Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: fuJXHG8OubBhOU9ar5+kgRZG3LUDITamTI2xdh409mU=
Subject key identifier: F9:1D:EE:95:43:C3:04:D2:53:33:45:D2:EB:54:FD:8E:C6:6B:96:0A
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019CAD5A41D69819D824E3641162B63EF40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:39 +0000
Manifest this update: Mon 02 Mar 2026 07:01:39 +0000
Manifest next update: Tue 03 Mar 2026 07:01:39 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: QswyVebRnEpbEsaKbU1HJuIyofh7j4Ov2zfs5OyMGFc=)
2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:41:d6:98:19:d8:24:e3:64:11:62:b6:3e:f4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Mar 2 07:01:39 2026 GMT
Not After : Mar 3 07:01:39 2026 GMT
Subject: CN=f91dee9543c304d2533345d2eb54fd8ec66b960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:5a:67:18:b4:83:f2:02:77:c6:51:88:da:
cf:d9:75:97:f3:60:cd:f7:27:75:5f:f5:e3:72:6d:
0b:73:09:b6:d3:dc:33:81:f2:43:96:ff:ee:08:c5:
56:e0:dc:a0:97:ff:13:fd:0a:4b:67:60:fd:8f:ca:
1c:8d:58:73:d6:50:8a:37:34:e3:c4:96:1c:56:3a:
a0:63:dc:20:f9:ca:5e:35:35:a0:24:36:a2:2b:c1:
82:01:f6:90:3e:28:e9:9c:0b:e0:d3:97:a9:8c:52:
33:15:c4:2d:2d:89:39:02:ec:4f:2b:1b:8d:13:9b:
9d:82:35:81:5d:7e:b6:cd:0a:b4:e1:52:f9:e5:56:
86:51:e2:48:05:78:c1:b2:5a:5a:ed:74:86:60:5d:
71:6a:d4:13:84:10:6c:c1:4c:03:73:bf:a5:a0:e6:
e5:b2:56:d7:96:c6:d0:80:b0:fa:64:bf:90:ac:fb:
f3:14:44:4c:b2:a7:9d:a4:7e:30:c8:cd:e7:3b:05:
8a:a2:35:a3:35:33:0b:c6:d1:58:11:0e:96:8f:a5:
4b:c7:7d:bc:39:fd:35:96:ba:d3:a8:f1:29:f2:cd:
70:71:0e:72:f4:d1:4c:60:52:75:52:b9:29:74:c0:
ba:ea:53:ba:40:e1:7f:dc:97:82:bf:a5:3f:5e:9c:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:EE:95:43:C3:04:D2:53:33:45:D2:EB:54:FD:8E:C6:6B:96:0A
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:00:ff:cd:cc:57:10:fc:c5:fe:ff:5c:d1:34:62:73:b9:97:
6b:9d:44:31:88:e4:b5:8f:5b:f3:64:12:34:ea:86:10:66:29:
15:30:c6:66:12:33:37:7c:32:c4:f1:5d:32:32:ea:ea:37:07:
b9:b4:ef:86:ec:fe:e1:94:7b:29:45:9f:9c:b3:77:f9:a0:c2:
86:77:b9:fd:1b:98:22:47:81:53:c0:a6:46:cf:eb:db:d3:b4:
db:dc:62:17:d5:50:ee:1d:e7:38:56:64:8b:98:a5:f2:39:d5:
3e:83:c4:fc:ef:b8:e0:cf:f3:98:58:a0:e5:cf:be:7a:52:a2:
b4:0e:ec:19:1e:7b:a5:ed:7b:6b:26:df:90:2e:8d:ad:4b:b6:
40:48:86:a1:0b:d2:60:b6:a7:d3:c5:01:2a:28:59:4a:b3:0e:
5c:c7:b6:06:f8:7e:46:c6:f1:e7:4c:60:f3:fe:e7:25:39:57:
69:a3:fc:c1:39:d5:cd:28:d8:a2:04:58:7b:47:8a:26:73:d8:
44:23:8b:c6:19:a3:3b:86:6f:bc:51:23:e5:bc:6a:16:d8:53:
c5:91:82:f3:fb:7a:00:6f:3a:27:b9:e2:bb:6c:e7:21:49:a0:
51:2c:29:ce:28:38:b3:18:fe:50:c6:67:5c:27:b9:88:d5:d7:
8a:f4:3b:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWkHWmBnYJONkEWK2PvQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5
MTkzNjgwHhcNMjYwMzAyMDcwMTM5WhcNMjYwMzAzMDcwMTM5WjAzMTEwLwYDVQQD
EyhmOTFkZWU5NTQzYzMwNGQyNTMzMzQ1ZDJlYjU0ZmQ4ZWM2NmI5NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYpaZxi0g/ICd8ZRiNrP2XWX82DN
9yd1X/Xjcm0Lcwm209wzgfJDlv/uCMVW4Nygl/8T/QpLZ2D9j8ocjVhz1lCKNzTj
xJYcVjqgY9wg+cpeNTWgJDaiK8GCAfaQPijpnAvg05epjFIzFcQtLYk5AuxPKxuN
E5udgjWBXX62zQq04VL55VaGUeJIBXjBslpa7XSGYF1xatQThBBswUwDc7+loObl
slbXlsbQgLD6ZL+QrPvzFERMsqedpH4wyM3nOwWKojWjNTMLxtFYEQ6Wj6VLx328
Of01lrrTqPEp8s1wcQ5y9NFMYFJ1UrkpdMC66lO6QOF/3JeCv6U/XpxRaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkd7pVDwwTSUzNF0utU/Y7Ga5YKMB8GA1UdIwQY
MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt
MDI3OGM1ZGMxNDkxLzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx
LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAD/zcxX
EPzF/v9c0TRic7mXa51EMYjktY9b82QSNOqGEGYpFTDGZhIzN3wyxPFdMjLq6jcH
ubTvhuz+4ZR7KUWfnLN3+aDChne5/RuYIkeBU8CmRs/r29O029xiF9VQ7h3nOFZk
i5il8jnVPoPE/O+44M/zmFig5c++elKitA7sGR57pe17aybfkC6NrUu2QEiGoQvS
YLan08UBKihZSrMOXMe2Bvh+Rsbx50xg8/7nJTlXaaP8wTnVzSjYogRYe0eKJnPY
RCOLxhmjO4ZvvFEj5bxqFthTxZGC8/t6AG86J7niu2znIUmgUSwpzig4sxj+UMZn
XCe5iNXXivQ7fw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:45 2026 by rpki-client