Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: 3xw/j+MyOC7A27LH05Gl1I8EMdrSw9/hvgCPGYQa8es=
Subject key identifier: 09:37:32:B9:F5:6C:72:8C:8A:4D:65:7B:A3:2C:67:24:D8:27:12:00
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019CA9EB26E078D417AC8D26E38D381675DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:26 +0000
Manifest this update: Sun 01 Mar 2026 15:01:26 +0000
Manifest next update: Mon 02 Mar 2026 15:01:26 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: 82R9s05BKP1fWQAgeHXQXi/UUMdz1S+Rg3fJ/qqzWro=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:26:e0:78:d4:17:ac:8d:26:e3:8d:38:16:75:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Mar 1 15:01:26 2026 GMT
Not After : Mar 2 15:01:26 2026 GMT
Subject: CN=093732b9f56c728c8a4d657ba32c6724d8271200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:35:e9:16:57:8c:b1:ec:bc:d3:4f:fc:19:
44:a2:85:dc:6c:cb:33:24:f0:a5:74:ff:9f:a3:c3:
9a:e0:e4:0b:b1:77:d8:e6:32:61:0c:08:f1:ae:18:
25:57:7b:8d:53:09:8a:5d:54:cd:aa:66:25:11:19:
45:47:32:7b:43:bb:70:a2:0e:48:04:89:89:73:65:
93:4a:17:d0:52:29:1e:1c:73:59:d8:3e:0f:c3:a0:
53:ba:30:a1:30:5c:91:9b:c6:e2:df:04:bd:c4:6a:
fa:b1:35:2d:d5:e7:ce:89:a1:18:e1:f3:57:2a:36:
6f:c0:58:7c:86:d0:ef:7d:42:35:6f:02:a0:94:f1:
a1:65:db:ee:fa:ea:42:cf:59:a4:2e:29:8b:58:a6:
0d:2c:a7:4b:21:71:f1:44:11:90:84:90:26:0f:b2:
e6:f9:d9:b2:06:ce:4d:99:58:4c:1b:a6:b6:7e:8b:
ca:3e:bf:0e:6b:8a:dd:75:60:09:2b:04:9f:43:62:
71:66:59:5f:cc:3e:4d:00:ae:8d:48:6e:e2:2f:d3:
ee:1a:c2:83:59:47:0c:2e:9d:47:eb:86:7f:31:b1:
30:8c:94:43:66:90:cd:97:2b:51:3c:1c:2d:fe:5a:
e3:a9:68:3e:2c:4c:40:08:6f:1c:15:d5:29:b0:b4:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:32:B9:F5:6C:72:8C:8A:4D:65:7B:A3:2C:67:24:D8:27:12:00
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:09:ab:71:0d:07:a9:d6:61:e2:68:57:42:f7:41:f6:9d:b6:
f4:e6:c4:91:4f:59:c0:06:5f:c0:11:55:07:db:0e:88:b2:f1:
7c:82:62:c2:6e:bb:3b:16:f7:12:9c:cd:94:f3:78:db:71:23:
6e:bc:20:0e:e9:2c:8a:b2:5c:ca:20:43:82:10:80:eb:57:3a:
d1:5d:b2:9a:b2:25:27:77:41:47:37:f0:a3:c2:a3:5b:2d:7e:
1f:bc:e3:74:61:f2:96:90:c6:0f:03:be:e4:4a:50:0e:68:46:
85:3e:38:3e:5f:85:89:70:86:82:f1:48:b9:f1:ee:5a:b0:8b:
a7:b7:6d:6d:cd:97:65:77:f2:61:06:4e:09:64:ba:6c:af:d5:
49:5f:34:8d:5f:8a:da:f6:01:65:81:48:50:61:3f:76:b7:e5:
ae:c4:ee:37:62:f9:18:61:fb:1d:59:84:a1:77:cb:55:89:9a:
0f:4b:15:97:1b:d6:08:9d:53:41:28:0b:a6:0c:76:49:1a:b4:
e7:38:29:ef:f3:64:08:46:4b:a3:84:a5:23:04:2d:dc:66:7a:
bd:99:88:bc:64:07:dc:d1:a0:f4:73:4e:c8:6a:24:07:1e:ed:
6e:f5:21:54:63:18:ac:e9:a2:4c:c0:7f:d5:c1:06:a6:5e:3e:
fc:38:80:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6ybgeNQXrI0m4404FnXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw
NTI4ODQwHhcNMjYwMzAxMTUwMTI2WhcNMjYwMzAyMTUwMTI2WjAzMTEwLwYDVQQD
EygwOTM3MzJiOWY1NmM3MjhjOGE0ZDY1N2JhMzJjNjcyNGQ4MjcxMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFk16RZXjLHsvNNP/BlEooXcbMsz
JPCldP+fo8Oa4OQLsXfY5jJhDAjxrhglV3uNUwmKXVTNqmYlERlFRzJ7Q7twog5I
BImJc2WTShfQUikeHHNZ2D4Pw6BTujChMFyRm8bi3wS9xGr6sTUt1efOiaEY4fNX
KjZvwFh8htDvfUI1bwKglPGhZdvu+upCz1mkLimLWKYNLKdLIXHxRBGQhJAmD7Lm
+dmyBs5NmVhMG6a2fovKPr8Oa4rddWAJKwSfQ2JxZllfzD5NAK6NSG7iL9PuGsKD
WUcMLp1H64Z/MbEwjJRDZpDNlytRPBwt/lrjqWg+LExACG8cFdUpsLR00wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk3Mrn1bHKMik1le6MsZyTYJxIAMB8GA1UdIwQY
MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt
YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk
LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgmrcQ0H
qdZh4mhXQvdB9p229ObEkU9ZwAZfwBFVB9sOiLLxfIJiwm67Oxb3EpzNlPN423Ej
brwgDuksirJcyiBDghCA61c60V2ymrIlJ3dBRzfwo8KjWy1+H7zjdGHylpDGDwO+
5EpQDmhGhT44Pl+FiXCGgvFIufHuWrCLp7dtbc2XZXfyYQZOCWS6bK/VSV80jV+K
2vYBZYFIUGE/drflrsTuN2L5GGH7HVmEoXfLVYmaD0sVlxvWCJ1TQSgLpgx2SRq0
5zgp7/NkCEZLo4SlIwQt3GZ6vZmIvGQH3NGg9HNOyGokBx7tbvUhVGMYrOmiTMB/
1cEGpl4+/DiASA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:17 2026 by rpki-client