Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File: RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier: BSQzHjN5N+/dl9lCoUkriIc9+3WqHUpO4kO6s58JMcY=
Subject key identifier: 8F:F2:60:BD:38:2F:7D:4C:17:D0:B0:15:28:4A:2F:C0:30:6F:63:53
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial: 019CAAFD2874B9842CBD10BAC6BF4593BA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: KsFaDX5l3Zw9nbqiCxq9QSRzW/hiGrSeFspJ5nn4fow=)
4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:28:74:b9:84:2c:bd:10:ba:c6:bf:45:93:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=8ff260bd382f7d4c17d0b015284a2fc0306f6353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:6e:a9:0a:0e:a9:89:87:f2:3e:d1:9a:6c:
79:5e:6f:c9:bf:68:96:47:9e:f3:1c:11:15:5e:29:
6e:e1:fe:75:bc:af:82:9b:71:8b:5b:f4:90:77:82:
e9:54:e7:ed:0f:0c:5a:3b:3f:e1:37:10:60:99:ea:
67:d0:db:43:37:0b:eb:66:83:a0:da:03:11:c6:9c:
9f:49:5f:19:f1:68:b8:d9:05:cd:28:f8:f2:37:6e:
50:9a:4c:97:a8:00:c3:e8:ff:f4:59:d5:7c:ca:d7:
98:b0:22:d5:73:4a:3d:3a:62:77:81:0c:51:72:3a:
84:39:f9:c6:d0:39:cd:4b:71:8f:4c:68:81:7f:c5:
5d:92:58:fe:b3:1b:aa:cd:7e:e7:f0:37:78:7e:a3:
2e:dd:13:af:f6:ba:b8:5d:64:b7:43:fb:cc:a1:97:
36:43:ad:d0:25:62:9b:cc:01:8e:13:2e:4a:92:bc:
aa:53:6a:bf:bd:99:ee:18:ab:68:3f:cf:9b:11:5d:
49:2d:f8:11:93:7b:e1:06:f1:e2:ac:81:79:0c:44:
c3:d0:5a:c1:c5:27:6d:1e:df:af:55:c8:d7:95:d1:
d5:dd:5c:15:cb:60:c2:76:ff:db:72:ae:d0:e1:ea:
af:65:78:88:34:c0:bf:30:1c:4e:aa:e5:7f:fd:35:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:60:BD:38:2F:7D:4C:17:D0:B0:15:28:4A:2F:C0:30:6F:63:53
X509v3 Authority Key Identifier:
keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:24:f5:95:fc:de:90:51:22:d1:f0:75:2b:74:37:f3:b3:ac:
80:5d:11:94:71:89:7f:cd:99:9e:6f:f9:0d:0d:91:0d:03:46:
ad:b2:ea:c2:fe:31:76:7a:df:c4:87:28:f5:b3:d7:09:e0:0d:
2b:68:57:92:98:d4:ae:7f:61:e8:67:41:47:64:90:b7:ac:69:
3d:39:79:6f:2e:50:87:74:a3:89:62:15:34:34:9b:52:49:54:
98:31:73:bd:38:6d:b1:99:02:1f:4a:75:f9:08:37:8f:74:9e:
5c:e8:12:a6:3b:6a:eb:62:3f:7f:b1:0c:07:fe:8b:eb:39:26:
c0:98:75:15:8f:da:bb:69:53:09:61:05:78:8b:b4:99:2d:5d:
32:4d:8e:b7:69:9b:31:48:ae:31:40:b3:24:a8:51:16:88:39:
95:95:dd:36:90:43:f9:9d:9c:70:99:fc:a1:2b:31:9d:bb:e2:
72:7b:2a:8d:9a:d1:6a:27:62:65:88:1f:d0:0e:01:5a:7c:aa:
1f:d7:68:98:15:19:e5:4c:8a:18:0a:70:84:fa:46:90:ca:44:
0d:8e:76:d4:f7:82:93:22:c5:d7:b5:9c:53:ed:49:3e:b3:46:
31:e8:49:c3:af:cf:a7:d5:65:cc:af:d8:82:42:f1:4c:0b:94:
74:00:3b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Sh0uYQsvRC6xr9Fk7oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjYwMzAxMjAwMDQzWhcNMjYwMzAyMjAwMDQzWjAzMTEwLwYDVQQD
Eyg4ZmYyNjBiZDM4MmY3ZDRjMTdkMGIwMTUyODRhMmZjMDMwNmY2MzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FduqQoOqYmH8j7Rmmx5Xm/Jv2iW
R57zHBEVXilu4f51vK+Cm3GLW/SQd4LpVOftDwxaOz/hNxBgmepn0NtDNwvrZoOg
2gMRxpyfSV8Z8Wi42QXNKPjyN25QmkyXqADD6P/0WdV8yteYsCLVc0o9OmJ3gQxR
cjqEOfnG0DnNS3GPTGiBf8Vdklj+sxuqzX7n8Dd4fqMu3ROv9rq4XWS3Q/vMoZc2
Q63QJWKbzAGOEy5KkryqU2q/vZnuGKtoP8+bEV1JLfgRk3vhBvHirIF5DETD0FrB
xSdtHt+vVcjXldHV3VwVy2DCdv/bcq7Q4eqvZXiINMC/MBxOquV//TXEewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/yYL04L31MF9CwFShKL8Awb2NTMB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyT1lfze
kFEi0fB1K3Q387OsgF0RlHGJf82Znm/5DQ2RDQNGrbLqwv4xdnrfxIco9bPXCeAN
K2hXkpjUrn9h6GdBR2SQt6xpPTl5by5Qh3SjiWIVNDSbUklUmDFzvThtsZkCH0p1
+Qg3j3SeXOgSpjtq62I/f7EMB/6L6zkmwJh1FY/au2lTCWEFeIu0mS1dMk2Ot2mb
MUiuMUCzJKhRFog5lZXdNpBD+Z2ccJn8oSsxnbvicnsqjZrRaidiZYgf0A4BWnyq
H9domBUZ5UyKGApwhPpGkMpEDY521PeCkyLF17WcU+1JPrNGMehJw6/Pp9VlzK/Y
gkLxTAuUdAA72Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:33 2026 by rpki-client