Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: ovHc0EXhRPGwzamVhxSOhMXNrAVxCdEim7B3FCPwUgU=
Subject key identifier: AB:C0:05:87:61:77:3A:62:D6:79:D5:09:59:E6:F6:8D:45:47:4B:47
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019CA9B3BB94FC6A55E1FDA3228F3AB4A762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1235
Signing time: Sun 01 Mar 2026 14:00:54 +0000
Manifest this update: Sun 01 Mar 2026 14:00:54 +0000
Manifest next update: Mon 02 Mar 2026 14:00:54 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 6qv4p0AmLWwMjBkOGev6IlQc2+w8hpW6fakCZwGxHqw=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:bb:94:fc:6a:55:e1:fd:a3:22:8f:3a:b4:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Mar 1 14:00:54 2026 GMT
Not After : Mar 2 14:00:54 2026 GMT
Subject: CN=abc0058761773a62d679d50959e6f68d45474b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:78:27:93:67:74:8c:d4:ee:d7:66:08:1c:
25:6c:a2:93:3c:51:f4:30:28:46:e8:0d:bc:0a:33:
5f:83:b4:10:6a:f1:a7:e9:cd:68:a2:2f:99:43:63:
0f:99:59:53:5f:23:8a:9c:85:d4:82:07:cb:9a:2c:
08:69:7f:bf:ce:cc:1b:96:0c:70:b8:3a:9b:85:d0:
46:52:9e:84:69:71:8d:3d:d1:75:13:d4:ca:97:f5:
aa:e2:8f:23:79:f0:f1:8d:d3:56:b3:db:8f:f3:f5:
17:62:1f:c3:2a:07:de:25:0e:4b:ff:50:68:83:2e:
c4:a8:ff:70:88:63:8c:57:e8:11:e9:39:ef:ca:85:
85:90:74:de:b6:d0:20:8d:49:b1:b5:0c:3a:4f:31:
ff:4a:db:bc:a8:33:07:8e:a1:e9:0f:d7:93:da:5c:
b8:a4:a8:1e:53:c9:8f:93:8c:e2:9d:d4:89:2d:c4:
76:eb:a2:12:64:92:d7:46:ab:5c:ff:14:72:96:32:
2a:51:54:05:1b:8d:d1:d7:34:a8:c3:d0:1d:d9:d9:
ef:48:25:45:8a:70:18:26:e3:4d:14:1e:c9:e1:dc:
7b:e9:14:b2:c9:67:44:8b:bf:a5:a0:c0:81:d1:05:
bf:bb:b1:b3:13:f7:84:6f:65:27:27:5c:8b:34:93:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:05:87:61:77:3A:62:D6:79:D5:09:59:E6:F6:8D:45:47:4B:47
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3a:41:c5:c4:f2:a1:03:c0:9b:84:ff:f1:e5:95:4a:50:6d:
53:b0:57:07:03:83:08:b3:d4:b4:f1:84:44:30:89:44:ee:bc:
d6:68:d2:75:ef:a3:e9:16:a8:e6:01:b8:cf:05:48:e0:66:e0:
8d:f9:9d:e0:29:2e:54:4e:75:09:6d:4a:e6:85:09:96:4b:54:
69:fa:87:a9:08:5c:16:3a:cf:0c:84:cd:5e:93:75:3a:d0:d9:
c2:de:51:2a:d3:68:9b:cf:72:48:d0:fc:29:7a:f0:84:b6:93:
3c:7a:61:4c:2b:eb:80:dc:da:46:18:e1:86:e6:e7:f1:fa:f9:
cc:40:5f:ea:1d:3b:ff:53:dd:af:d1:da:be:a7:0f:cd:fe:ba:
ed:9c:3c:c2:c1:12:2e:61:24:4b:47:7a:ac:e7:b3:0d:d4:50:
14:a4:a7:bd:2a:86:1d:a9:b0:2c:7a:44:5f:4d:67:93:9d:dd:
0b:7f:3f:2b:25:6c:eb:20:cf:72:91:e2:05:31:06:b6:a2:09:
b1:49:99:72:85:f2:d2:b2:31:e2:16:82:c6:12:70:73:7a:7c:
33:24:be:a0:32:cb:b8:64:6e:3b:9b:d8:4a:c7:54:cf:f4:90:
04:6a:55:3d:b1:81:40:e5:30:6b:80:8a:8f:98:27:b7:7c:ee:
c2:0d:cd:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps7uU/GpV4f2jIo86tKdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwMzAxMTQwMDU0WhcNMjYwMzAyMTQwMDU0WjAzMTEwLwYDVQQD
EyhhYmMwMDU4NzYxNzczYTYyZDY3OWQ1MDk1OWU2ZjY4ZDQ1NDc0YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA94J5NndIzU7tdmCBwlbKKTPFH0
MChG6A28CjNfg7QQavGn6c1ooi+ZQ2MPmVlTXyOKnIXUggfLmiwIaX+/zswblgxw
uDqbhdBGUp6EaXGNPdF1E9TKl/Wq4o8jefDxjdNWs9uP8/UXYh/DKgfeJQ5L/1Bo
gy7EqP9wiGOMV+gR6TnvyoWFkHTettAgjUmxtQw6TzH/Stu8qDMHjqHpD9eT2ly4
pKgeU8mPk4zindSJLcR266ISZJLXRqtc/xRyljIqUVQFG43R1zSow9Ad2dnvSCVF
inAYJuNNFB7J4dx76RSyyWdEi7+loMCB0QW/u7GzE/eEb2UnJ1yLNJPJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvABYdhdzpi1nnVCVnm9o1FR0tHMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDpBxcTy
oQPAm4T/8eWVSlBtU7BXBwODCLPUtPGERDCJRO681mjSde+j6Rao5gG4zwVI4Gbg
jfmd4CkuVE51CW1K5oUJlktUafqHqQhcFjrPDITNXpN1OtDZwt5RKtNom89ySND8
KXrwhLaTPHphTCvrgNzaRhjhhubn8fr5zEBf6h07/1Pdr9HavqcPzf667Zw8wsES
LmEkS0d6rOezDdRQFKSnvSqGHamwLHpEX01nk53dC38/KyVs6yDPcpHiBTEGtqIJ
sUmZcoXy0rIx4haCxhJwc3p8MyS+oDLLuGRuO5vYSsdUz/SQBGpVPbGBQOUwa4CK
j5gnt3zuwg3NhA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:11 2026 by rpki-client