Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: bQku3tsX0xiW5QE0qcmJYnAevb/l797//bS2f1QFItQ=
Subject key identifier: 5C:26:23:9F:51:01:5C:EC:16:45:0B:D9:A4:9C:20:0A:E1:8C:56:24
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019D2584290672A94AC533F96BB9822AE719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: PGPSrFNfW8raMw0dpvpq9QLLTFTs5IMLRpBFAw5T3CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:29:06:72:a9:4a:c5:33:f9:6b:b9:82:2a:e7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=5c26239f51015cec16450bd9a49c200ae18c5624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:5d:ff:24:87:be:cb:46:e1:ea:79:c2:84:
a4:c6:97:fb:08:f8:f0:c9:0b:89:2c:c8:41:cd:2a:
2f:68:39:f1:ac:2d:5c:8b:b6:6b:75:b5:35:7f:ad:
48:97:4d:b2:bf:c0:41:1b:9e:8e:a4:c6:9d:32:60:
3c:d5:ba:a0:d9:fe:7b:e1:44:ae:8e:71:0d:97:ab:
ef:3f:cc:b6:f9:6e:99:71:21:fb:1a:63:cf:66:5f:
d9:b0:5a:ef:84:ec:86:28:d0:dc:88:0b:23:18:ef:
ee:f9:e7:27:97:48:af:b4:24:76:9a:fd:19:5f:29:
ff:60:48:b5:4a:fb:f3:b2:5c:4a:56:32:55:6a:8b:
5b:37:b3:e5:64:a1:35:99:d8:a7:f6:b7:56:57:9d:
7d:01:40:1e:53:f0:dc:7d:ef:0e:98:e3:a7:ca:1d:
94:0f:4e:a4:94:38:71:2d:af:27:c5:28:7a:4b:73:
df:27:2a:1d:24:89:de:96:90:14:cb:ba:08:42:09:
a1:3f:7c:0f:98:1d:ae:3c:d0:3e:fd:44:fc:4e:1e:
e7:4e:04:dc:0e:8b:4a:96:38:b0:8e:c6:5b:fd:09:
09:7d:fc:f3:46:55:fe:6b:c7:90:39:cc:0a:21:ec:
f4:cc:01:db:ac:b6:f3:43:eb:fa:56:d7:ca:72:8b:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:23:9F:51:01:5C:EC:16:45:0B:D9:A4:9C:20:0A:E1:8C:56:24
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:82:5f:c6:35:eb:ba:68:b1:97:71:af:17:22:09:65:af:
d9:b9:03:ba:35:93:7f:f7:f4:8c:cf:12:6c:f3:ac:18:fc:2f:
0e:52:95:d6:45:a1:48:bc:5f:22:56:60:ff:9e:4e:4f:19:ec:
7e:44:45:22:2a:7f:60:41:57:e7:d9:bc:31:9d:45:76:92:e5:
b4:a4:26:6e:2c:a1:1a:68:5a:81:3d:7b:0e:8d:bd:10:32:57:
d6:df:87:b4:75:17:ce:0e:d6:71:29:2a:87:3d:53:89:c1:a7:
e7:47:d6:91:9a:d4:d7:d2:be:4d:64:ff:6f:dd:1a:0b:37:cf:
28:3d:33:b1:bc:6e:41:de:2a:59:34:33:84:2c:c1:c6:f3:1b:
86:51:7b:3a:29:21:b2:9a:38:8e:78:8b:01:82:36:ff:a1:65:
4e:0b:e8:aa:93:1d:3f:c0:f6:5b:0e:12:b1:4e:97:40:56:30:
ad:b9:62:ee:c2:06:8c:cb:5a:3a:cf:0d:ac:6e:58:41:80:0f:
d0:60:fb:ea:c4:2a:15:55:42:23:7a:08:7e:ba:8b:f1:6e:56:
98:12:1b:ab:62:a1:fd:1e:d6:35:ff:f1:42:49:f1:c7:3f:5a:
8f:00:e1:41:fe:99:56:c5:05:bc:3b:11:81:a9:42:fa:f1:8e:
a8:09:bf:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhCkGcqlKxTP5a7mCKucZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTNiMGJkM2Q2MjQxODAzMjlkMjFhM2VjZGNjYTFiMmZi
ZWRlNmQwHhcNMjYwMzI1MTUwMTUxWhcNMjYwMzI2MTUwMTUxWjAzMTEwLwYDVQQD
Eyg1YzI2MjM5ZjUxMDE1Y2VjMTY0NTBiZDlhNDljMjAwYWUxOGM1NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNRd/ySHvstG4ep5woSkxpf7CPjw
yQuJLMhBzSovaDnxrC1ci7ZrdbU1f61Il02yv8BBG56OpMadMmA81bqg2f574USu
jnENl6vvP8y2+W6ZcSH7GmPPZl/ZsFrvhOyGKNDciAsjGO/u+ecnl0ivtCR2mv0Z
Xyn/YEi1SvvzslxKVjJVaotbN7PlZKE1mdin9rdWV519AUAeU/Dcfe8OmOOnyh2U
D06klDhxLa8nxSh6S3PfJyodJInelpAUy7oIQgmhP3wPmB2uPNA+/UT8Th7nTgTc
DotKljiwjsZb/QkJffzzRlX+a8eQOcwKIez0zAHbrLbzQ+v6VtfKcotSwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwmI59RAVzsFkUL2aScIArhjFYkMB8GA1UdIwQY
MBaAFKdTsL09YkGAMp0ho+zcyhsvvt5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMt
OWEyNjJmZjQ2MjZjLzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMtOWEyNjJmZjQ2MjZj
LzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADriCX8Y1
67posZdxrxciCWWv2bkDujWTf/f0jM8SbPOsGPwvDlKV1kWhSLxfIlZg/55OTxns
fkRFIip/YEFX59m8MZ1FdpLltKQmbiyhGmhagT17Do29EDJX1t+HtHUXzg7WcSkq
hz1TicGn50fWkZrU19K+TWT/b90aCzfPKD0zsbxuQd4qWTQzhCzBxvMbhlF7Oikh
spo4jniLAYI2/6FlTgvoqpMdP8D2Ww4SsU6XQFYwrbli7sIGjMtaOs8NrG5YQYAP
0GD76sQqFVVCI3oIfrqL8W5WmBIbq2Kh/R7WNf/xQknxxz9ajwDhQf6ZVsUFvDsR
galC+vGOqAm/sA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:44 2026 by rpki-client