Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: eIvZQZ474FvQ7APh7S6yjPy7rkPkQ98i4DfEneH35HE=
Subject key identifier: 1A:BE:CE:AE:8F:16:7F:34:B4:0E:36:BF:35:A4:C6:D0:3D:77:2B:AF
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019E1E353A890B98D1A6FB32FA4AE380A47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0D5F
Signing time: Tue 12 May 2026 22:01:05 +0000
Manifest this update: Tue 12 May 2026 22:01:05 +0000
Manifest next update: Wed 13 May 2026 22:01:05 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: DSSK616spn/kL6A2yqwNXYkmx4Qj+lYscTtoCXN9vgk=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:3a:89:0b:98:d1:a6:fb:32:fa:4a:e3:80:a4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: May 12 22:01:05 2026 GMT
Not After : May 13 22:01:05 2026 GMT
Subject: CN=1abeceae8f167f34b40e36bf35a4c6d03d772baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:53:dd:cd:63:22:d0:5d:9f:90:39:e3:a5:
3f:9b:56:d9:66:e3:2d:6c:ba:c2:e9:1c:7b:79:90:
d7:20:e8:44:db:21:51:fe:e0:c1:b7:4a:54:1e:b2:
e6:be:ee:55:4a:8a:ce:cd:e8:90:25:aa:e3:c9:46:
bc:aa:76:fc:3c:9f:94:93:1a:4b:d8:81:43:5b:9b:
82:35:b9:5a:13:d4:08:b7:ac:00:a3:a8:8c:8e:6b:
7d:f5:a7:41:d3:aa:0c:50:06:0f:67:4c:39:a0:20:
b6:8e:60:77:7b:5e:18:79:b6:8f:70:b7:72:dd:65:
0d:43:c0:31:85:54:80:06:ad:f1:07:0c:69:18:db:
06:be:d3:9e:e2:4f:69:8c:6b:54:f8:57:da:a7:c6:
bc:a5:55:be:02:8e:ad:5a:9a:09:6a:4e:40:59:d8:
ca:e8:87:1b:ba:23:a9:18:3d:99:19:06:8b:f5:2f:
a1:38:2b:40:03:24:8b:43:4a:87:8a:4c:02:a8:91:
7d:76:af:4a:01:59:f5:71:48:6e:53:40:08:d6:7e:
02:52:d1:3b:e0:b7:37:ea:9f:b0:f1:64:1b:fb:18:
f1:61:2f:2b:9d:a7:78:bb:d2:51:53:db:cf:73:85:
1e:34:6b:05:05:37:47:14:8a:5c:b5:b8:cb:df:d1:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:CE:AE:8F:16:7F:34:B4:0E:36:BF:35:A4:C6:D0:3D:77:2B:AF
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e0:94:1d:4e:e9:8a:42:1d:d2:6c:92:33:af:a0:ba:9e:92:
c1:f7:35:8c:24:2a:b4:f1:85:f8:5a:36:0a:dd:ea:85:1b:a8:
3c:0b:37:81:8d:93:2c:dd:95:42:ed:21:ad:ca:41:af:03:42:
ad:01:34:3b:3b:28:dc:87:18:bc:40:d0:76:9f:84:db:68:2e:
1d:d2:6a:b8:46:18:45:5e:72:7e:44:6a:9d:d4:c6:0b:2c:74:
59:18:64:f7:a9:ce:4f:04:77:e0:7d:61:aa:fd:70:14:87:ee:
cb:7a:ef:55:e0:a9:a5:d0:60:3f:6e:98:6c:5c:8d:e1:4d:b5:
f8:13:4c:41:d8:51:75:54:1a:90:61:89:c5:0a:9e:2f:2e:36:
fe:fb:92:1f:9a:a9:a7:38:25:a7:8b:50:6b:67:9f:40:41:5e:
4e:0a:ae:ce:e1:12:d3:9d:a6:e7:cc:be:6b:bc:2c:6f:6e:e9:
80:a4:1b:8d:ab:07:4b:da:89:ff:04:34:09:ba:26:25:e9:76:
67:47:de:c3:e9:bd:c6:88:39:50:55:e0:fb:ed:9f:7c:20:5c:
3e:4c:d3:26:c1:f8:15:25:8b:6b:96:4f:a0:40:27:fd:69:a5:
97:c8:2e:33:7e:0f:19:85:49:41:db:44:34:f4:cf:f1:60:a3:
3f:c7:49:52
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4eNTqJC5jRpvsy+krjgKR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDMyOTY4YWFhYTkxOWM1Mjc5MWZmYjA3ZjkzNDM2Yjc0
ZmQ1MDgwHhcNMjYwNTEyMjIwMTA1WhcNMjYwNTEzMjIwMTA1WjAzMTEwLwYDVQQD
EygxYWJlY2VhZThmMTY3ZjM0YjQwZTM2YmYzNWE0YzZkMDNkNzcyYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYFT3c1jItBdn5A546U/m1bZZuMt
bLrC6Rx7eZDXIOhE2yFR/uDBt0pUHrLmvu5VSorOzeiQJarjyUa8qnb8PJ+UkxpL
2IFDW5uCNblaE9QIt6wAo6iMjmt99adB06oMUAYPZ0w5oCC2jmB3e14YebaPcLdy
3WUNQ8AxhVSABq3xBwxpGNsGvtOe4k9pjGtU+Ffap8a8pVW+Ao6tWpoJak5AWdjK
6IcbuiOpGD2ZGQaL9S+hOCtAAySLQ0qHikwCqJF9dq9KAVn1cUhuU0AI1n4CUtE7
4Lc36p+w8WQb+xjxYS8rnad4u9JRU9vPc4UeNGsFBTdHFIpctbjL39GxtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBq+zq6PFn80tA42vzWkxtA9dyuvMB8GA1UdIwQY
MBaAFPvTKWiqqpGcUnkf+wf5NDa3T9UIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05TXBhS3Fxa1p4U2VSXzdCX2swTnJkUDFRZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzIzYjE1LWZhYWMtNDFmZi1hMWFh
LTg4NzM5ZTMzNTA1My8xLzEtOU1wYUtxcWtaeFNlUl83Ql9rME5yZFAxUWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EwLzcyM2IxNS1mYWFjLTQxZmYtYTFhYS04ODczOWUzMzUw
NTMvMS8xLTlNcGFLcXFrWnhTZVJfN0JfazBOcmRQMVFnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOCU
HU7pikId0mySM6+gup6Swfc1jCQqtPGF+Fo2Ct3qhRuoPAs3gY2TLN2VQu0hrcpB
rwNCrQE0Ozso3IcYvEDQdp+E22guHdJquEYYRV5yfkRqndTGCyx0WRhk96nOTwR3
4H1hqv1wFIfuy3rvVeCppdBgP26YbFyN4U21+BNMQdhRdVQakGGJxQqeLy42/vuS
H5qppzglp4tQa2efQEFeTgquzuES052m58y+a7wsb27pgKQbjasHS9qJ/wQ0Cbom
Jel2Z0few+m9xog5UFXg++2ffCBcPkzTJsH4FSWLa5ZPoEAn/Wmll8guM34PGYVJ
QdtENPTP8WCjP8dJUg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:19:55 2026 by rpki-client