Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: 6Z8EEHlp5eOBXED2eih0H92UwoQ4tZRxVAOfXeAIjLM=
Subject key identifier: E5:2A:43:FE:57:62:04:25:B3:50:9E:98:DB:9A:02:7D:FD:B7:C8:79
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019CAA5865B82D6FDCD91966F895039627DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0B6E
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: nd6r+KztKpfrjG1N7QWJcjiy52ieIGKf7oyqxpTnnKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:65:b8:2d:6f:dc:d9:19:66:f8:95:03:96:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=e52a43fe57620425b3509e98db9a027dfdb7c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:cb:ce:8a:a1:56:74:b3:9b:93:0c:09:c2:
dc:3d:96:fc:2f:fc:de:3b:26:1d:a3:4b:74:60:05:
22:ff:10:3c:b8:f6:6a:8d:2d:21:8b:c9:3c:5f:23:
98:25:ab:7d:f5:e2:ba:cf:4e:a5:25:a7:57:eb:b6:
24:7a:47:0f:c9:c9:26:9b:e2:83:27:22:4e:f7:47:
d8:6f:7a:4f:4e:f9:fb:b4:85:11:90:53:f7:36:e9:
12:38:52:6d:6a:9e:3e:00:83:15:ce:a3:c3:71:55:
b6:6b:34:e3:36:18:4f:6b:95:d7:01:84:c1:c8:cc:
73:4d:48:d7:42:35:1c:13:56:26:b8:cc:84:07:95:
fe:52:e1:0a:b5:67:87:9f:55:c1:13:7d:83:04:87:
e5:0e:c4:9e:7f:86:c7:5d:b8:b3:f4:53:d6:bd:ea:
a8:39:de:fc:87:ee:46:0e:28:64:8d:5b:5b:5f:06:
14:5a:f3:d9:36:f5:b7:0f:04:b1:bb:79:d0:5b:51:
d9:5d:26:a6:29:bd:a5:db:fb:d6:97:ed:e0:1c:db:
8d:dd:44:ec:2e:54:22:b7:08:ae:2d:d6:0b:54:da:
a9:b3:b3:80:79:8f:da:31:ec:d2:8a:69:55:2c:65:
11:62:d2:b5:5f:b8:20:e9:5e:84:18:1a:80:2c:0e:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:43:FE:57:62:04:25:B3:50:9E:98:DB:9A:02:7D:FD:B7:C8:79
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:ad:00:c8:3e:20:c0:8d:ec:06:ef:d4:43:e6:2b:42:5a:
90:ab:7f:31:c5:56:7f:11:3c:ff:78:2f:7d:d9:24:e8:bb:2e:
b1:a1:62:63:52:1b:3b:b3:35:9a:e1:45:17:80:6a:9c:1a:d9:
f3:75:82:8c:8a:de:0b:7f:9c:d8:34:f4:8f:d0:58:fb:17:39:
34:ea:45:65:ce:35:4c:a0:ce:56:d2:f6:46:39:1c:8e:07:8d:
85:ba:c3:f1:b8:05:da:5f:10:7a:09:ba:bb:13:dd:c8:65:ba:
be:92:88:a1:b1:51:f0:60:ba:e3:be:f0:51:ac:1e:9a:8a:92:
ee:b3:68:83:11:9b:d5:11:dc:b1:d5:0b:37:c6:3d:e8:68:71:
87:85:71:63:61:5b:1f:18:e3:93:ea:a6:5f:c5:da:5e:29:90:
3f:12:ff:0d:54:4e:b3:dd:e6:c0:47:be:58:5d:3b:70:e8:ec:
3c:7e:ba:f1:df:d4:c0:bb:0e:6c:6c:35:b6:79:53:9c:9a:72:
3d:2b:ca:25:72:10:94:53:38:97:c8:aa:42:c5:c9:fe:ae:7b:
c8:c6:65:ea:07:6d:52:19:31:ed:6a:3e:50:bc:ff:2f:b7:45:
37:30:f4:9a:6e:49:f9:5c:48:e3:c2:43:43:69:40:c7:dd:ef:
8e:de:dd:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGW4LW/c2Rlm+JUDlifaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZmUzMDU1ZTg3MjkwMDAwZTMyODdmN2FiNTg4MzgwMmE1
YWE2ZGEwHhcNMjYwMzAxMTcwMDQ1WhcNMjYwMzAyMTcwMDQ1WjAzMTEwLwYDVQQD
EyhlNTJhNDNmZTU3NjIwNDI1YjM1MDllOThkYjlhMDI3ZGZkYjdjODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon/LzoqhVnSzm5MMCcLcPZb8L/ze
OyYdo0t0YAUi/xA8uPZqjS0hi8k8XyOYJat99eK6z06lJadX67YkekcPyckmm+KD
JyJO90fYb3pPTvn7tIURkFP3NukSOFJtap4+AIMVzqPDcVW2azTjNhhPa5XXAYTB
yMxzTUjXQjUcE1YmuMyEB5X+UuEKtWeHn1XBE32DBIflDsSef4bHXbiz9FPWveqo
Od78h+5GDihkjVtbXwYUWvPZNvW3DwSxu3nQW1HZXSamKb2l2/vWl+3gHNuN3UTs
LlQitwiuLdYLVNqps7OAeY/aMezSimlVLGURYtK1X7gg6V6EGBqALA5vywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUqQ/5XYgQls1CemNuaAn39t8h5MB8GA1UdIwQY
MBaAFHb+MFXocpAADjKH96tYg4AqWqbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYt
ODRiNTE3NmEyYTRjLzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYtODRiNTE3NmEyYTRj
LzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV62tAMg+
IMCN7Abv1EPmK0JakKt/McVWfxE8/3gvfdkk6LsusaFiY1IbO7M1muFFF4BqnBrZ
83WCjIreC3+c2DT0j9BY+xc5NOpFZc41TKDOVtL2RjkcjgeNhbrD8bgF2l8Qegm6
uxPdyGW6vpKIobFR8GC6477wUawemoqS7rNogxGb1RHcsdULN8Y96Ghxh4VxY2Fb
Hxjjk+qmX8XaXimQPxL/DVROs93mwEe+WF07cOjsPH668d/UwLsObGw1tnlTnJpy
PSvKJXIQlFM4l8iqQsXJ/q57yMZl6gdtUhkx7Wo+ULz/L7dFNzD0mm5J+VxI48JD
Q2lAx93vjt7dyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:05 2026 by rpki-client