Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: J02NPAzIjK7hCDstkWZm3WmbTd1exFRxCTRpIc/nZ4w=
Subject key identifier: D7:F0:7C:47:A9:60:0D:56:DA:84:51:35:35:ED:B1:3A:1F:DD:E6:E2
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019D329A59F9D6DCC14C760F79A149DBA6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0FFE
Signing time: Sat 28 Mar 2026 04:01:09 +0000
Manifest this update: Sat 28 Mar 2026 04:01:09 +0000
Manifest next update: Sun 29 Mar 2026 04:01:09 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: QlJQgdE3oz6rTj/R8rnoH9FgnFZBoocmcxqxk+vkrVA=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:59:f9:d6:dc:c1:4c:76:0f:79:a1:49:db:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Mar 28 04:01:09 2026 GMT
Not After : Mar 29 04:01:09 2026 GMT
Subject: CN=d7f07c47a9600d56da84513535edb13a1fdde6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:d9:8e:bb:ca:09:06:6f:d1:8a:f6:53:2e:
36:a3:49:7d:78:c2:1e:8d:c2:20:ac:9d:7f:b5:1e:
f2:8a:a5:63:d5:77:30:83:29:1a:74:b7:2c:63:17:
57:8a:4a:12:9b:ed:58:b2:db:08:8c:5c:de:81:9e:
52:82:2e:19:63:87:30:f9:13:02:1b:82:ff:d2:c5:
db:0c:6b:db:9b:3a:cb:c4:b5:27:15:7d:01:54:47:
cf:c4:ed:c2:1f:a2:6c:40:ca:8b:ee:73:19:ba:d2:
28:68:bf:ac:91:cf:1f:33:a4:46:c1:68:c5:6e:9a:
7d:d0:f6:d7:7c:f8:d9:0d:ba:8f:d6:98:f4:e9:ae:
dc:fb:48:1a:a6:4d:22:30:55:71:50:e3:61:09:ad:
74:ee:ff:80:0b:6b:9f:21:81:1d:f7:03:e0:bb:f3:
ac:71:ce:84:61:55:c5:ae:14:c3:34:32:82:b8:52:
d2:4f:d5:d8:8b:f6:e9:82:c8:03:1f:1c:f7:39:ba:
85:b0:77:99:d6:2b:fe:08:dd:84:5a:c6:6a:76:48:
86:19:a9:34:78:40:c8:1b:8d:19:22:c7:77:79:6e:
22:ce:98:bb:1d:a8:7b:7b:e7:8c:65:e4:f9:0f:c5:
6e:34:6c:e7:c7:40:65:91:c3:cc:e8:29:d7:da:d7:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:7C:47:A9:60:0D:56:DA:84:51:35:35:ED:B1:3A:1F:DD:E6:E2
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f6:e3:81:16:6f:3a:19:37:4e:42:73:9f:b5:82:47:53:65:
43:32:8a:66:49:9b:7b:7f:18:ef:34:82:d3:72:d8:b9:39:b1:
59:7f:23:e8:32:96:8e:34:25:b8:3e:24:c0:b0:dd:a0:1c:c4:
cc:28:72:7a:70:b2:a4:cd:54:f6:b4:37:31:e6:62:19:28:44:
e7:43:58:1c:5f:76:12:46:03:d0:84:d2:9c:67:af:0c:f8:e9:
af:f3:92:18:a2:aa:e0:3d:f7:e7:f0:4e:3b:34:42:89:dc:15:
17:9d:b7:5e:1f:4a:04:22:82:f4:81:56:8a:31:ce:97:06:68:
04:4f:9d:61:f1:c8:16:cb:35:b9:7a:87:f2:de:de:ce:e7:f5:
4e:a1:11:ba:9d:49:a7:e9:ab:af:ad:42:3e:0e:91:53:46:61:
3e:e4:82:94:eb:fa:10:08:cb:4b:56:77:d0:7c:84:16:da:b2:
10:72:bd:5e:1f:e4:b6:30:41:40:11:4d:8d:e1:1c:69:a8:19:
65:de:45:5a:ad:af:fd:b5:57:11:66:2d:d9:35:4c:9a:12:86:
66:73:88:e6:f6:59:c4:16:4e:54:db:f6:a3:d0:87:4f:c9:e1:
da:90:5b:83:a2:4a:dc:f4:d0:ab:e0:3f:bc:5b:25:94:80:06:
3a:6b:89:05
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ymln51tzBTHYPeaFJ26awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWRlMzdiYmM2YzA2NDIwZGE2MjZjMGJiNGQ3MjMyMzFl
OTNlODQwHhcNMjYwMzI4MDQwMTA5WhcNMjYwMzI5MDQwMTA5WjAzMTEwLwYDVQQD
EyhkN2YwN2M0N2E5NjAwZDU2ZGE4NDUxMzUzNWVkYjEzYTFmZGRlNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztfZjrvKCQZv0Yr2Uy42o0l9eMIe
jcIgrJ1/tR7yiqVj1XcwgykadLcsYxdXikoSm+1YstsIjFzegZ5Sgi4ZY4cw+RMC
G4L/0sXbDGvbmzrLxLUnFX0BVEfPxO3CH6JsQMqL7nMZutIoaL+skc8fM6RGwWjF
bpp90PbXfPjZDbqP1pj06a7c+0gapk0iMFVxUONhCa107v+AC2ufIYEd9wPgu/Os
cc6EYVXFrhTDNDKCuFLST9XYi/bpgsgDHxz3ObqFsHeZ1iv+CN2EWsZqdkiGGak0
eEDIG40ZIsd3eW4izpi7Hah7e+eMZeT5D8VuNGznx0BlkcPM6CnX2tcv8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNfwfEepYA1W2oRRNTXtsTof3ebiMB8GA1UdIwQY
MBaAFPod43u8bAZCDaYmwLtNcjIx6T6EMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oM2plN3hzQmtJTnBpYkF1MDF5TWpIcFBvUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZkLThjZDEtNDk5ZS1hNTE4
LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJBdTAxeU1qSHBQb1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzYwOGY2ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2
ODAvMS8xLWgzamU3eHNCa0lOcGliQXUwMXlNakhwUG9RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvbj
gRZvOhk3TkJzn7WCR1NlQzKKZkmbe38Y7zSC03LYuTmxWX8j6DKWjjQluD4kwLDd
oBzEzChyenCypM1U9rQ3MeZiGShE50NYHF92EkYD0ITSnGevDPjpr/OSGKKq4D33
5/BOOzRCidwVF523Xh9KBCKC9IFWijHOlwZoBE+dYfHIFss1uXqH8t7ezuf1TqER
up1Jp+mrr61CPg6RU0ZhPuSClOv6EAjLS1Z30HyEFtqyEHK9Xh/ktjBBQBFNjeEc
aagZZd5FWq2v/bVXEWYt2TVMmhKGZnOI5vZZxBZOVNv2o9CHT8nh2pBbg6JK3PTQ
q+A/vFsllIAGOmuJBQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:24 2026 by rpki-client