Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier: Eop9yMWWgGrneEA++iWxaAad4Ui25908zLFW54vSc4o=
Subject key identifier: E5:02:C7:F2:BF:93:47:C0:7C:D6:51:93:AD:9B:15:2E:7C:28:DC:46
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 019D25F1EDE327D7EBCBA3AD07A552EF6BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number: 0FA2
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: auBWAm9zH1b5ckZkRwRU4ZxZ4NKEnsJydOgu5jPQra0=)
2: CdSvxh-qsouaR9D0nMWLFmlP_7c.roa (hash: w2S9yeJgNzOTOHLkky2uOaSMYllBxEErLoohZYBuiDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ed:e3:27:d7:eb:cb:a3:ad:07:a5:52:ef:6b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=e502c7f2bf9347c07cd65193ad9b152e7c28dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:fb:2e:97:c8:3c:ca:29:a7:f3:68:94:7e:
63:c3:b9:8f:fd:ee:13:91:ac:fc:0a:47:84:b9:9a:
f7:2d:29:50:fa:4a:e4:1b:db:d4:6c:49:27:e7:0d:
bf:9f:be:b1:a7:a7:39:3c:fa:d6:be:bc:39:3f:6a:
ab:50:94:05:1b:9d:4d:b5:01:2f:6c:ab:c3:c8:1f:
4c:d6:37:62:28:b0:0c:1c:dc:bc:0b:ed:55:a8:8d:
a8:0a:29:a8:ac:a3:f6:eb:24:80:0e:a5:1f:1f:ef:
d3:62:85:19:f6:dc:4c:ce:58:83:c2:41:90:61:56:
b4:5d:11:8d:0e:ac:bf:a4:9d:19:e2:fc:65:5f:86:
92:45:92:1c:94:13:23:25:c0:b2:5f:17:37:07:c3:
19:06:fe:db:7d:a2:42:22:a0:c9:b6:2e:9e:81:38:
80:b6:bc:f2:07:9f:c6:b4:a3:77:00:d6:bc:53:7e:
d3:19:e3:92:86:53:31:bb:66:17:49:4b:ac:ac:d4:
bb:55:18:a7:dc:07:ca:c8:59:9c:9c:e8:a6:6a:da:
97:cf:40:b7:47:34:47:83:94:4f:4d:7b:bd:51:9a:
b1:6f:0f:44:20:7a:0f:d5:f8:ef:35:37:41:e9:5c:
92:fe:47:02:64:66:5d:c5:f7:45:ff:a9:98:a5:5b:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:C7:F2:BF:93:47:C0:7C:D6:51:93:AD:9B:15:2E:7C:28:DC:46
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:40:2c:6a:c3:0e:6d:70:97:53:a4:ee:fe:94:f8:25:2d:
a9:97:ce:1c:de:ac:c3:8b:64:cb:fe:08:ca:b8:48:2f:74:17:
11:73:2c:e1:2d:6a:40:6c:db:c9:7d:61:3d:e2:a8:6f:f9:71:
62:86:35:79:0e:bd:82:e9:85:3a:40:f4:3c:57:a5:f2:38:6b:
c6:18:55:5c:b6:20:be:3d:38:90:b1:e1:d2:c5:8d:fe:9f:b2:
de:25:ec:92:80:33:ea:e0:e6:a0:6f:6b:a6:d1:f9:83:84:de:
3a:4f:31:9d:cd:73:a9:3e:11:fc:7b:d2:37:ff:bc:fe:f8:99:
2c:ba:c9:54:89:2f:56:30:4a:89:ea:7a:9e:28:24:78:99:4e:
dd:98:07:2c:cc:a6:a8:92:1d:e3:a1:87:9d:a0:55:0c:fc:9e:
f2:38:4b:a2:a4:67:e0:db:81:83:88:13:ce:72:c5:95:8d:49:
1f:f0:56:1e:91:0a:a4:99:d2:6b:93:da:93:d0:1a:4e:73:6d:
c3:3a:fb:e0:74:4f:11:8f:7f:cf:0a:b6:ab:51:ab:c4:3c:33:
ef:72:55:5a:87:f0:15:7e:75:0c:9e:04:46:73:36:1b:39:d5:
23:b3:81:d7:fc:b6:60:f9:8a:7a:69:aa:97:0c:bf:cc:ad:05:
12:99:be:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0l8e3jJ9fry6OtB6VS72vyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MWQyMGM5MmM2NTM5YWQ2NmRhODdjN2NmZTY1YTlmYWFj
Y2EwNjMwHhcNMjYwMzI1MTcwMTQ1WhcNMjYwMzI2MTcwMTQ1WjAzMTEwLwYDVQQD
EyhlNTAyYzdmMmJmOTM0N2MwN2NkNjUxOTNhZDliMTUyZTdjMjhkYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfH7LpfIPMopp/NolH5jw7mP/e4T
kaz8CkeEuZr3LSlQ+krkG9vUbEkn5w2/n76xp6c5PPrWvrw5P2qrUJQFG51NtQEv
bKvDyB9M1jdiKLAMHNy8C+1VqI2oCimorKP26ySADqUfH+/TYoUZ9txMzliDwkGQ
YVa0XRGNDqy/pJ0Z4vxlX4aSRZIclBMjJcCyXxc3B8MZBv7bfaJCIqDJti6egTiA
trzyB5/GtKN3ANa8U37TGeOShlMxu2YXSUusrNS7VRin3AfKyFmcnOimatqXz0C3
RzRHg5RPTXu9UZqxbw9EIHoP1fjvNTdB6VyS/kcCZGZdxfdF/6mYpVtCuQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOUCx/K/k0fAfNZRk62bFS58KNxGMB8GA1UdIwQY
MBaAFPkdIMksZTmtZtqHx8/mWp+qzKBjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SMGd5U3hsT2ExbTJvZkh6LVphbjZyTW9HTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTY1MTNmLTcxNzUtNDYzYi1hZTg1
LWMxOGU0N2JkOWM2NC8xLzEtUjBneVN4bE9hMW0yb2ZIei1aYW42ck1vR00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I1L2U2NTEzZi03MTc1LTQ2M2ItYWU4NS1jMThlNDdiZDlj
NjQvMS8xLVIwZ3lTeGxPYTFtMm9mSHotWmFuNnJNb0dNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0RA
LGrDDm1wl1Ok7v6U+CUtqZfOHN6sw4tky/4IyrhIL3QXEXMs4S1qQGzbyX1hPeKo
b/lxYoY1eQ69gumFOkD0PFel8jhrxhhVXLYgvj04kLHh0sWN/p+y3iXskoAz6uDm
oG9rptH5g4TeOk8xnc1zqT4R/HvSN/+8/viZLLrJVIkvVjBKiep6nigkeJlO3ZgH
LMymqJId46GHnaBVDPye8jhLoqRn4NuBg4gTznLFlY1JH/BWHpEKpJnSa5Pak9Aa
TnNtwzr74HRPEY9/zwq2q1GrxDwz73JVWofwFX51DJ4ERnM2GznVI7OB1/y2YPmK
emmqlwy/zK0FEpm+mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:31 2026 by rpki-client