Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: MUzOPa3SLoA3I1YFvLfxCCamn3w3i9jVQtOcPrWU0FA=
Subject key identifier: A6:D7:34:5A:16:F0:E3:D6:5B:67:02:F6:47:96:45:84:E1:27:43:48
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019CAB6C01D7B01EAFC7C28FDF41CE6E775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:48 +0000
Manifest this update: Sun 01 Mar 2026 22:01:48 +0000
Manifest next update: Mon 02 Mar 2026 22:01:48 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: BSoiz6hinepN2rxgHviAtG0GNrO+E5shgFVSNIWxIwk=)
2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6c:01:d7:b0:1e:af:c7:c2:8f:df:41:ce:6e:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Mar 1 22:01:48 2026 GMT
Not After : Mar 2 22:01:48 2026 GMT
Subject: CN=a6d7345a16f0e3d65b6702f647964584e1274348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:58:e6:b1:db:b1:a1:1c:9b:e0:b4:c1:cb:
03:c8:db:34:56:11:71:77:a0:99:61:26:48:94:29:
fc:16:d7:b2:2d:dc:0e:78:f3:0e:a3:28:fc:25:84:
c3:95:70:c0:73:68:53:fe:8e:eb:d0:d8:f1:3d:21:
9d:40:08:25:3c:a9:d2:72:a9:ba:1f:a1:de:f3:4b:
eb:63:d2:5d:21:86:e0:e4:4f:9c:df:e5:d2:08:8f:
26:5c:6e:0b:05:fe:d9:11:c3:18:56:c3:c0:70:ee:
81:a5:c5:25:3c:b4:34:11:ea:dc:fc:25:42:99:49:
de:4c:6c:80:c6:d1:80:fb:da:92:7d:32:cc:c4:2d:
37:de:73:e5:ee:41:15:a6:40:c6:06:df:d6:b3:9d:
0d:2f:dd:03:94:37:34:13:9b:61:04:6f:67:2b:6b:
ce:9b:86:68:38:62:70:d5:38:57:12:b0:04:f9:6f:
5f:db:ae:d9:30:45:30:85:65:57:d6:ba:ab:e9:8d:
f0:0e:38:65:d7:b1:34:7d:e7:57:42:1d:a8:5a:6e:
87:62:d4:bf:d1:db:21:9c:99:7b:cb:5f:3c:25:7f:
61:b3:0b:9c:14:92:bf:b3:0f:13:6c:ad:d3:ec:51:
28:44:a9:2e:56:47:7e:38:39:83:68:6e:32:a5:e3:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:34:5A:16:F0:E3:D6:5B:67:02:F6:47:96:45:84:E1:27:43:48
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:c9:0f:7e:83:bb:3a:16:5e:31:7f:37:0f:55:f2:8e:33:
20:f3:24:04:0a:1e:ad:82:9e:46:2a:c5:da:c3:10:f4:a5:0f:
07:b7:90:8c:f5:b7:78:f3:32:ff:10:af:37:48:35:24:c8:ba:
4a:7a:d5:80:c7:10:8e:cb:30:ba:c9:41:d9:d4:24:a8:d1:28:
3c:54:e0:98:08:b4:43:fa:6e:2d:bc:51:54:1e:c6:32:ae:5b:
a5:01:bf:96:9c:3e:a1:98:59:80:aa:50:fc:c9:61:bc:ff:cf:
1c:3d:7a:d8:98:d7:47:43:c0:c8:be:77:d1:cc:3f:c4:cb:22:
31:c2:d3:84:c1:bb:2c:d1:c1:97:8a:21:3c:72:9e:cf:94:87:
80:3f:7d:95:68:34:10:4a:93:1c:f8:0d:76:8a:44:36:ce:4f:
35:4b:f1:c4:cf:ce:e7:ae:ba:e5:dc:69:19:fb:8d:da:ab:a2:
b1:83:7b:5f:68:3c:e5:1b:b0:79:ab:4f:60:af:91:b0:99:45:
42:b0:80:98:b2:38:e2:c0:4d:21:11:e9:85:e7:e1:11:eb:03:
50:05:87:e4:20:9c:4e:25:91:56:da:12:81:97:7e:17:b5:2d:
b1:ec:3f:d6:eb:71:b8:1b:1b:f2:b2:4a:ef:9f:29:1f:c5:c4:
64:f7:2d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrbAHXsB6vx8KP30HObndbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5
MTkzNjgwHhcNMjYwMzAxMjIwMTQ4WhcNMjYwMzAyMjIwMTQ4WjAzMTEwLwYDVQQD
EyhhNmQ3MzQ1YTE2ZjBlM2Q2NWI2NzAyZjY0Nzk2NDU4NGUxMjc0MzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphFY5rHbsaEcm+C0wcsDyNs0VhFx
d6CZYSZIlCn8FteyLdwOePMOoyj8JYTDlXDAc2hT/o7r0NjxPSGdQAglPKnScqm6
H6He80vrY9JdIYbg5E+c3+XSCI8mXG4LBf7ZEcMYVsPAcO6BpcUlPLQ0Eerc/CVC
mUneTGyAxtGA+9qSfTLMxC033nPl7kEVpkDGBt/Ws50NL90DlDc0E5thBG9nK2vO
m4ZoOGJw1ThXErAE+W9f267ZMEUwhWVX1rqr6Y3wDjhl17E0fedXQh2oWm6HYtS/
0dshnJl7y188JX9hswucFJK/sw8TbK3T7FEoRKkuVkd+ODmDaG4ypeNG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbXNFoW8OPWW2cC9keWRYThJ0NIMB8GA1UdIwQY
MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt
MDI3OGM1ZGMxNDkxLzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx
LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+DJD36D
uzoWXjF/Nw9V8o4zIPMkBAoerYKeRirF2sMQ9KUPB7eQjPW3ePMy/xCvN0g1JMi6
SnrVgMcQjsswuslB2dQkqNEoPFTgmAi0Q/puLbxRVB7GMq5bpQG/lpw+oZhZgKpQ
/MlhvP/PHD162JjXR0PAyL530cw/xMsiMcLThMG7LNHBl4ohPHKez5SHgD99lWg0
EEqTHPgNdopENs5PNUvxxM/O56665dxpGfuN2quisYN7X2g85RuweatPYK+RsJlF
QrCAmLI44sBNIRHphefhEesDUAWH5CCcTiWRVtoSgZd+F7Utsew/1utxuBsb8rJK
758pH8XEZPctww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:59 2026 by rpki-client