Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: kZuGkinMRD6353BC0QPZUXtJc7JO1AkV5khpjqKxeZ0=
Subject key identifier: 3E:95:4C:99:B1:2F:F7:B1:51:6C:9E:38:81:AD:5A:87:21:3D:B5:36
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019D2771DAC2551243748283DAAAE31080C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 067C
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: 9YRyTeJvcAqqw6XwqLwZ2zdBaYyaEeKW8LwZDqevFtI=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:da:c2:55:12:43:74:82:83:da:aa:e3:10:80:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=3e954c99b12ff7b1516c9e3881ad5a87213db536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:c7:cf:4e:ee:bb:c8:7a:32:b4:00:6a:7b:
b7:f9:f2:33:7b:3d:e1:f3:9c:78:61:67:df:cd:6e:
f2:7d:c6:d8:ef:61:c5:42:dc:29:2e:5f:bd:b3:42:
61:93:33:3a:75:96:b5:cf:0d:ae:ee:3a:fe:9a:64:
a8:4e:0b:e8:9f:05:64:89:fb:a1:ab:f1:de:2a:d6:
71:e7:7d:96:ed:7c:10:24:52:8c:d1:c8:df:f2:ac:
31:d0:f1:c5:3a:f0:b5:a0:b9:f1:a6:c6:27:91:98:
d3:7d:e8:ee:eb:42:41:85:81:8e:eb:25:b8:85:ad:
df:ec:3a:7e:bf:c9:e1:94:38:fa:ea:6e:06:f3:f8:
dc:da:22:95:12:f6:75:d4:b2:8e:84:02:c9:fd:a7:
70:9f:e8:b9:4c:0c:dd:2b:2b:cb:01:aa:a9:d9:03:
0b:a0:08:78:27:25:5c:cf:f6:b9:67:2b:67:bc:b8:
b8:15:38:2d:66:59:0a:75:d8:a7:f6:cb:d8:1f:27:
07:d8:07:98:67:ac:d8:63:4d:16:1e:15:1e:6b:4d:
54:c3:52:ba:74:ae:17:b3:e5:6d:a2:09:0a:01:50:
64:83:47:d6:05:2f:d7:1d:15:25:c8:07:e4:89:6c:
14:81:69:1f:e5:7f:9d:d1:e6:34:de:95:e0:9d:69:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:4C:99:B1:2F:F7:B1:51:6C:9E:38:81:AD:5A:87:21:3D:B5:36
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:97:ca:90:e9:6f:a0:9e:9b:03:ee:fc:bd:d5:72:e4:27:
c1:33:5a:e6:a2:68:1b:72:ba:dd:a1:a8:02:bb:fb:71:29:81:
42:16:3d:e7:09:42:0f:3b:7e:93:e6:2d:0e:56:c0:aa:1d:ba:
8b:0a:9e:fe:2f:f9:be:63:18:6d:62:b7:a3:6f:09:ec:b5:a5:
9a:cf:2e:24:5f:82:1d:a3:ff:88:52:3c:fb:a0:4f:c0:04:7f:
46:1b:5a:fc:3e:70:0f:25:89:75:21:4a:13:a0:d5:69:21:78:
08:64:04:4c:86:74:f8:00:c6:73:2a:3f:e6:a3:91:d5:4a:08:
ea:33:9d:42:ac:15:ac:b1:8d:2b:5b:67:aa:f1:67:5d:11:ef:
c3:b5:b4:9d:fa:9c:64:f5:19:bd:43:37:4f:56:c8:ef:9f:aa:
17:d6:23:d2:ff:28:71:0e:d7:d3:48:7a:11:44:0d:89:1d:d9:
59:9e:3b:ab:f3:d9:4c:b3:19:45:97:54:6e:86:03:60:27:b2:
05:fe:f5:f6:02:bb:cf:70:11:24:1a:79:38:20:86:ff:d8:49:
40:17:6e:8e:38:dd:93:06:aa:f8:8a:5b:d8:9a:96:23:dd:6e:
87:06:1b:79:9e:67:64:83:7f:93:cc:4f:8c:52:ff:d9:4e:37:
e5:8d:b2:be
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ncdrCVRJDdIKD2qrjEIDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjYwMzI2MDAwMTA2WhcNMjYwMzI3MDAwMTA2WjAzMTEwLwYDVQQD
EygzZTk1NGM5OWIxMmZmN2IxNTE2YzllMzg4MWFkNWE4NzIxM2RiNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL7Hz07uu8h6MrQAanu3+fIzez3h
85x4YWffzW7yfcbY72HFQtwpLl+9s0JhkzM6dZa1zw2u7jr+mmSoTgvonwVkifuh
q/HeKtZx532W7XwQJFKM0cjf8qwx0PHFOvC1oLnxpsYnkZjTfeju60JBhYGO6yW4
ha3f7Dp+v8nhlDj66m4G8/jc2iKVEvZ11LKOhALJ/adwn+i5TAzdKyvLAaqp2QML
oAh4JyVcz/a5ZytnvLi4FTgtZlkKddin9svYHycH2AeYZ6zYY00WHhUea01Uw1K6
dK4Xs+VtogkKAVBkg0fWBS/XHRUlyAfkiWwUgWkf5X+d0eY03pXgnWnOSQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD6VTJmxL/exUWyeOIGtWochPbU2MB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjuX
ypDpb6CemwPu/L3VcuQnwTNa5qJoG3K63aGoArv7cSmBQhY95wlCDzt+k+YtDlbA
qh26iwqe/i/5vmMYbWK3o28J7LWlms8uJF+CHaP/iFI8+6BPwAR/Rhta/D5wDyWJ
dSFKE6DVaSF4CGQETIZ0+ADGcyo/5qOR1UoI6jOdQqwVrLGNK1tnqvFnXRHvw7W0
nfqcZPUZvUM3T1bI75+qF9Yj0v8ocQ7X00h6EUQNiR3ZWZ47q/PZTLMZRZdUboYD
YCeyBf719gK7z3ARJBp5OCCG/9hJQBdujjjdkwaq+Ipb2JqWI91uhwYbeZ5nZIN/
k8xPjFL/2U435Y2yvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:37 2026 by rpki-client