Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: SNf8GWscjF5Aj+7nETT5KhKwenLoJlkvag/epzsdSR8=
Subject key identifier: F1:DC:D4:E8:05:E1:63:15:E5:C0:35:1F:D2:71:5A:EB:15:96:17:74
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 019E1C7DF5434D0AD9F84638061B4612CAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0C1B
Signing time: Tue 12 May 2026 14:01:17 +0000
Manifest this update: Tue 12 May 2026 14:01:17 +0000
Manifest next update: Wed 13 May 2026 14:01:17 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: Grv79Ti0eFrX6cNdOtROOl97iwxkO5GkwOT3XcB5oTQ=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f5:43:4d:0a:d9:f8:46:38:06:1b:46:12:ca:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: May 12 14:01:17 2026 GMT
Not After : May 13 14:01:17 2026 GMT
Subject: CN=f1dcd4e805e16315e5c0351fd2715aeb15961774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:bf:82:a0:9e:6d:13:76:80:88:7a:31:29:
82:01:0b:24:ce:5c:ac:e5:a1:4c:5b:d7:2c:e5:46:
85:89:67:27:e8:c8:e2:ba:4c:6d:d9:84:c1:94:e7:
7a:e0:12:ee:3a:bc:14:46:49:78:c7:12:40:45:48:
b6:fb:f4:6b:d7:6c:56:d5:5a:09:bc:1e:25:fe:80:
e9:6e:15:40:e0:5a:22:5c:a6:73:10:56:0c:eb:9a:
b4:bb:0e:76:2e:5c:ff:5f:5c:be:3a:6a:08:5e:80:
93:be:99:67:1a:dd:af:6c:c3:57:6e:b2:8b:4c:78:
a4:4e:f0:24:b8:95:59:db:5e:b9:33:7c:af:af:97:
53:26:7c:2a:67:84:5b:8c:ef:c0:09:00:16:37:13:
08:2e:55:32:6f:e3:76:7f:62:26:90:55:bb:91:50:
a5:da:05:8c:f6:27:35:8d:16:85:ed:2d:05:18:99:
b5:ec:29:c4:f6:17:d5:25:68:32:89:fe:20:a8:fd:
ef:48:65:37:99:7c:86:ae:cf:31:54:c6:2e:57:03:
a4:71:c6:07:75:2e:d3:2e:d7:37:75:9d:da:63:ed:
21:53:9c:0f:bb:05:79:1c:36:98:54:f7:e7:1a:96:
43:69:8e:41:3d:cc:40:79:c5:91:83:78:a1:34:e3:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:D4:E8:05:E1:63:15:E5:C0:35:1F:D2:71:5A:EB:15:96:17:74
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:d2:46:f5:ec:e0:a6:df:a3:f1:44:ee:85:3d:7d:af:28:
7b:78:1b:73:7b:26:75:6a:d0:e4:0a:bd:96:e8:9b:c1:cd:35:
94:35:56:00:f1:7d:56:21:cd:46:8e:80:44:ad:9d:a1:c5:4e:
45:ac:0e:69:20:ea:b9:ba:91:f7:f0:a1:b6:d6:f1:88:c5:3f:
2e:9d:fe:51:0b:3c:21:29:4b:6a:74:5f:c1:d5:57:80:99:84:
8a:e5:ca:02:f8:f0:27:1b:9f:da:6e:c5:d8:f7:38:fe:4f:93:
8c:1c:68:3b:c6:72:63:36:70:b7:77:44:f0:f2:0a:44:83:df:
64:5d:6c:cb:15:13:37:9f:e0:61:4a:7d:81:1a:bc:55:24:6e:
91:c4:a4:5b:74:0e:e5:67:83:c8:f6:53:3f:1d:4c:cb:b8:4f:
92:dd:64:c1:11:0d:c4:07:10:83:26:2f:f4:a2:f0:48:ef:31:
1c:92:c8:79:2b:6a:8a:4e:bb:11:10:df:9c:f1:f4:b9:5a:9f:
79:d7:af:ee:68:78:a9:63:9e:ba:c6:81:79:c8:ae:6e:53:45:
27:b5:bd:50:c0:67:a1:d3:f1:df:48:65:07:e3:9b:c8:3f:17:
f3:0a:66:76:d8:81:e6:f8:29:8d:38:96:84:38:70:51:17:f4:
d9:5a:59:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4cffVDTQrZ+EY4BhtGEsrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTc4ZTM4YmI4ZWY5OGJiZjJiMzFiODk2Mzk3ZjQ4Nzlm
NmIwZjcwHhcNMjYwNTEyMTQwMTE3WhcNMjYwNTEzMTQwMTE3WjAzMTEwLwYDVQQD
EyhmMWRjZDRlODA1ZTE2MzE1ZTVjMDM1MWZkMjcxNWFlYjE1OTYxNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6US/gqCebRN2gIh6MSmCAQskzlys
5aFMW9cs5UaFiWcn6Mjiukxt2YTBlOd64BLuOrwURkl4xxJARUi2+/Rr12xW1VoJ
vB4l/oDpbhVA4FoiXKZzEFYM65q0uw52Llz/X1y+OmoIXoCTvplnGt2vbMNXbrKL
THikTvAkuJVZ2165M3yvr5dTJnwqZ4RbjO/ACQAWNxMILlUyb+N2f2ImkFW7kVCl
2gWM9ic1jRaF7S0FGJm17CnE9hfVJWgyif4gqP3vSGU3mXyGrs8xVMYuVwOkccYH
dS7TLtc3dZ3aY+0hU5wPuwV5HDaYVPfnGpZDaY5BPcxAecWRg3ihNOOFWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPHc1OgF4WMV5cA1H9JxWusVlhd0MB8GA1UdIwQY
MBaAFPoXjji7jvmLvysxuJY5f0h59rD3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oZU9PTHVPLVl1X0t6RzRsamxfU0huMnNQYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZhLTVlNDctNGZhOS1iZDNi
LTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0bGpsX1NIbjJzUGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U0LzY2ZTA2YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3
MTQvMS8xLWhlT09MdU8tWXVfS3pHNGxqbF9TSG4yc1BjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX3S
RvXs4Kbfo/FE7oU9fa8oe3gbc3smdWrQ5Aq9luibwc01lDVWAPF9ViHNRo6ARK2d
ocVORawOaSDqubqR9/ChttbxiMU/Lp3+UQs8ISlLanRfwdVXgJmEiuXKAvjwJxuf
2m7F2Pc4/k+TjBxoO8ZyYzZwt3dE8PIKRIPfZF1syxUTN5/gYUp9gRq8VSRukcSk
W3QO5WeDyPZTPx1My7hPkt1kwRENxAcQgyYv9KLwSO8xHJLIeStqik67ERDfnPH0
uVqfedev7mh4qWOeusaBeciublNFJ7W9UMBnodPx30hlB+ObyD8X8wpmdtiB5vgp
jTiWhDhwURf02VpZMw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:55 2026 by rpki-client