Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: UgRsm2DsKg2zyuh7yVO4z15r2ESF+09hRSmRKDWEZ7I=
Subject key identifier: E5:33:3D:D2:9C:2D:1B:8E:42:59:76:FC:A1:3A:01:6E:D8:71:F5:7D
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019CA9EB59B047C2A5C9CB135CD9A2A1330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 15:01:39 +0000
Manifest this update: Sun 01 Mar 2026 15:01:39 +0000
Manifest next update: Mon 02 Mar 2026 15:01:39 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: LDmJisySELanyUi47kQ7UsXUuFJEY4zM7Sdk1zP2juY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:59:b0:47:c2:a5:c9:cb:13:5c:d9:a2:a1:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Mar 1 15:01:39 2026 GMT
Not After : Mar 2 15:01:39 2026 GMT
Subject: CN=e5333dd29c2d1b8e425976fca13a016ed871f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:db:d3:db:b0:f5:e4:76:a5:97:c1:87:2e:
94:db:1a:24:d1:9f:e4:c1:5b:99:9b:19:69:0b:bc:
4c:84:fe:9f:63:73:e7:65:a5:f2:69:2c:15:1c:27:
e6:31:de:bc:67:d1:2a:54:50:12:71:45:07:8b:57:
ba:82:53:af:84:d9:b0:92:cb:31:3d:63:a6:50:80:
be:18:3e:b6:cc:ce:54:59:63:1e:88:97:d9:07:d3:
b9:9f:4d:84:1b:51:1a:97:b3:bd:aa:45:f8:9a:cf:
82:24:0e:5d:85:14:7d:f0:f4:c4:f9:be:b0:86:22:
8f:6f:d6:97:f6:77:2f:4e:aa:1b:4a:65:9b:ea:0e:
7a:7c:bc:48:4c:56:8e:f9:10:af:54:77:cc:7d:d8:
59:10:dc:cc:5a:01:74:6b:72:c5:66:d1:30:e9:46:
ca:0f:07:94:1b:d6:0a:10:39:b9:a1:f4:ec:84:c8:
60:5b:1d:e8:1b:07:a8:2d:63:71:9f:d4:7a:17:85:
31:7c:f2:e3:2a:35:76:7a:e0:d5:d9:aa:97:34:c3:
9d:0e:dd:c2:80:a8:49:9f:3f:17:d2:4c:0a:ca:8d:
12:24:ba:6f:92:6a:da:42:ca:7a:f1:5c:63:d4:7e:
75:a6:e3:19:ae:54:a6:72:c3:e5:e0:86:fc:2e:9c:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:33:3D:D2:9C:2D:1B:8E:42:59:76:FC:A1:3A:01:6E:D8:71:F5:7D
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:52:9c:fb:57:f7:1e:44:7f:cf:5b:b6:52:aa:54:ed:79:9c:
92:5e:9f:56:4d:c8:3c:f8:bf:36:69:f1:d1:0a:2c:d7:bd:06:
9e:c5:09:79:31:b5:42:af:58:30:ed:d0:30:eb:a9:1b:48:d2:
6e:1f:22:0e:b9:4e:c9:9a:35:c4:4e:46:62:6c:0d:65:dd:7c:
04:77:51:34:e0:7f:2a:d7:4b:4c:3d:6c:61:2c:74:b4:0e:01:
a1:13:84:7f:a7:5e:e6:56:8e:32:c5:1c:84:70:b4:d4:7e:c9:
5e:e8:03:53:75:09:9f:da:59:6a:65:e0:c5:cf:c8:36:5a:e3:
fc:37:12:a3:8e:b9:8a:7f:e1:39:c0:a4:25:1d:38:e2:85:cc:
fb:5e:18:52:d7:29:b5:2a:30:c2:73:86:4c:d1:06:97:4c:dd:
81:8d:8d:ce:41:36:2a:30:36:b5:a3:67:4f:f7:84:1f:7e:b2:
a0:7f:64:ac:cb:4e:b5:a5:ee:03:19:dd:42:d5:89:6a:e9:ea:
fe:0e:ad:0e:a8:dc:e9:ee:6a:4f:56:f6:39:e9:fb:94:60:ed:
6b:b2:81:ac:e9:94:af:0b:42:49:82:1b:94:d8:76:a0:d7:7b:
0d:c0:09:67:65:5b:16:d8:fb:ef:62:95:73:20:0e:69:ed:8d:
22:90:9d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp61mwR8KlycsTXNmioTMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5
MTkzZDgwHhcNMjYwMzAxMTUwMTM5WhcNMjYwMzAyMTUwMTM5WjAzMTEwLwYDVQQD
EyhlNTMzM2RkMjljMmQxYjhlNDI1OTc2ZmNhMTNhMDE2ZWQ4NzFmNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mHb09uw9eR2pZfBhy6U2xok0Z/k
wVuZmxlpC7xMhP6fY3PnZaXyaSwVHCfmMd68Z9EqVFAScUUHi1e6glOvhNmwkssx
PWOmUIC+GD62zM5UWWMeiJfZB9O5n02EG1Eal7O9qkX4ms+CJA5dhRR98PTE+b6w
hiKPb9aX9ncvTqobSmWb6g56fLxITFaO+RCvVHfMfdhZENzMWgF0a3LFZtEw6UbK
DweUG9YKEDm5ofTshMhgWx3oGweoLWNxn9R6F4UxfPLjKjV2euDV2aqXNMOdDt3C
gKhJnz8X0kwKyo0SJLpvkmraQsp68Vxj1H51puMZrlSmcsPl4Ib8LpwijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUzPdKcLRuOQll2/KE6AW7YcfV9MB8GA1UdIwQY
MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt
YzgwNDA4M2U3ZDQ5LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5
LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFKc+1f3
HkR/z1u2UqpU7Xmckl6fVk3IPPi/Nmnx0Qos170GnsUJeTG1Qq9YMO3QMOupG0jS
bh8iDrlOyZo1xE5GYmwNZd18BHdRNOB/KtdLTD1sYSx0tA4BoROEf6de5laOMsUc
hHC01H7JXugDU3UJn9pZamXgxc/INlrj/DcSo465in/hOcCkJR044oXM+14YUtcp
tSowwnOGTNEGl0zdgY2NzkE2KjA2taNnT/eEH36yoH9krMtOtaXuAxndQtWJaunq
/g6tDqjc6e5qT1b2Oen7lGDta7KBrOmUrwtCSYIblNh2oNd7DcAJZ2VbFtj772KV
cyAOae2NIpCdRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:28 2026 by rpki-client