
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: lovTtbIOXA3OrzPtaDXIuyVcZRYqFNFpJTCNr87jG2g=
Subject key identifier: FF:BF:57:46:75:26:65:3B:D5:37:E7:F0:DE:4B:E7:75:E3:35:9C:A4
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019CAB6B0ECA812C7C9B5BABB7CD376C7932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 185B
Signing time: Sun 01 Mar 2026 22:00:45 +0000
Manifest this update: Sun 01 Mar 2026 22:00:45 +0000
Manifest next update: Mon 02 Mar 2026 22:00:45 +0000
Files and hashes: 1: X6yij2F2wCS9SNyg0X2W1evj5UY.roa (hash: NA6kYJC1nLmQ9K7t2tSV4/j0mb+VEM1Maf4SLgSq/gU=)
2: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: 92Mvzv6gWpg9822u3Kj9HaL9i5bFMWXVmxkACG3MZXo=)
3: cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa (hash: QMhkNofXWtqJpzrnd1DVBgskNLYUlXU/ZSYppiY4PcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0e:ca:81:2c:7c:9b:5b:ab:b7:cd:37:6c:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Mar 1 22:00:45 2026 GMT
Not After : Mar 2 22:00:45 2026 GMT
Subject: CN=ffbf57467526653bd537e7f0de4be775e3359ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:b7:14:2f:4b:30:53:c5:d1:c3:fb:1b:d6:
a7:01:12:90:9e:2d:b9:8c:f3:42:b5:33:28:9a:b9:
39:9b:d4:89:bf:6c:60:dd:1f:be:94:7d:5a:2a:9e:
a2:a1:aa:d4:b7:93:bf:3b:83:92:27:72:b0:84:03:
6e:ed:aa:8a:71:c5:42:9e:12:30:b4:fe:33:a7:95:
13:2b:bc:3f:ed:41:38:06:3c:36:f3:b0:7b:62:5f:
4a:ee:7e:ff:b1:ae:4b:85:18:bd:e3:f6:00:b0:e7:
08:db:f0:55:bf:c3:6f:68:4e:10:b0:7c:12:8a:62:
90:f7:19:91:e4:a8:eb:da:28:12:ac:7f:72:e6:07:
bf:cf:3e:0c:58:a5:b6:94:10:f9:b7:64:fc:82:33:
57:96:52:cd:09:9a:24:59:01:e3:15:70:02:72:5a:
dd:2d:3e:de:1e:9a:82:42:99:9e:00:1f:0d:29:47:
35:02:a4:7c:5a:1f:9c:89:fa:ad:f0:4b:ef:cf:d5:
c0:c5:0c:09:b5:6a:fa:7a:af:79:2e:32:9d:1f:12:
3e:50:88:1c:05:c6:ac:9a:04:46:cf:f0:a0:95:99:
4c:84:41:85:7f:d0:ad:19:a2:8f:92:bd:32:b4:fa:
85:84:af:31:3b:ad:2d:9b:7d:d3:bf:c2:b5:bf:14:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BF:57:46:75:26:65:3B:D5:37:E7:F0:DE:4B:E7:75:E3:35:9C:A4
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:74:26:33:2c:2f:d4:a1:fd:b3:f9:bc:47:17:2b:4d:08:
51:62:e1:87:ee:7b:37:d5:87:45:d0:e6:cb:20:d0:59:d1:08:
b3:05:75:a2:66:0f:cf:6c:44:46:6e:d8:44:77:71:a9:45:35:
bc:e7:77:79:3c:ed:b5:cc:22:58:cd:3a:c7:e3:f7:ad:73:66:
4b:76:d0:7a:c3:55:91:1a:fd:64:e2:19:d9:7f:47:14:e7:96:
ef:5c:a9:5e:10:6b:22:e4:12:4a:d0:ba:e9:02:7a:69:2d:b1:
1d:4c:e6:37:14:05:3f:e0:64:d6:43:a1:78:20:2e:7b:dc:42:
0f:47:86:24:c6:cf:47:3c:a8:ed:9f:f6:e5:76:cb:4c:f3:76:
50:4d:ca:2a:9f:b3:d4:88:d9:6c:3d:6e:9f:70:dc:b8:e1:9a:
e4:b7:54:65:a7:d6:20:52:7e:71:76:97:62:23:1e:05:c8:bc:
89:c2:0b:05:0d:bb:c3:dd:58:90:f3:02:13:22:a5:2e:0b:fd:
94:4e:b2:70:4c:b2:cd:77:72:0d:a8:d3:65:b2:27:7a:0b:9c:
47:1f:15:42:4b:da:cc:27:8b:27:8e:72:fa:25:17:f3:5e:bc:
fd:d6:ae:e8:f2:3e:eb:be:7b:56:84:1d:ff:bb:12:50:e3:16:
9d:9b:30:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraw7KgSx8m1urt803bHkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjYwMzAxMjIwMDQ1WhcNMjYwMzAyMjIwMDQ1WjAzMTEwLwYDVQQD
EyhmZmJmNTc0Njc1MjY2NTNiZDUzN2U3ZjBkZTRiZTc3NWUzMzU5Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1li3FC9LMFPF0cP7G9anARKQni25
jPNCtTMomrk5m9SJv2xg3R++lH1aKp6ioarUt5O/O4OSJ3KwhANu7aqKccVCnhIw
tP4zp5UTK7w/7UE4Bjw287B7Yl9K7n7/sa5LhRi94/YAsOcI2/BVv8NvaE4QsHwS
imKQ9xmR5Kjr2igSrH9y5ge/zz4MWKW2lBD5t2T8gjNXllLNCZokWQHjFXACclrd
LT7eHpqCQpmeAB8NKUc1AqR8Wh+cifqt8Evvz9XAxQwJtWr6eq95LjKdHxI+UIgc
BcasmgRGz/CglZlMhEGFf9CtGaKPkr0ytPqFhK8xO60tm33Tv8K1vxTZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+/V0Z1JmU71Tfn8N5L53XjNZykMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuZ0JjMs
L9Sh/bP5vEcXK00IUWLhh+57N9WHRdDmyyDQWdEIswV1omYPz2xERm7YRHdxqUU1
vOd3eTzttcwiWM06x+P3rXNmS3bQesNVkRr9ZOIZ2X9HFOeW71ypXhBrIuQSStC6
6QJ6aS2xHUzmNxQFP+Bk1kOheCAue9xCD0eGJMbPRzyo7Z/25XbLTPN2UE3KKp+z
1IjZbD1un3DcuOGa5LdUZafWIFJ+cXaXYiMeBci8icILBQ27w91YkPMCEyKlLgv9
lE6ycEyyzXdyDajTZbInegucRx8VQkvazCeLJ45y+iUX8168/dau6PI+6757VoQd
/7sSUOMWnZswtA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:38 2026 by rpki-client