Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: uJBjHp92NfK6QfwGWvJfxfTYUEL/3fQhK+qec20DjJY=
Subject key identifier: 81:DA:63:14:9A:D2:48:1E:92:23:FD:31:52:68:48:A5:53:41:FE:D5
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019CAF7EE64C558E70646348A3DD0EFC3E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1238
Signing time: Mon 02 Mar 2026 17:00:55 +0000
Manifest this update: Mon 02 Mar 2026 17:00:55 +0000
Manifest next update: Tue 03 Mar 2026 17:00:55 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: JC+yRPKDb18Cf3HfaqV+FP1dU2yEkF3FgUotzWHdB2Q=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:e6:4c:55:8e:70:64:63:48:a3:dd:0e:fc:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Mar 2 17:00:55 2026 GMT
Not After : Mar 3 17:00:55 2026 GMT
Subject: CN=81da63149ad2481e9223fd31526848a55341fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:d1:97:c3:9e:22:c8:12:2d:7e:66:a9:63:
0b:74:c4:26:e8:85:36:12:b0:72:0d:a2:3a:bb:a3:
29:88:a3:2a:c8:97:ff:87:10:18:3e:6e:4d:3a:b6:
74:2b:28:ec:51:77:f5:71:04:9e:f5:50:23:81:bb:
66:43:25:3c:74:e8:08:8a:57:98:a5:ba:25:08:20:
82:9f:6d:a2:c8:81:17:50:9b:85:3a:a5:c3:d7:4c:
20:99:d4:ad:1a:2a:5d:6a:37:67:d0:95:d1:13:0d:
8f:9c:7f:9b:34:61:ba:f1:36:7c:03:af:4c:51:c4:
ee:bf:74:18:f2:02:93:dd:70:f7:1b:86:30:3a:e2:
8d:73:4e:9c:78:42:7b:0c:43:81:cc:39:20:74:ff:
fb:1c:c7:6f:ed:20:ca:23:fb:5c:8e:4f:da:69:2a:
fb:59:8a:89:a0:b9:71:71:ae:9b:a4:4c:d3:78:8c:
50:15:09:d0:84:a0:9c:38:bf:5a:72:5e:5d:c5:74:
6b:7c:ae:97:d0:34:20:0c:21:32:ea:29:a5:fa:57:
d8:52:8c:b0:ef:84:66:11:89:d0:48:8c:ae:5a:c7:
d2:c8:86:9f:8f:22:db:91:6f:83:e4:7c:47:9d:de:
05:fb:c6:d4:eb:d6:30:fa:c4:41:60:aa:f8:17:5a:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:63:14:9A:D2:48:1E:92:23:FD:31:52:68:48:A5:53:41:FE:D5
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:52:bd:22:6e:fe:e9:0d:cd:84:4a:c7:92:db:92:d0:e8:
e4:6e:42:20:a7:aa:56:d1:e0:63:f8:9b:95:8f:c7:bd:4a:0b:
d7:f5:70:d4:cd:b3:c5:d0:f8:d0:e5:4a:67:f6:2e:06:d7:08:
17:3a:fd:bc:19:ae:05:67:66:7e:8d:5b:a4:00:8a:45:df:7c:
08:68:1d:7d:95:70:4e:18:bf:9a:a3:a5:f7:62:95:5b:67:2e:
82:e4:ad:b4:75:48:46:58:21:97:19:64:18:23:6e:e1:69:f5:
8a:bf:56:5d:51:0e:91:56:18:2a:99:2e:40:7e:38:54:bc:4c:
2c:ef:bd:c1:68:23:ee:ab:58:9a:04:78:38:31:21:18:bb:3c:
cf:53:c6:86:e2:f7:02:0c:8b:0d:d0:62:ab:9e:79:cf:f8:2b:
2c:ca:3c:19:24:38:a7:51:4f:43:cf:76:1d:c4:8e:9a:f8:9e:
15:be:7e:21:68:43:d0:19:f5:2f:73:30:11:bb:28:4d:e3:e5:
7e:fe:78:51:c4:fb:6c:dc:da:8b:fc:90:0d:3a:15:e6:f7:44:
f0:fd:18:56:1d:03:61:ec:0f:77:2f:8f:70:c4:8a:79:ee:4b:
41:06:84:65:ff:4f:ec:a9:51:a9:5e:24:95:27:c2:a2:64:29:
85:96:fc:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvfuZMVY5wZGNIo90O/D42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwMzAyMTcwMDU1WhcNMjYwMzAzMTcwMDU1WjAzMTEwLwYDVQQD
Eyg4MWRhNjMxNDlhZDI0ODFlOTIyM2ZkMzE1MjY4NDhhNTUzNDFmZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnnRl8OeIsgSLX5mqWMLdMQm6IU2
ErByDaI6u6MpiKMqyJf/hxAYPm5NOrZ0KyjsUXf1cQSe9VAjgbtmQyU8dOgIileY
pbolCCCCn22iyIEXUJuFOqXD10wgmdStGipdajdn0JXREw2PnH+bNGG68TZ8A69M
UcTuv3QY8gKT3XD3G4YwOuKNc06ceEJ7DEOBzDkgdP/7HMdv7SDKI/tcjk/aaSr7
WYqJoLlxca6bpEzTeIxQFQnQhKCcOL9acl5dxXRrfK6X0DQgDCEy6iml+lfYUoyw
74RmEYnQSIyuWsfSyIafjyLbkW+D5HxHnd4F+8bU69Yw+sRBYKr4F1qI7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHaYxSa0kgekiP9MVJoSKVTQf7VMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrtSvSJu
/ukNzYRKx5LbktDo5G5CIKeqVtHgY/iblY/HvUoL1/Vw1M2zxdD40OVKZ/YuBtcI
Fzr9vBmuBWdmfo1bpACKRd98CGgdfZVwThi/mqOl92KVW2cuguSttHVIRlghlxlk
GCNu4Wn1ir9WXVEOkVYYKpkuQH44VLxMLO+9wWgj7qtYmgR4ODEhGLs8z1PGhuL3
AgyLDdBiq555z/grLMo8GSQ4p1FPQ892HcSOmvieFb5+IWhD0Bn1L3MwEbsoTePl
fv54UcT7bNzai/yQDToV5vdE8P0YVh0DYewPdy+PcMSKee5LQQaEZf9P7KlRqV4k
lSfComQphZb80g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:21 2026 by rpki-client