Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: qZQqqXDvEP2L9o+QeFD/bANzm5VY4SMgxwzfW5Zzzfg=
Subject key identifier: B9:B3:F3:FB:FE:A0:84:58:74:2D:E1:CF:DD:9F:C0:58:26:D8:DF:88
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019CAAC7123528E59CB03895BE26B5A0060C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 09B9
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: MA0AYUewAlFy0eE1s4w4uHx7QQaDsv6njiy9xwN/qcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:12:35:28:e5:9c:b0:38:95:be:26:b5:a0:06:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=b9b3f3fbfea08458742de1cfdd9fc05826d8df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:05:09:fa:35:73:65:da:84:31:49:67:8f:
72:ce:10:b2:4f:10:10:01:47:78:a9:61:53:e5:78:
dd:aa:27:23:31:23:76:33:29:85:ff:a9:b7:6b:7a:
e1:90:66:9d:30:1c:de:7d:94:8d:bf:bd:26:3f:b9:
52:dc:11:a3:68:9f:f6:70:cf:c2:ef:04:29:95:33:
4e:46:b1:75:0d:c2:fc:a4:ff:4b:07:81:f9:0a:11:
39:a8:94:31:68:b4:f4:91:09:cf:84:2e:8a:07:e4:
96:43:b8:96:3c:ab:1e:15:09:28:83:54:dd:91:6e:
86:98:55:5c:94:63:41:db:39:c6:04:51:2a:ee:f7:
4a:ec:90:0f:60:f0:37:7a:b7:8f:ab:c3:a1:1f:ab:
f4:ba:46:4a:f8:3e:b3:84:03:45:26:bf:52:eb:1c:
51:95:be:d1:8b:44:08:c1:b3:0b:dc:9b:fc:90:2b:
bc:f2:98:be:1b:13:1c:5a:14:d2:fd:5d:37:43:e5:
3c:ad:1d:76:c5:07:9b:78:7b:5a:13:5b:65:4f:73:
01:4f:50:93:fd:fa:3e:5e:a2:a6:0c:b3:b6:f8:fe:
44:1b:b6:ca:30:59:1d:21:5a:cd:a6:80:f9:01:91:
0f:c9:32:8f:20:6f:cc:24:a5:b1:01:6b:13:67:65:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:F3:FB:FE:A0:84:58:74:2D:E1:CF:DD:9F:C0:58:26:D8:DF:88
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7a:09:5b:56:d9:8a:f4:e1:8a:b3:30:bb:9e:a8:b2:c9:f2:
d9:cb:5f:58:e2:ca:19:bc:b9:39:51:80:be:ef:96:83:5e:e4:
a3:3e:fa:21:1a:ee:f8:99:e3:18:86:5d:27:b2:ef:2d:f1:b3:
f1:4d:17:2d:35:18:5f:05:94:d1:8b:ea:28:4d:a0:0f:cc:92:
bf:e0:ec:a8:7b:98:fd:8d:7d:40:f0:89:71:a9:35:b8:5b:59:
29:9a:7d:ee:f4:c8:f6:7f:29:b6:f8:51:0b:b3:bb:11:89:7b:
2a:bc:7a:38:77:be:6f:fa:0a:f8:dc:4b:7f:45:91:f4:20:e2:
14:56:c7:b2:b0:44:8d:88:04:95:73:07:59:49:9b:27:cd:a2:
a1:fa:82:a1:a6:d5:fb:33:9d:e5:33:48:8d:db:bd:e7:28:ff:
f0:5d:af:ad:87:6a:2f:73:5f:01:64:c9:33:e9:9e:79:42:3a:
c8:7b:62:a6:2a:37:fa:93:3f:98:6e:6d:ec:03:c8:ea:8c:24:
de:01:38:2c:a3:70:42:1a:37:67:b3:05:51:9f:1b:4a:a6:ce:
16:94:89:93:d4:fd:80:99:32:e2:90:a4:67:21:de:07:f4:6a:
92:b7:d5:dc:12:56:28:f5:28:d1:33:2e:7d:28:d2:86:06:d3:
cd:0e:0d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxI1KOWcsDiVvia1oAYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2NhZjBjYjZiMzMwMWNjMDg0YTI1ZDVjMjE0MTBhOTJj
YTdlMzYwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD
EyhiOWIzZjNmYmZlYTA4NDU4NzQyZGUxY2ZkZDlmYzA1ODI2ZDhkZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA294FCfo1c2XahDFJZ49yzhCyTxAQ
AUd4qWFT5XjdqicjMSN2MymF/6m3a3rhkGadMBzefZSNv70mP7lS3BGjaJ/2cM/C
7wQplTNORrF1DcL8pP9LB4H5ChE5qJQxaLT0kQnPhC6KB+SWQ7iWPKseFQkog1Td
kW6GmFVclGNB2znGBFEq7vdK7JAPYPA3erePq8OhH6v0ukZK+D6zhANFJr9S6xxR
lb7Ri0QIwbML3Jv8kCu88pi+GxMcWhTS/V03Q+U8rR12xQebeHtaE1tlT3MBT1CT
/fo+XqKmDLO2+P5EG7bKMFkdIVrNpoD5AZEPyTKPIG/MJKWxAWsTZ2We2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmz8/v+oIRYdC3hz92fwFgm2N+IMB8GA1UdIwQY
MBaAFJh8rwy2szAcwISiXVwhQQqSyn42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEt
MzYxNzBjZDgxMzMwLzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEtMzYxNzBjZDgxMzMw
LzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnoJW1bZ
ivThirMwu56ossny2ctfWOLKGby5OVGAvu+Wg17koz76IRru+JnjGIZdJ7LvLfGz
8U0XLTUYXwWU0YvqKE2gD8ySv+DsqHuY/Y19QPCJcak1uFtZKZp97vTI9n8ptvhR
C7O7EYl7Krx6OHe+b/oK+NxLf0WR9CDiFFbHsrBEjYgElXMHWUmbJ82iofqCoabV
+zOd5TNIjdu95yj/8F2vrYdqL3NfAWTJM+meeUI6yHtipio3+pM/mG5t7API6owk
3gE4LKNwQho3Z7MFUZ8bSqbOFpSJk9T9gJky4pCkZyHeB/RqkrfV3BJWKPUo0TMu
fSjShgbTzQ4N3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:44 2026 by rpki-client