Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: x52ig50Ce5IwGnJkmc2WVi7TUY22MR3LFuLom6++2tE=
Subject key identifier: E0:E0:17:DB:3B:8C:84:F1:4B:CC:08:9E:CC:5F:F1:D7:7E:D7:25:BE
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 019CAC472A3964E790493424BEE8B1E6881E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 14C3
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: IFQ-id79kHlDKPQ9PpUhMxfR5F8.roa (hash: 8hN9YwJ+324f32TBhUPA/FbIWI7pWULirPqO3HhSjN8=)
2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: X7JE2Bh2PJN3RwGL5qnqtWHO8DybLwo096aSH1JkPEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2a:39:64:e7:90:49:34:24:be:e8:b1:e6:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=e0e017db3b8c84f14bcc089ecc5ff1d77ed725be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:f4:07:0a:67:34:85:fb:78:00:dc:b4:73:
e0:95:a7:0a:93:34:57:01:99:76:32:13:6c:17:46:
a7:1c:5e:d4:68:de:18:67:14:2c:1c:d2:ab:6a:34:
03:32:d8:52:35:ae:d4:87:cf:a1:64:b7:2c:80:6f:
8c:25:65:4f:04:3d:ae:28:f4:94:7e:55:52:19:2a:
6b:60:b0:48:c1:29:78:94:d9:10:c7:02:c0:a8:dc:
c0:a4:17:cb:1b:25:39:20:ac:45:34:d2:57:8d:8c:
3a:49:d1:ed:bf:67:b9:19:1f:2e:ff:dc:c2:25:d5:
9a:b2:f1:bb:d6:6d:38:38:cf:73:38:9f:7c:3f:d6:
b2:84:80:be:69:1d:aa:c2:d3:6b:fb:42:80:da:87:
10:27:51:ef:45:24:e7:7f:da:d1:11:06:20:43:f8:
cc:8a:d6:92:ad:f2:a7:6a:a6:5c:bc:13:b7:71:0e:
b8:59:94:76:95:a5:b5:d6:95:f5:51:44:03:02:8f:
98:b1:a5:ad:32:51:d2:c6:61:b0:84:c5:25:f1:aa:
84:b8:f8:c9:e5:fb:7f:33:3c:2e:78:4d:4c:36:f2:
a6:7a:ce:48:a0:b8:6b:dc:fe:1a:cf:dc:8c:54:b1:
88:c1:aa:bb:06:ec:b5:9f:d0:08:ad:35:04:7c:fa:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:17:DB:3B:8C:84:F1:4B:CC:08:9E:CC:5F:F1:D7:7E:D7:25:BE
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cc:f1:2e:c7:84:13:29:1c:14:42:96:b0:b8:8f:a9:df:74:
23:8c:0f:61:1e:c7:c3:8b:06:85:be:b9:8c:07:6d:bd:a9:bd:
3f:e2:47:f7:5d:ea:c5:47:0e:06:51:a2:52:d9:0f:2a:e8:54:
91:75:d6:fa:9a:2b:95:ce:ac:19:a6:ca:e5:c5:e5:15:c5:ec:
bb:1d:a9:a2:97:5a:84:39:53:e3:72:90:f0:f2:06:b1:37:8f:
b9:89:4e:52:40:22:d4:0b:fe:9a:aa:df:f6:61:56:7d:c6:9e:
a4:f9:29:8f:74:1c:a3:1f:86:0c:c4:9c:ba:fa:5c:63:9a:0c:
78:d3:2f:1f:3d:33:58:e9:48:d2:32:85:32:7a:97:f8:5b:0e:
7f:c3:e0:ce:bd:f6:14:a1:b6:18:1a:32:0b:6e:60:ec:99:31:
64:27:f5:65:58:46:77:48:bb:ac:18:75:9d:83:20:06:6b:61:
e3:ef:f8:4b:8b:b9:38:76:7f:fe:28:55:0f:37:5e:a8:55:e1:
dd:ef:69:8a:23:a8:c7:11:e1:5b:bc:14:3a:82:a2:7f:f7:ab:
0e:73:57:f3:ac:a2:8a:54:0f:ad:8b:6e:25:fb:17:68:25:51:
fe:a5:50:f2:07:01:39:76:42:2b:39:86:c6:6a:e1:9f:6d:5b:
94:f1:88:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyo5ZOeQSTQkvuix5ogeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz
ZGY4YmYwHhcNMjYwMzAyMDIwMTEwWhcNMjYwMzAzMDIwMTEwWjAzMTEwLwYDVQQD
EyhlMGUwMTdkYjNiOGM4NGYxNGJjYzA4OWVjYzVmZjFkNzdlZDcyNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hb0BwpnNIX7eADctHPglacKkzRX
AZl2MhNsF0anHF7UaN4YZxQsHNKrajQDMthSNa7Uh8+hZLcsgG+MJWVPBD2uKPSU
flVSGSprYLBIwSl4lNkQxwLAqNzApBfLGyU5IKxFNNJXjYw6SdHtv2e5GR8u/9zC
JdWasvG71m04OM9zOJ98P9ayhIC+aR2qwtNr+0KA2ocQJ1HvRSTnf9rREQYgQ/jM
itaSrfKnaqZcvBO3cQ64WZR2laW11pX1UUQDAo+YsaWtMlHSxmGwhMUl8aqEuPjJ
5ft/MzwueE1MNvKmes5IoLhr3P4az9yMVLGIwaq7Buy1n9AIrTUEfPo/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODgF9s7jITxS8wInsxf8dd+1yW+MB8GA1UdIwQY
MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt
NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3
LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMzxLseE
EykcFEKWsLiPqd90I4wPYR7Hw4sGhb65jAdtvam9P+JH913qxUcOBlGiUtkPKuhU
kXXW+porlc6sGabK5cXlFcXsux2popdahDlT43KQ8PIGsTePuYlOUkAi1Av+mqrf
9mFWfcaepPkpj3Qcox+GDMScuvpcY5oMeNMvHz0zWOlI0jKFMnqX+FsOf8Pgzr32
FKG2GBoyC25g7JkxZCf1ZVhGd0i7rBh1nYMgBmth4+/4S4u5OHZ//ihVDzdeqFXh
3e9piiOoxxHhW7wUOoKif/erDnNX86yiilQPrYtuJfsXaCVR/qVQ8gcBOXZCKzmG
xmrhn21blPGIbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:41 2026 by rpki-client