Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: goPrnO/U+CkhbzWSLGvgKn6I/ihU0jzR48FweRSmje8=
Subject key identifier: D1:4B:A3:72:32:01:C5:3E:8A:4B:5D:09:A8:E6:DA:64:89:C9:E5:B6
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019CAC4686367ADC226C7F1C975CE7F1B5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0965
Signing time: Mon 02 Mar 2026 02:00:28 +0000
Manifest this update: Mon 02 Mar 2026 02:00:28 +0000
Manifest next update: Tue 03 Mar 2026 02:00:28 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: zSkUyzOKeNvPKQlZlN3IPGAn/MyD9Um8j9X8XhKd1do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:86:36:7a:dc:22:6c:7f:1c:97:5c:e7:f1:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Mar 2 02:00:28 2026 GMT
Not After : Mar 3 02:00:28 2026 GMT
Subject: CN=d14ba3723201c53e8a4b5d09a8e6da6489c9e5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:1c:ec:11:d0:73:bc:32:ae:25:28:54:46:
5c:2e:93:ef:d8:df:29:d8:ed:5e:6a:eb:4b:8a:28:
50:11:e1:b9:3a:9a:87:a9:08:91:48:1b:f8:ea:cd:
87:67:1e:2a:81:72:e1:60:ad:43:89:ce:02:5c:e3:
a4:16:19:f0:16:1b:1f:48:8c:84:09:47:b3:4a:e4:
96:2a:1c:8e:a2:b5:52:61:36:b7:74:fb:11:94:76:
04:1a:70:6d:34:a5:ed:5b:eb:73:00:1a:3a:a4:48:
e6:ca:7b:63:26:9c:46:d0:49:3c:47:04:7f:6a:53:
8d:76:8c:fe:70:2d:47:37:69:98:42:28:28:ad:88:
05:07:de:72:c8:df:c8:66:a6:7f:f4:da:f0:00:b5:
40:93:48:f2:f7:74:46:19:72:a1:1b:82:52:66:e2:
0c:d9:17:6a:18:08:d7:92:09:60:da:b0:3d:a1:52:
7f:80:f5:fd:94:d3:ec:b5:37:f6:8c:84:42:12:08:
55:06:70:33:ca:a9:55:f8:e5:30:2d:d1:a2:24:0c:
bb:75:7f:9f:13:63:00:0f:8c:5f:b2:15:fe:29:6a:
60:e8:bb:9d:28:a9:81:87:3d:37:20:e2:99:a5:6c:
13:e0:f0:83:80:45:d7:aa:cd:ab:c7:cf:7a:a8:a5:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:A3:72:32:01:C5:3E:8A:4B:5D:09:A8:E6:DA:64:89:C9:E5:B6
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:cd:89:74:73:b7:ab:03:3e:4d:9f:c0:08:ab:d5:90:71:
fb:27:d8:b7:41:8f:a5:6d:ee:ee:37:04:95:10:ef:8c:75:9e:
d9:8a:0f:f4:48:19:c4:2e:c8:83:db:8d:6d:b2:56:74:55:4a:
7b:4a:a6:4c:0f:2b:b5:06:b8:d6:1d:f1:8e:47:2c:a1:22:7d:
2b:d5:65:f1:8e:cd:55:de:5d:9d:6f:2f:0f:22:b1:da:f6:25:
c6:46:24:02:35:49:9a:53:d7:e8:76:77:e0:c9:4f:11:fb:df:
ed:41:b7:ce:76:0b:f2:cb:0e:85:c6:18:f9:05:07:9c:3f:be:
f8:2e:16:0b:f7:b8:9a:8b:5f:fe:78:60:13:2e:44:a3:68:de:
fe:b6:2f:e0:ab:3c:30:b9:64:2f:37:06:2e:a8:a6:c5:52:03:
03:9c:5f:59:6c:93:8a:4e:da:9a:3c:f4:d9:d2:b6:78:ec:77:
26:b8:ad:ba:21:5b:4d:97:99:1c:3d:ee:5c:85:94:24:52:fd:
6d:06:39:3f:6a:6e:74:38:63:bd:50:17:54:0a:39:01:f8:be:
0a:55:26:14:ca:10:f3:c4:9e:36:b8:36:84:32:28:4a:11:3a:
b4:46:be:fe:d5:da:80:60:1f:41:bb:01:c4:19:a4:9c:23:9f:
84:70:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:35 2026 by rpki-client