Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: KEupjgtt4b0A3Wx+KfV+MtSGDIltpKzkN/LpnmYHBt8=
Subject key identifier: C1:82:ED:C7:A3:AC:73:50:06:AD:0D:89:E8:B9:8A:24:D3:64:95:38
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019CABA236723422B4919AB62B0594FD8290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:01:00 +0000
Manifest this update: Sun 01 Mar 2026 23:01:00 +0000
Manifest next update: Mon 02 Mar 2026 23:01:00 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: jHFtKl3GqIOAMupS+N1lAc5oz+S00YSE7ZCQkLfrkAA=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: zFAiybQzQxds72WdUATD8g4BEjw.roa (hash: cy5FFDk0mqzxC2rHBMlzxFOlZHb2KlFrT4hf9F2Oo6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:36:72:34:22:b4:91:9a:b6:2b:05:94:fd:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Mar 1 23:01:00 2026 GMT
Not After : Mar 2 23:01:00 2026 GMT
Subject: CN=c182edc7a3ac735006ad0d89e8b98a24d3649538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:46:1a:64:39:45:69:22:d6:c6:48:a0:d7:
8f:e3:c2:8b:7b:37:45:59:1e:63:72:6f:db:bc:52:
c6:fe:d8:c9:e7:18:1e:a6:24:9e:31:90:39:3d:d4:
51:dc:f6:92:ae:8b:5b:e4:a3:7a:87:4d:c0:04:13:
76:36:71:d5:fe:9b:59:ce:4c:9d:4d:54:72:cf:a7:
22:dd:7e:84:f1:82:9a:7e:5d:03:81:81:8f:bc:d0:
46:67:97:65:59:c3:3e:45:68:99:46:44:8d:81:26:
ee:c6:2a:b6:4c:49:41:df:f4:bf:36:05:70:e9:ce:
ab:00:5f:25:a2:42:97:83:1d:45:1f:94:11:79:68:
7d:b7:93:cd:bf:63:4c:c5:e9:eb:c2:d1:25:d7:cd:
cc:3d:bc:ff:c8:f9:a0:ac:f5:90:25:8e:49:43:5f:
f6:c1:74:a1:d3:14:3a:a3:1d:d2:82:49:02:d9:0f:
c1:5a:c7:53:d8:e2:f8:54:f8:31:cb:71:6d:be:c2:
53:19:89:d7:99:43:66:58:1a:6e:0b:63:5b:0a:59:
1d:cb:bf:b2:0f:b1:7d:ff:c7:2d:67:c1:a5:53:1e:
49:63:07:33:87:08:73:6c:d9:ae:d0:8e:41:e1:1a:
5c:9e:26:68:4e:91:5e:72:f5:db:5c:2d:80:e1:88:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:ED:C7:A3:AC:73:50:06:AD:0D:89:E8:B9:8A:24:D3:64:95:38
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:4f:72:30:3a:27:ad:f5:d8:fa:9c:ce:b0:17:f1:ae:f9:
45:00:ce:9c:40:e8:3c:82:28:09:4d:ff:5f:0b:c3:8a:b1:ff:
a2:30:4a:3c:bb:72:62:a9:ed:83:00:03:05:85:d8:58:91:e5:
11:5c:60:b1:a4:87:a9:d6:2e:77:34:8b:38:28:de:0e:12:5c:
6d:13:22:27:2d:e1:77:e4:61:bc:d8:ca:70:08:e5:e9:99:5e:
26:88:6c:37:96:d8:d8:6e:6f:d4:4d:36:09:39:75:94:33:ba:
c1:5c:c0:fb:a3:03:b8:b7:33:9f:63:c3:e5:cc:bc:00:7f:26:
09:3a:37:e7:ca:44:d0:4d:a2:67:6d:2d:f0:92:d0:7a:a3:dd:
d6:6a:d4:ca:4c:5f:9b:38:1f:49:f8:bc:00:26:4e:99:9c:27:
3c:63:cb:f8:1a:b5:c1:be:3d:54:bc:cb:29:2a:5c:b6:12:70:
e0:0d:77:aa:d6:3f:85:f8:00:e9:9f:d7:02:09:28:3d:9a:ab:
7d:87:45:01:66:ef:74:b0:c2:e9:44:2f:0b:e1:69:d2:bd:e4:
55:28:fc:91:b7:a4:c8:58:8b:c6:35:f4:61:2e:a0:19:7c:82:
cf:67:7e:8f:86:b2:f9:97:ab:6e:0b:59:7c:51:87:da:7a:02:
ba:fe:b1:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojZyNCK0kZq2KwWU/YKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjYwMzAxMjMwMTAwWhcNMjYwMzAyMjMwMTAwWjAzMTEwLwYDVQQD
EyhjMTgyZWRjN2EzYWM3MzUwMDZhZDBkODllOGI5OGEyNGQzNjQ5NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZlGGmQ5RWki1sZIoNeP48KLezdF
WR5jcm/bvFLG/tjJ5xgepiSeMZA5PdRR3PaSrotb5KN6h03ABBN2NnHV/ptZzkyd
TVRyz6ci3X6E8YKafl0DgYGPvNBGZ5dlWcM+RWiZRkSNgSbuxiq2TElB3/S/NgVw
6c6rAF8lokKXgx1FH5QReWh9t5PNv2NMxenrwtEl183MPbz/yPmgrPWQJY5JQ1/2
wXSh0xQ6ox3SgkkC2Q/BWsdT2OL4VPgxy3FtvsJTGYnXmUNmWBpuC2NbClkdy7+y
D7F9/8ctZ8GlUx5JYwczhwhzbNmu0I5B4RpcniZoTpFecvXbXC2A4YgZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGC7cejrHNQBq0Niei5iiTTZJU4MB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmZPcjA6
J6312PqczrAX8a75RQDOnEDoPIIoCU3/XwvDirH/ojBKPLtyYqntgwADBYXYWJHl
EVxgsaSHqdYudzSLOCjeDhJcbRMiJy3hd+RhvNjKcAjl6ZleJohsN5bY2G5v1E02
CTl1lDO6wVzA+6MDuLczn2PD5cy8AH8mCTo358pE0E2iZ20t8JLQeqPd1mrUykxf
mzgfSfi8ACZOmZwnPGPL+Bq1wb49VLzLKSpcthJw4A13qtY/hfgA6Z/XAgkoPZqr
fYdFAWbvdLDC6UQvC+Fp0r3kVSj8kbekyFiLxjX0YS6gGXyCz2d+j4ay+ZerbgtZ
fFGH2noCuv6xzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:53 2026 by rpki-client