Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: zYpsLKrRuAaziGbtwFa15rrk2aL18seilyCXBJVsmo8=
Subject key identifier: 0C:AF:9F:9A:17:50:C6:74:CA:14:8D:CD:1C:D1:AF:DD:E9:54:18:DB
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019CAC7E0269D90570EB228B4A29F8839FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: FTR9pjUUB70nyJeF384G4IGUH5H8r7VwdWRiPaVkE94=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:02:69:d9:05:70:eb:22:8b:4a:29:f8:83:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=0caf9f9a1750c674ca148dcd1cd1afdde95418db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:fd:6c:c4:3b:38:89:c4:8e:db:52:74:53:
2b:c6:ec:f2:f0:4a:4e:31:da:90:2c:83:45:ce:03:
d9:ac:a5:d0:d4:e6:58:05:35:50:8d:37:81:46:31:
2f:cd:23:b2:b2:7e:b5:6a:ac:d7:2c:34:83:fc:36:
2f:fb:8b:0f:a7:4e:88:bb:2d:2b:37:21:81:cb:0a:
c9:86:c5:2e:87:ae:0d:43:1b:36:08:07:54:28:f1:
77:f1:bd:4e:49:fa:86:83:95:5d:9f:d5:c4:af:b6:
8f:de:3c:c3:d9:43:6d:78:07:c1:3d:4f:81:3b:a3:
91:20:f1:57:b3:4f:24:ce:f9:28:1e:a8:7b:46:0b:
0e:47:9d:dc:35:b5:94:5b:48:47:7a:26:2e:9b:f3:
c4:7c:b9:f6:83:cf:01:50:e6:a3:d9:60:7c:77:31:
9c:50:b1:af:5c:b3:c3:2c:98:1a:e1:11:e1:16:75:
ab:72:9d:aa:26:b9:dc:28:d0:e0:ae:91:bb:2f:42:
a6:1f:da:7e:99:6a:58:e9:cd:a4:f2:8b:27:52:de:
e1:ed:fc:6b:75:c0:76:4c:10:90:69:1b:c5:2c:d0:
da:83:36:2a:32:04:4f:21:54:7d:b2:d0:ae:fc:4f:
b5:75:30:5d:09:22:77:72:4c:af:78:ec:c1:e1:0e:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AF:9F:9A:17:50:C6:74:CA:14:8D:CD:1C:D1:AF:DD:E9:54:18:DB
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:97:99:4a:92:a4:27:b5:0e:49:83:96:b0:1a:b2:60:bd:
09:6a:55:97:38:7a:b0:1d:71:71:87:ba:6c:46:0c:26:e3:cf:
e9:39:85:fd:e3:d4:40:9a:8f:ce:45:62:bb:0f:f9:12:a9:35:
10:ec:47:27:84:70:71:78:11:36:95:08:fd:b2:54:79:dc:6a:
b9:6f:91:61:b6:df:e1:57:13:b8:98:b9:0f:8c:7e:68:89:81:
60:c7:04:4d:35:3c:15:e5:cd:ce:82:6a:c9:78:d4:81:c8:db:
98:6c:52:e3:ad:10:47:34:87:b3:8d:17:66:cf:e9:ee:d6:7f:
6a:76:7d:5e:8c:a7:5e:af:15:bf:44:60:b2:66:e6:a2:36:10:
cd:0d:f6:b0:6d:f1:06:3a:a6:9b:03:61:37:da:25:ec:e0:89:
20:a3:e0:bf:52:c2:bf:32:95:07:fd:d1:1d:7c:6b:f6:1d:77:
36:da:97:35:22:9a:69:05:0d:03:63:c5:84:73:61:18:6e:08:
80:40:e3:29:6f:95:fa:ac:ab:50:f5:77:f9:a6:13:f7:75:50:
3a:51:38:4b:bc:3f:0f:9c:d0:10:fe:22:b2:1a:8d:1d:46:1d:
f5:b8:56:91:55:65:95:f9:a3:f4:be:c3:42:fe:50:64:15:96:
6b:eb:29:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgJp2QVw6yKLSin4g5+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy
YjcyM2IwHhcNMjYwMzAyMDMwMTA1WhcNMjYwMzAzMDMwMTA1WjAzMTEwLwYDVQQD
EygwY2FmOWY5YTE3NTBjNjc0Y2ExNDhkY2QxY2QxYWZkZGU5NTQxOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk79bMQ7OInEjttSdFMrxuzy8EpO
MdqQLINFzgPZrKXQ1OZYBTVQjTeBRjEvzSOysn61aqzXLDSD/DYv+4sPp06Iuy0r
NyGBywrJhsUuh64NQxs2CAdUKPF38b1OSfqGg5Vdn9XEr7aP3jzD2UNteAfBPU+B
O6ORIPFXs08kzvkoHqh7RgsOR53cNbWUW0hHeiYum/PEfLn2g88BUOaj2WB8dzGc
ULGvXLPDLJga4RHhFnWrcp2qJrncKNDgrpG7L0KmH9p+mWpY6c2k8osnUt7h7fxr
dcB2TBCQaRvFLNDagzYqMgRPIVR9stCu/E+1dTBdCSJ3ckyveOzB4Q75bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyvn5oXUMZ0yhSNzRzRr93pVBjbMB8GA1UdIwQY
MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt
OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy
LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTiXmUqS
pCe1DkmDlrAasmC9CWpVlzh6sB1xcYe6bEYMJuPP6TmF/ePUQJqPzkViuw/5Eqk1
EOxHJ4RwcXgRNpUI/bJUedxquW+RYbbf4VcTuJi5D4x+aImBYMcETTU8FeXNzoJq
yXjUgcjbmGxS460QRzSHs40XZs/p7tZ/anZ9XoynXq8Vv0RgsmbmojYQzQ32sG3x
BjqmmwNhN9ol7OCJIKPgv1LCvzKVB/3RHXxr9h13NtqXNSKaaQUNA2PFhHNhGG4I
gEDjKW+V+qyrUPV3+aYT93VQOlE4S7w/D5zQEP4ishqNHUYd9bhWkVVllfmj9L7D
Qv5QZBWWa+sp5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:09 2026 by rpki-client