Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: LvP+y8TPwkkk+YXoiiykjWVNbPCC63uzkfuP7//bBWU=
Subject key identifier: 3E:69:F7:76:6D:78:F5:A5:0D:60:9C:DC:83:D1:53:77:23:7E:91:8A
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 019CABA23D6E0E637C825B3DD15CA3A9C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: KmlwLu+0q/LLQCKIteFH3AS9qt4ELRcQNQjUnPbLeI4=)
2: VUBqDVSTc9X33Ru22fhohdoill4.roa (hash: xLZ5Laa/gOttFf8mokrurIU7caX1O/u8RDHEevdtn0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3d:6e:0e:63:7c:82:5b:3d:d1:5c:a3:a9:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=3e69f7766d78f5a50d609cdc83d15377237e918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:75:bb:69:44:86:fb:d9:c5:9f:6a:09:73:
99:bf:64:ad:10:e4:8f:c0:f1:70:11:70:22:f9:be:
a8:cb:47:6a:56:a0:47:39:e1:e4:73:7d:8a:b4:89:
3b:ca:c0:9f:3c:a4:d2:d5:6b:d4:bf:60:0c:aa:15:
7f:17:98:d4:37:4f:57:c2:9e:06:be:99:bf:60:ab:
c1:86:7a:74:4d:88:fa:50:70:87:3f:72:d0:d8:40:
b6:55:82:78:15:74:7d:90:01:ef:fa:0e:96:8a:c3:
08:8f:5c:22:c7:32:cf:9a:d9:e1:88:6e:cd:26:39:
8a:34:ac:d2:c5:3e:a2:ae:0c:6c:fd:f5:a2:7c:0a:
c8:03:70:bb:c8:5b:fa:3d:db:4e:22:09:78:59:c5:
8e:7f:57:82:69:93:98:0f:3b:8c:4c:03:50:a1:77:
9a:76:a0:b4:74:5a:1c:f2:b7:e5:28:5d:d0:b2:eb:
50:18:d8:0b:db:99:0e:41:1f:22:ac:80:10:66:b9:
2e:59:29:3e:19:c1:51:78:62:7c:50:92:31:ed:8d:
31:39:5e:33:b7:e1:c3:ee:e9:66:87:c8:fe:84:05:
03:c7:bd:5d:33:bb:73:df:4e:a7:a9:88:6c:37:38:
1e:11:5d:48:b2:a3:51:c1:4d:7d:4f:7c:a4:1b:3a:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:69:F7:76:6D:78:F5:A5:0D:60:9C:DC:83:D1:53:77:23:7E:91:8A
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:14:4f:d0:b6:7e:da:52:57:5d:51:45:3e:c3:3c:38:70:61:
5b:5a:39:4a:06:ae:3d:86:4d:16:e8:b2:8e:bc:6c:c8:4d:8d:
6c:02:ba:6b:82:15:ad:b3:b0:67:34:95:88:b8:fc:fe:b2:64:
dd:85:b2:05:7d:2a:ce:0d:d5:cc:c9:b5:2e:3c:59:be:52:4e:
f7:21:c5:27:b3:1b:bb:c5:83:58:4c:d6:70:85:e1:fc:3e:4c:
0f:0f:00:7d:64:06:99:c0:47:d6:a0:28:59:b1:a1:5d:8a:6c:
6c:cb:bd:fc:a0:3a:bb:8c:41:12:0e:06:8b:03:5b:7f:8c:ae:
ec:93:8f:64:8f:38:45:68:eb:47:9c:a3:4c:21:95:e1:e9:05:
f1:0f:92:fa:4f:a9:b6:6a:87:cd:4a:6e:ff:17:a9:4a:78:68:
40:49:54:fe:2a:49:19:c7:db:82:f0:0f:3a:f1:9d:6c:2c:b5:
94:be:7b:32:0f:0c:9a:8f:48:29:e5:5f:39:e3:1c:d6:83:a1:
3c:f4:3a:39:09:7f:0a:d6:d7:0b:01:32:06:83:93:6b:7e:a8:
98:15:75:93:9f:34:c1:34:89:08:1c:65:29:df:3a:bd:9b:ed:
27:3b:c5:16:94:df:5c:4a:0f:b0:bf:8b:d6:bf:48:31:fa:a4:
3a:89:5e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroj1uDmN8gls90VyjqcY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDdiYmIxZGU2ODA5ZGY3ZjZlNTczZjlhYmI2NGU2MDM2
MTNjYTEwHhcNMjYwMzAxMjMwMTAyWhcNMjYwMzAyMjMwMTAyWjAzMTEwLwYDVQQD
EygzZTY5Zjc3NjZkNzhmNWE1MGQ2MDljZGM4M2QxNTM3NzIzN2U5MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Al1u2lEhvvZxZ9qCXOZv2StEOSP
wPFwEXAi+b6oy0dqVqBHOeHkc32KtIk7ysCfPKTS1WvUv2AMqhV/F5jUN09Xwp4G
vpm/YKvBhnp0TYj6UHCHP3LQ2EC2VYJ4FXR9kAHv+g6WisMIj1wixzLPmtnhiG7N
JjmKNKzSxT6irgxs/fWifArIA3C7yFv6PdtOIgl4WcWOf1eCaZOYDzuMTANQoXea
dqC0dFoc8rflKF3QsutQGNgL25kOQR8irIAQZrkuWSk+GcFReGJ8UJIx7Y0xOV4z
t+HD7ulmh8j+hAUDx71dM7tz306nqYhsNzgeEV1IsqNRwU19T3ykGzo72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5p93ZtePWlDWCc3IPRU3cjfpGKMB8GA1UdIwQY
MBaAFB/Xu7HeaAnff25XP5q7ZOYDYTyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mOGU4MDMtNDFmNS00NjY4LWFmYTUt
ZGIxM2FiYmU0ZTlhLzEvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mOGU4MDMtNDFmNS00NjY4LWFmYTUtZGIxM2FiYmU0ZTlh
LzEvSDllN3NkNW9DZDlfYmxjX21ydGs1Z05oUEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxRP0LZ+
2lJXXVFFPsM8OHBhW1o5SgauPYZNFuiyjrxsyE2NbAK6a4IVrbOwZzSViLj8/rJk
3YWyBX0qzg3VzMm1LjxZvlJO9yHFJ7Mbu8WDWEzWcIXh/D5MDw8AfWQGmcBH1qAo
WbGhXYpsbMu9/KA6u4xBEg4GiwNbf4yu7JOPZI84RWjrR5yjTCGV4ekF8Q+S+k+p
tmqHzUpu/xepSnhoQElU/ipJGcfbgvAPOvGdbCy1lL57Mg8Mmo9IKeVfOeMc1oOh
PPQ6OQl/CtbXCwEyBoOTa36omBV1k580wTSJCBxlKd86vZvtJzvFFpTfXEoPsL+L
1r9IMfqkOole+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:44 2026 by rpki-client