Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: rIS5MouII9fatf9tMwvvVhYX6RJTM5qHMQrw6gdQVr8=
Subject key identifier: F4:C8:44:2E:76:53:D3:30:CB:1B:B6:B3:77:9D:1E:1A:3E:67:F8:0A
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019CABA250F58F70D2D58278F34C483775AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 23:01:07 +0000
Manifest this update: Sun 01 Mar 2026 23:01:07 +0000
Manifest next update: Mon 02 Mar 2026 23:01:07 +0000
Files and hashes: 1: Iz0LT_Qe2YCy1jRQ8uxVx9mEXjU.roa (hash: sj0aNBI2t2YqU/+4g0EyWrm6gSCBWXNbag0SeNr1xIk=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: VuvhFXHlCbLw7nIFoWNnt4qnqrLdrSUPJgluXWjCNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:50:f5:8f:70:d2:d5:82:78:f3:4c:48:37:75:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Mar 1 23:01:07 2026 GMT
Not After : Mar 2 23:01:07 2026 GMT
Subject: CN=f4c8442e7653d330cb1bb6b3779d1e1a3e67f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:7e:5b:72:6f:af:a8:d3:86:92:cf:20:46:
fc:ce:c7:a9:f8:3e:35:1b:19:d5:79:e4:41:8d:07:
5c:fb:cc:0e:ac:d4:54:f0:36:67:8c:ce:18:29:fa:
92:aa:69:a6:af:1c:7b:bb:11:e3:58:74:f5:48:b6:
5e:67:ba:67:f5:7e:67:3a:c0:e1:47:51:93:05:63:
0a:5a:8d:05:9b:d8:5d:2f:dc:2d:f1:59:9b:20:48:
ff:2b:60:4a:e8:ef:bb:dc:ac:e4:5b:c2:5d:f1:0d:
93:da:d4:d9:ec:d1:1d:86:cc:0e:0c:1c:fa:c9:55:
54:ba:f4:73:1d:18:d4:a9:dc:e6:96:3b:85:f4:fd:
49:0a:ef:e8:a4:85:5f:57:76:90:21:b3:55:1c:16:
ba:d9:1b:68:08:2f:4b:e9:67:82:57:87:e7:63:0e:
62:1c:7e:47:20:4c:81:11:ce:aa:da:1f:1a:38:48:
b1:d6:80:51:ea:6d:97:f6:bc:5a:9a:da:40:f6:05:
0e:6b:33:09:06:0d:15:6d:e2:c8:15:02:e6:5a:ee:
fa:d8:9a:10:78:16:ff:a6:7f:4e:54:19:a8:57:f7:
ca:6f:4c:50:0b:fd:a3:5f:0d:74:54:c1:64:49:30:
7e:a4:57:c9:6d:67:42:f2:45:63:c7:43:67:2f:86:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:44:2E:76:53:D3:30:CB:1B:B6:B3:77:9D:1E:1A:3E:67:F8:0A
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:24:a4:23:93:64:d6:84:94:0d:b7:df:4e:9f:d1:62:b7:
e0:98:35:18:9d:37:fb:5c:be:69:48:a4:69:f7:e2:ee:c7:3a:
34:9f:f0:53:28:94:e7:6a:06:54:3d:b9:04:37:95:b8:92:c3:
a3:1b:a9:43:f2:38:59:d5:e2:e6:12:47:1f:71:64:6a:2e:e6:
64:fe:cc:a9:fd:b4:2d:f8:bb:1c:73:94:d7:c2:1c:67:66:00:
73:e9:a5:32:f6:08:7b:2d:24:78:82:12:e4:87:2c:2f:c1:25:
90:8a:db:85:6b:6b:4c:88:4a:41:38:fa:b6:fc:98:b6:0a:80:
98:fb:38:76:72:12:74:be:3a:22:0c:a3:3b:e8:95:96:10:47:
df:cb:80:3b:97:a6:05:cb:49:00:ea:50:4e:71:58:2e:38:fa:
a7:77:0c:a2:97:6d:19:57:c8:ac:29:fe:fc:c8:4a:a8:c7:e4:
98:be:5a:cf:4b:2a:bb:d9:e4:4f:7c:6c:5e:28:88:b4:65:7a:
a5:b3:aa:76:88:a3:45:da:9a:49:72:6a:18:de:95:72:31:cd:
ba:20:ed:57:59:c0:aa:9d:bf:44:95:03:cd:6a:81:74:fa:84:
14:61:4f:f6:ef:45:97:13:bb:a7:f3:e7:23:bc:12:2c:a4:ed:
28:12:73:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolD1j3DS1YJ480xIN3WuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl
OTlkOTkwHhcNMjYwMzAxMjMwMTA3WhcNMjYwMzAyMjMwMTA3WjAzMTEwLwYDVQQD
EyhmNGM4NDQyZTc2NTNkMzMwY2IxYmI2YjM3NzlkMWUxYTNlNjdmODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Z+W3Jvr6jThpLPIEb8zsep+D41
GxnVeeRBjQdc+8wOrNRU8DZnjM4YKfqSqmmmrxx7uxHjWHT1SLZeZ7pn9X5nOsDh
R1GTBWMKWo0Fm9hdL9wt8VmbIEj/K2BK6O+73KzkW8Jd8Q2T2tTZ7NEdhswODBz6
yVVUuvRzHRjUqdzmljuF9P1JCu/opIVfV3aQIbNVHBa62RtoCC9L6WeCV4fnYw5i
HH5HIEyBEc6q2h8aOEix1oBR6m2X9rxamtpA9gUOazMJBg0VbeLIFQLmWu762JoQ
eBb/pn9OVBmoV/fKb0xQC/2jXw10VMFkSTB+pFfJbWdC8kVjx0NnL4ZFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTIRC52U9Mwyxu2s3edHho+Z/gKMB8GA1UdIwQY
MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt
MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2
LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyskpCOT
ZNaElA23306f0WK34Jg1GJ03+1y+aUikaffi7sc6NJ/wUyiU52oGVD25BDeVuJLD
oxupQ/I4WdXi5hJHH3Fkai7mZP7Mqf20Lfi7HHOU18IcZ2YAc+mlMvYIey0keIIS
5IcsL8ElkIrbhWtrTIhKQTj6tvyYtgqAmPs4dnISdL46IgyjO+iVlhBH38uAO5em
BctJAOpQTnFYLjj6p3cMopdtGVfIrCn+/MhKqMfkmL5az0squ9nkT3xsXiiItGV6
pbOqdoijRdqaSXJqGN6VcjHNuiDtV1nAqp2/RJUDzWqBdPqEFGFP9u9FlxO7p/Pn
I7wSLKTtKBJzNQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:59 2026 by rpki-client