Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: cfGjrVkKvTW7Molke6TXdsTUhhTpyjK1mD3BKtjRH8I=
Subject key identifier: FD:D9:44:6C:BF:DC:5F:AE:FB:80:F1:01:AC:65:6F:4D:CB:0F:CD:4E
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019CACB554A2B272E07130F8BEDDE4F9124F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 060F
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: EidwdPMkd2o1E5kWofGUrwijDC+zGCaYmlbAb+wts+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:54:a2:b2:72:e0:71:30:f8:be:dd:e4:f9:12:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=fdd9446cbfdc5faefb80f101ac656f4dcb0fcd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:1b:63:da:3b:c7:6f:b3:07:c1:72:97:aa:
ce:7a:61:32:fe:53:8f:da:c8:ac:05:ff:92:94:53:
4e:e7:da:81:f5:79:4c:84:3c:6d:cc:de:ca:2c:b8:
ae:74:bb:5f:22:ad:6e:6c:c4:5d:6b:af:db:a1:c4:
39:3e:88:14:be:9c:0d:cd:fb:81:bb:3e:8b:ba:90:
dd:33:17:31:aa:ba:1d:a3:62:e1:95:7d:83:bd:b8:
0d:91:82:86:5f:d6:94:3b:95:f4:46:8a:e5:c7:44:
39:59:60:61:96:37:68:81:b1:22:45:cd:52:b1:24:
39:57:ee:5c:39:1e:12:31:f5:9b:41:3f:be:06:be:
c7:dc:2d:77:aa:21:6d:ad:0d:87:e9:39:ad:1f:8b:
48:d8:8c:ea:fc:be:19:b8:be:ff:58:83:bb:72:4c:
13:c6:3f:44:55:00:ce:a8:d0:e6:d8:4b:5c:64:c5:
fb:fa:95:ff:1c:88:e1:4c:68:5d:09:4f:c8:f6:dd:
b9:9b:41:5a:84:74:49:e2:49:44:03:ba:c0:67:6d:
26:c5:2b:59:19:71:77:33:ce:bb:a8:79:f2:83:f5:
4f:8d:8e:b5:f4:d1:cb:41:52:4b:2a:8e:3e:32:b4:
32:e2:4e:f2:b9:53:a2:85:9d:b7:dc:2b:3b:dd:c1:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:44:6C:BF:DC:5F:AE:FB:80:F1:01:AC:65:6F:4D:CB:0F:CD:4E
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:73:62:65:ca:05:6c:5d:f8:28:31:8b:e2:15:c0:8d:1e:8f:
e3:e9:fd:24:9a:47:71:ed:9a:f6:77:8c:fb:b9:f2:de:6c:5b:
57:9a:b0:de:51:20:84:5f:f5:52:c8:fa:30:ab:64:ff:25:37:
9b:d7:ff:1b:cf:32:6c:88:7f:6f:65:21:f1:6b:92:92:fd:c5:
82:79:eb:7d:dc:b9:05:41:43:c2:1e:0b:68:22:de:11:d6:bb:
e4:ee:27:16:a9:9d:bd:fd:60:62:af:17:17:9a:42:04:1e:06:
63:5b:1e:55:d2:25:21:72:3b:ae:ad:5d:8e:8e:36:b1:80:1b:
ea:a9:a9:42:08:39:36:26:ad:54:a8:fb:6b:99:b1:5f:87:dd:
8b:45:c8:98:f1:e9:86:22:93:92:53:67:da:55:15:27:d1:a1:
f3:44:23:cc:86:a0:a9:d5:2f:8c:09:13:9a:64:52:10:fa:fc:
b1:49:fc:f1:3a:60:06:b6:95:09:93:36:2e:76:9c:01:08:ed:
36:af:e5:59:dd:6e:88:b0:c9:f3:61:fd:0c:0c:27:4f:ae:f8:
51:b0:a5:79:57:92:b4:59:ba:13:41:e4:7a:60:62:00:15:fb:
12:de:b1:db:eb:21:64:fd:c3:5c:c1:76:f1:ce:e3:a6:f0:fa:
d9:3c:b3:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystVSisnLgcTD4vt3k+RJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjYwMzAyMDQwMTMwWhcNMjYwMzAzMDQwMTMwWjAzMTEwLwYDVQQD
EyhmZGQ5NDQ2Y2JmZGM1ZmFlZmI4MGYxMDFhYzY1NmY0ZGNiMGZjZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6QbY9o7x2+zB8Fyl6rOemEy/lOP
2sisBf+SlFNO59qB9XlMhDxtzN7KLLiudLtfIq1ubMRda6/bocQ5PogUvpwNzfuB
uz6LupDdMxcxqrodo2LhlX2DvbgNkYKGX9aUO5X0Rorlx0Q5WWBhljdogbEiRc1S
sSQ5V+5cOR4SMfWbQT++Br7H3C13qiFtrQ2H6TmtH4tI2Izq/L4ZuL7/WIO7ckwT
xj9EVQDOqNDm2EtcZMX7+pX/HIjhTGhdCU/I9t25m0FahHRJ4klEA7rAZ20mxStZ
GXF3M867qHnyg/VPjY619NHLQVJLKo4+MrQy4k7yuVOihZ233Cs73cFkjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3ZRGy/3F+u+4DxAaxlb03LD81OMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnNiZcoF
bF34KDGL4hXAjR6P4+n9JJpHce2a9neM+7ny3mxbV5qw3lEghF/1Usj6MKtk/yU3
m9f/G88ybIh/b2Uh8WuSkv3Fgnnrfdy5BUFDwh4LaCLeEda75O4nFqmdvf1gYq8X
F5pCBB4GY1seVdIlIXI7rq1djo42sYAb6qmpQgg5NiatVKj7a5mxX4fdi0XImPHp
hiKTklNn2lUVJ9Gh80QjzIagqdUvjAkTmmRSEPr8sUn88TpgBraVCZM2LnacAQjt
Nq/lWd1uiLDJ82H9DAwnT674UbCleVeStFm6E0HkemBiABX7Et6x2+shZP3DXMF2
8c7jpvD62TyzJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:41 2026 by rpki-client