Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: kgq4/TmnXzJ2t3nJHa7/AeTL5cktrLR2dEo3U5DDHBY=
Subject key identifier: B7:19:E8:B5:E8:11:25:2A:41:5E:E9:8E:37:F2:F0:1E:49:D4:2E:3D
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019CAEDA5C86096AA67CCDB56A5C027F8BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0DA7
Signing time: Mon 02 Mar 2026 14:01:11 +0000
Manifest this update: Mon 02 Mar 2026 14:01:11 +0000
Manifest next update: Tue 03 Mar 2026 14:01:11 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: 9XZmJ7ffL7RetgwJO1nbH7EBcz0KT0tyevdcUoQ3q9s=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:5c:86:09:6a:a6:7c:cd:b5:6a:5c:02:7f:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Mar 2 14:01:11 2026 GMT
Not After : Mar 3 14:01:11 2026 GMT
Subject: CN=b719e8b5e811252a415ee98e37f2f01e49d42e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:96:82:42:71:65:7d:12:8d:31:d4:b7:ec:
5c:c6:e4:da:94:1a:d1:77:95:c8:65:ce:c2:77:ff:
71:0a:09:21:12:19:98:8b:a2:c3:3d:81:e9:d1:49:
b7:da:f6:ca:50:62:b6:a7:14:bd:62:4d:a5:3e:b6:
3e:f6:7d:d4:ae:18:b0:90:f3:d8:8a:ce:c4:42:e2:
80:7f:27:22:53:65:b2:a7:f0:43:7f:c9:7a:5e:bd:
ca:24:ea:d4:6f:5b:49:af:dd:e5:f3:b4:c0:45:d3:
1e:c7:e9:49:49:0f:27:08:9e:99:3b:2a:e1:ef:5a:
7b:92:a0:58:54:dd:08:d3:b1:4a:7c:8e:3e:a9:d7:
9e:ef:77:0a:cf:26:4a:85:21:c8:04:4a:e9:eb:b3:
53:81:18:f1:6b:f5:86:9e:6c:1a:7c:15:8b:27:16:
39:a1:61:79:bb:02:15:e3:d1:06:b6:e8:49:84:0e:
89:f6:1e:46:bc:24:89:53:9b:f4:0c:66:8e:93:93:
20:1f:1d:be:1e:53:79:7d:d3:c9:fa:4a:96:ce:a1:
92:b1:48:23:44:0b:83:f6:26:3e:e0:70:35:55:40:
90:90:62:ba:7b:f6:42:00:b9:2c:4e:c5:9e:63:49:
f4:6d:6d:7a:3b:e8:84:c3:ef:c1:84:c8:22:79:13:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:E8:B5:E8:11:25:2A:41:5E:E9:8E:37:F2:F0:1E:49:D4:2E:3D
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:50:ca:71:93:7e:00:8b:30:d1:a5:02:18:bc:21:2c:b9:13:
49:ed:ae:51:b7:f2:f7:84:08:e5:ed:05:a3:02:13:e4:60:ed:
5a:8a:7d:26:b1:17:4b:fe:44:95:80:5c:47:f8:1b:21:aa:1e:
e9:ac:50:ef:48:67:c5:aa:8e:8d:11:46:df:40:8e:6e:96:7c:
04:3d:dc:fa:29:a8:5e:8e:61:d8:3b:36:90:ee:75:ff:92:cf:
0c:48:9c:30:59:50:c9:4e:67:78:50:6e:55:ef:22:e4:66:9a:
9f:6d:82:b9:12:03:de:8a:b1:54:2f:48:ed:c7:a0:24:4e:17:
44:0a:5b:29:03:16:ec:e8:e2:d8:70:43:cd:07:c2:18:c7:b8:
64:90:e2:79:d2:16:9e:11:8f:a7:94:bd:e8:95:37:65:26:43:
c0:09:b1:8e:19:6e:5c:69:2e:8c:41:c4:8f:93:3a:b4:6c:06:
80:59:ef:8f:95:7c:80:8f:65:38:40:57:13:4d:9c:68:4b:07:
bd:20:7d:db:9d:d2:34:ee:95:51:21:e1:82:6d:f0:d7:b1:cb:
a0:d0:33:c1:9d:08:fb:c6:50:1b:3f:2b:7d:37:3e:9b:2f:68:
56:f1:8a:c4:2d:0a:e2:5a:73:c5:b0:aa:0a:fd:e0:77:98:1a:
ba:7a:02:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2lyGCWqmfM21alwCf4v8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw
MTUwZWIwHhcNMjYwMzAyMTQwMTExWhcNMjYwMzAzMTQwMTExWjAzMTEwLwYDVQQD
EyhiNzE5ZThiNWU4MTEyNTJhNDE1ZWU5OGUzN2YyZjAxZTQ5ZDQyZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DyWgkJxZX0SjTHUt+xcxuTalBrR
d5XIZc7Cd/9xCgkhEhmYi6LDPYHp0Um32vbKUGK2pxS9Yk2lPrY+9n3UrhiwkPPY
is7EQuKAfyciU2Wyp/BDf8l6Xr3KJOrUb1tJr93l87TARdMex+lJSQ8nCJ6ZOyrh
71p7kqBYVN0I07FKfI4+qdee73cKzyZKhSHIBErp67NTgRjxa/WGnmwafBWLJxY5
oWF5uwIV49EGtuhJhA6J9h5GvCSJU5v0DGaOk5MgHx2+HlN5fdPJ+kqWzqGSsUgj
RAuD9iY+4HA1VUCQkGK6e/ZCALksTsWeY0n0bW16O+iEw+/BhMgieRMipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcZ6LXoESUqQV7pjjfy8B5J1C49MB8GA1UdIwQY
MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt
YWU5MWU0NjYyZDkzLzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz
LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFDKcZN+
AIsw0aUCGLwhLLkTSe2uUbfy94QI5e0FowIT5GDtWop9JrEXS/5ElYBcR/gbIaoe
6axQ70hnxaqOjRFG30CObpZ8BD3c+imoXo5h2Ds2kO51/5LPDEicMFlQyU5neFBu
Ve8i5Gaan22CuRID3oqxVC9I7cegJE4XRApbKQMW7Oji2HBDzQfCGMe4ZJDiedIW
nhGPp5S96JU3ZSZDwAmxjhluXGkujEHEj5M6tGwGgFnvj5V8gI9lOEBXE02caEsH
vSB9253SNO6VUSHhgm3w17HLoNAzwZ0I+8ZQGz8rfTc+my9oVvGKxC0K4lpzxbCq
Cv3gd5gaunoCmw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:59 2026 by rpki-client