Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: Eq1nwIVuRyFy+ae6/eTg1gde7QMT57dcW8v3pGGJlFQ=
Subject key identifier: E1:37:C5:6D:EF:A0:AD:1A:75:B3:57:C3:95:B9:CA:8E:28:8F:43:32
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 019D25838F2A3D2095365D40886A3315FB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 1160
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: QAdZ9Cv4HaqklNgWsEnDjeGeyH+Cx+hVny13zGrlEU8=)
2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8f:2a:3d:20:95:36:5d:40:88:6a:33:15:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=e137c56defa0ad1a75b357c395b9ca8e288f4332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:1d:ef:a2:8c:e2:10:07:bd:2e:cd:b6:fc:
7f:9b:8a:79:78:1f:55:94:68:b2:44:5b:dc:c9:24:
e5:b9:2b:69:07:a9:61:70:ba:44:22:21:21:15:f1:
20:3c:63:e1:a3:ce:cd:07:47:b4:52:8d:a5:0d:39:
77:b0:63:19:6b:d0:f1:30:57:3e:7f:81:16:9e:fd:
bd:34:a7:a3:14:42:9f:ba:95:6c:06:6b:fe:d6:e5:
9c:72:88:61:56:80:f2:7c:3d:5d:5b:71:e8:81:f9:
46:c6:17:b0:11:13:7b:66:e7:68:46:fd:52:24:fd:
6c:8d:60:ee:16:ec:f2:a5:ec:50:7f:9c:62:1d:f7:
36:ef:1a:c7:ed:8d:64:15:3c:16:ec:71:6f:83:7a:
46:7c:77:d2:36:dd:6a:4d:08:84:84:2b:09:7b:9f:
72:1a:88:c7:d8:7c:cc:17:4b:09:7b:70:f2:b2:d1:
0d:8f:87:f9:23:c9:6f:a7:d3:6a:e9:e1:08:7d:55:
79:c9:f2:51:01:d6:b6:2c:bd:08:d7:d8:66:f3:0e:
25:bc:56:f6:3e:b9:51:7f:73:e5:24:75:a6:ab:cd:
36:88:0e:93:b4:c1:c6:2b:aa:71:2a:a1:ca:9e:c5:
ea:23:a1:54:04:77:c8:fc:4a:e3:63:9b:62:1e:74:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:C5:6D:EF:A0:AD:1A:75:B3:57:C3:95:B9:CA:8E:28:8F:43:32
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:41:9a:b7:d8:33:74:e4:3f:b4:e7:28:a4:40:26:fa:c0:
a6:df:2f:15:67:f0:a1:c4:38:19:c8:b2:b3:55:be:4a:be:13:
0c:70:35:f1:3f:2f:53:8e:4e:d2:d1:43:62:c7:75:3a:44:c9:
a1:12:25:7b:53:02:33:fc:46:42:2b:ef:16:16:6d:9d:83:ae:
42:d5:23:44:69:ce:65:62:3d:cf:23:9c:0c:0b:a7:2e:15:3c:
e7:fb:85:e3:22:c5:c0:59:e4:7d:23:ac:c9:bb:81:17:bc:70:
b3:eb:37:28:61:b9:be:7b:03:3f:f2:6c:c6:32:1c:14:d4:7c:
59:fd:80:38:7e:94:9d:14:67:3b:ec:96:1f:2e:e4:ee:67:19:
38:eb:d3:f9:b4:a9:22:0a:aa:a4:0e:72:00:aa:58:9e:00:e3:
55:9c:39:cb:f8:b4:2e:8f:0d:68:f8:3f:63:23:7a:60:15:5b:
0c:e2:cd:25:88:fc:04:af:6d:23:f6:b3:47:13:26:7e:67:8a:
ca:65:71:d9:f8:e9:53:e6:71:29:4b:d9:cc:c3:5f:4f:b3:9e:
c4:f7:b7:5a:be:c8:a9:1e:8f:e4:aa:46:e7:5a:f5:83:ac:b6:
8c:44:86:33:27:21:56:45:4a:08:49:ac:b3:d3:09:89:80:a6:
a2:73:97:79
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0lg48qPSCVNl1AiGozFfsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjYwMzI1MTUwMTExWhcNMjYwMzI2MTUwMTExWjAzMTEwLwYDVQQD
EyhlMTM3YzU2ZGVmYTBhZDFhNzViMzU3YzM5NWI5Y2E4ZTI4OGY0MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbYd76KM4hAHvS7Ntvx/m4p5eB9V
lGiyRFvcySTluStpB6lhcLpEIiEhFfEgPGPho87NB0e0Uo2lDTl3sGMZa9DxMFc+
f4EWnv29NKejFEKfupVsBmv+1uWccohhVoDyfD1dW3HogflGxhewERN7ZudoRv1S
JP1sjWDuFuzypexQf5xiHfc27xrH7Y1kFTwW7HFvg3pGfHfSNt1qTQiEhCsJe59y
GojH2HzMF0sJe3DystENj4f5I8lvp9Nq6eEIfVV5yfJRAda2LL0I19hm8w4lvFb2
PrlRf3PlJHWmq802iA6TtMHGK6pxKqHKnsXqI6FUBHfI/ErjY5tiHnQVkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOE3xW3voK0adbNXw5W5yo4oj0MyMB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+pB
mrfYM3TkP7TnKKRAJvrApt8vFWfwocQ4Gciys1W+Sr4TDHA18T8vU45O0tFDYsd1
OkTJoRIle1MCM/xGQivvFhZtnYOuQtUjRGnOZWI9zyOcDAunLhU85/uF4yLFwFnk
fSOsybuBF7xws+s3KGG5vnsDP/JsxjIcFNR8Wf2AOH6UnRRnO+yWHy7k7mcZOOvT
+bSpIgqqpA5yAKpYngDjVZw5y/i0Lo8NaPg/YyN6YBVbDOLNJYj8BK9tI/azRxMm
fmeKymVx2fjpU+ZxKUvZzMNfT7OexPe3Wr7IqR6P5KpG51r1g6y2jESGMychVkVK
CEmss9MJiYCmonOXeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:16 2026 by rpki-client