Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier: iAXmlVzhnBDnqREW8sAs8gWI8/9DYQnuKSzfsfyGWHM=
Subject key identifier: B4:B3:F7:C4:98:B8:3F:FB:3B:A0:29:54:7B:A8:2E:C6:18:52:4C:26
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial: 019CAF10F64E61C385C89D526BBD3795CA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number: 04C1
Signing time: Mon 02 Mar 2026 15:00:50 +0000
Manifest this update: Mon 02 Mar 2026 15:00:50 +0000
Manifest next update: Tue 03 Mar 2026 15:00:50 +0000
Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: YD8W/YrYfcqVFD4dO9N/vtDS2kuXmaZYGjGJbGd3Ry0=)
2: vU7OOAM1oU2KdgtDcq53PB71mUo.roa (hash: bWa7gI9NfYeqeGnGyvEymMLlvAT66yVfsa/6btBaFoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:f6:4e:61:c3:85:c8:9d:52:6b:bd:37:95:ca:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
Validity
Not Before: Mar 2 15:00:50 2026 GMT
Not After : Mar 3 15:00:50 2026 GMT
Subject: CN=b4b3f7c498b83ffb3ba029547ba82ec618524c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:fd:98:a9:85:e7:80:df:b5:c4:d9:23:d3:
4b:14:fc:b8:ad:7c:a1:03:d6:3f:2a:d7:a7:74:a8:
d5:ad:b9:20:b4:4c:88:0c:3d:cb:19:4a:32:99:72:
bb:4c:78:d6:47:ae:57:75:7f:6b:82:a7:0a:41:11:
dd:2c:0d:e2:45:1d:d8:f3:81:f3:43:69:83:39:a7:
f3:10:fb:51:b1:a1:27:fd:33:ee:ca:9f:4b:e1:1a:
60:d1:58:be:90:36:2b:27:4c:5b:8b:4a:0a:1e:55:
b5:67:06:9b:bb:13:81:54:cf:34:4a:c0:e7:f6:ab:
31:b0:8f:8c:38:7e:0c:17:9f:d7:e2:99:46:ef:e7:
da:27:02:9f:29:38:45:8f:d2:53:d8:08:63:4c:cf:
10:88:da:d2:88:67:c0:96:86:cf:ae:e5:a2:c3:33:
6b:0f:cd:6c:ab:6a:8a:2b:8c:6f:f2:b3:8a:b5:da:
99:51:0a:ae:cc:e4:43:11:b4:10:40:c1:2d:b3:69:
92:bd:13:3f:a2:50:6b:c4:83:fb:fc:bc:74:69:a3:
d1:bc:9c:09:6a:32:0f:c7:4d:cb:72:61:30:57:0b:
c5:2e:cf:28:86:55:1a:80:cc:c6:4b:65:2f:bc:62:
66:48:bb:cf:3f:c9:af:f4:f4:7f:08:8f:c1:28:2b:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:F7:C4:98:B8:3F:FB:3B:A0:29:54:7B:A8:2E:C6:18:52:4C:26
X509v3 Authority Key Identifier:
keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:4c:08:11:11:68:61:98:91:c8:9b:31:9c:86:8d:fd:bd:
18:7f:cf:93:03:19:c6:d5:56:ff:c7:56:c9:fc:4c:66:a4:78:
2c:66:4c:19:07:b1:ca:ee:87:5e:78:6b:fd:8f:da:66:b6:c6:
d5:55:ae:d4:94:08:da:f0:49:e7:6d:50:ac:ac:e5:40:51:f2:
f3:69:e2:18:6b:24:46:5e:52:be:9b:60:8b:4a:82:ef:03:ef:
a0:43:c1:3f:63:55:a2:bb:1e:19:c7:cf:b9:04:ab:aa:fd:97:
e5:de:7b:7c:d2:76:e1:c1:2b:a6:22:62:0c:70:af:a7:97:e4:
f0:17:b9:de:3d:df:b3:64:a7:25:3e:b4:a4:a4:63:61:9a:43:
1a:a0:d5:51:90:da:33:57:0f:49:67:ba:9a:02:d5:cb:1d:f8:
2a:c8:c0:32:70:1d:c9:05:ce:65:eb:8e:b7:fe:47:10:00:7e:
3b:73:67:c1:c8:37:da:b9:18:f1:78:c1:05:96:87:0d:fc:33:
6e:57:68:5c:ae:d0:ff:95:13:b0:f4:4a:a7:76:25:30:c6:62:
7f:5f:c7:00:81:bc:2f:ec:47:30:22:55:fc:aa:62:7e:6f:48:
5f:7d:51:2d:31:93:4c:55:d2:c5:c8:bd:6e:15:bc:10:96:1e:
40:af:3c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEPZOYcOFyJ1Sa703lcqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYTEyNDA1NTVkODZjOGRiZGU4MzZlZGQxNjRjZDMyOGZh
ZTYzYjUwHhcNMjYwMzAyMTUwMDUwWhcNMjYwMzAzMTUwMDUwWjAzMTEwLwYDVQQD
EyhiNGIzZjdjNDk4YjgzZmZiM2JhMDI5NTQ3YmE4MmVjNjE4NTI0YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV79mKmF54DftcTZI9NLFPy4rXyh
A9Y/KtendKjVrbkgtEyIDD3LGUoymXK7THjWR65XdX9rgqcKQRHdLA3iRR3Y84Hz
Q2mDOafzEPtRsaEn/TPuyp9L4Rpg0Vi+kDYrJ0xbi0oKHlW1ZwabuxOBVM80SsDn
9qsxsI+MOH4MF5/X4plG7+faJwKfKThFj9JT2AhjTM8QiNrSiGfAlobPruWiwzNr
D81sq2qKK4xv8rOKtdqZUQquzORDEbQQQMEts2mSvRM/olBrxIP7/Lx0aaPRvJwJ
ajIPx03LcmEwVwvFLs8ohlUagMzGS2UvvGJmSLvPP8mv9PR/CI/BKCukuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSz98SYuD/7O6ApVHuoLsYYUkwmMB8GA1UdIwQY
MBaAFNuhJAVV2GyNveg27dFkzTKPrmO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDkt
NGJlYzhmMWI1OGVlLzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDktNGJlYzhmMWI1OGVl
LzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqpMCBER
aGGYkcibMZyGjf29GH/PkwMZxtVW/8dWyfxMZqR4LGZMGQexyu6HXnhr/Y/aZrbG
1VWu1JQI2vBJ521QrKzlQFHy82niGGskRl5Svptgi0qC7wPvoEPBP2NVorseGcfP
uQSrqv2X5d57fNJ24cErpiJiDHCvp5fk8Be53j3fs2SnJT60pKRjYZpDGqDVUZDa
M1cPSWe6mgLVyx34KsjAMnAdyQXOZeuOt/5HEAB+O3Nnwcg32rkY8XjBBZaHDfwz
bldoXK7Q/5UTsPRKp3YlMMZif1/HAIG8L+xHMCJV/Kpifm9IX31RLTGTTFXSxci9
bhW8EJYeQK88aA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:55 2026 by rpki-client