:e9:8f:f3:4d:36:7c:5f:c5:49:
28:ec:17:89:65:d2:ee:9c:10:8c:c0:49:6f:71:65:
2e:41:70:5f:1b:51:06:1c:10:4a:01:c3:c3:12:30:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:84:23:A7:55:CA:BD:C8:E2:BF:9B:81:33:7F:6F:E7:B5:A5:E9
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fd:e2:1c:49:15:4c:9a:cd:d8:5a:59:14:63:39:09:f7:f5:
19:ad:88:b1:15:50:9e:95:29:43:da:bc:c2:15:45:ed:5c:2c:
ec:1e:b8:d9:61:5b:48:b4:ab:f8:cc:92:bf:d4:1f:7a:00:85:
b4:ab:fd:ec:0c:7c:38:bc:62:12:48:01:91:91:38:ea:95:47:
e4:3e:86:f3:82:44:e5:bc:5f:57:9b:7f:0a:04:c5:8b:af:ab:
ce:17:4f:30:a6:56:a5:03:82:2c:8c:b5:12:31:1e:eb:b2:05:
1d:f7:ab:6d:1b:d5:a7:b5:e0:ef:7a:e1:d8:7f:01:35:5e:23:
d3:e5:97:c9:34:29:ff:f5:63:57:c9:7d:68:48:ed:ca:32:3e:
04:bf:43:50:05:b0:7b:e3:eb:45:78:92:c3:6c:d0:69:b3:15:
da:74:36:49:91:d2:9d:b6:0d:55:ff:14:30:11:f7:df:9c:80:
6c:b3:03:d6:09:a2:b5:b1:92:98:8c:2f:b8:39:ed:a3:89:c4:
31:68:53:4c:c6:33:f2:87:d0:13:09:11:9e:ef:95:a3:68:91:
38:17:f2:1f:52:67:16:7c:78:48:25:12:9e:48:5e:64:6a:99:
19:bc:ec:f8:0b:21:fe:fd:e4:d7:07:ab:32:5c:f5:ce:ba:d9:
83:58:33:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFTY6mwU3pa/g15HzIrklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz
NWI3ZTkwHhcNMjYwMzI1MTMwMDQwWhcNMjYwMzI2MTMwMDQwWjAzMTEwLwYDVQQD
Eyg2ZTE0ODQyM2E3NTVjYWJkYzhlMmJmOWI4MTMzN2Y2ZmU3YjVhNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz42nLGgwR77BOPGt1vleZONOGh3w
Pq5GW2e/DaIOtIfaYtTcIdJch6Vkg1NY9MyZC2P8JqC5T0Zxl2oiz9MBwyCIGkhz
rTdvGj3Cu5eNtxy83alkEL+vi5PDDmEQPRNUotLD8DCClEsZJOTPWlh7S6oIPi0Y
C2+zeJi+TSH4gEDcjcFVEI8/lfcMVxsyycQuHOJcEL1pVPzfsXssxaKudyHyh1pp
C5dlqkJWuOWRi2NF1MobmNBNM4JxxajP8KdO5zOltGc4HTGlnvTtMTOwspY3Owsv
h7Ppj/NNNnxfxUko7BeJZdLunBCMwElvcWUuQXBfG1EGHBBKAcPDEjBNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4UhCOnVcq9yOK/m4Ezf2/ntaXpMB8GA1UdIwQY
MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt
Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw
LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP3iHEkV
TJrN2FpZFGM5Cff1Ga2IsRVQnpUpQ9q8whVF7Vws7B642WFbSLSr+MySv9QfegCF
tKv97Ax8OLxiEkgBkZE46pVH5D6G84JE5bxfV5t/CgTFi6+rzhdPMKZWpQOCLIy1
EjEe67IFHferbRvVp7Xg73rh2H8BNV4j0+WXyTQp//VjV8l9aEjtyjI+BL9DUAWw
e+PrRXiSw2zQabMV2nQ2SZHSnbYNVf8UMBH335yAbLMD1gmitbGSmIwvuDnto4nE
MWhTTMYz8ofQEwkRnu+Vo2iROBfyH1JnFnx4SCUSnkheZGqZGbzs+Ash/v3k1wer
Mlz1zrrZg1gzJA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:27 2026 by rpki-client