Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: Z+06QS9TAHtkn8VioJaQBKyExlHl3WK62RzhjyCpj9g=
Subject key identifier: 45:AF:DC:40:68:81:EB:D5:20:D8:D7:3B:D0:1C:07:35:9E:41:59:B8
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019CAAC6EEEB8BC05966EED3409F40170F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:29 +0000
Manifest this update: Sun 01 Mar 2026 19:01:29 +0000
Manifest next update: Mon 02 Mar 2026 19:01:29 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: 7VbGmTSAK5rQWGWgl58GEhkrYs8wLxZtCPmW538o/0s=)
2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ee:eb:8b:c0:59:66:ee:d3:40:9f:40:17:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Mar 1 19:01:29 2026 GMT
Not After : Mar 2 19:01:29 2026 GMT
Subject: CN=45afdc406881ebd520d8d73bd01c07359e4159b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:c3:18:cf:3b:af:6b:9d:39:26:3a:a2:04:
06:67:83:22:18:d0:8a:8e:d9:22:d7:7e:86:32:e3:
59:19:e3:0b:21:ba:ab:64:9e:92:a1:a3:de:bb:d7:
ed:41:4c:f6:51:7c:2f:29:1e:58:0d:aa:b1:15:3c:
c5:a4:dd:94:a1:87:4c:14:71:5e:ff:2e:0f:04:6d:
48:33:73:4e:8d:2f:59:ac:27:7c:6f:e8:26:1e:68:
28:88:77:ba:cd:dd:3d:51:85:b3:16:fa:aa:67:28:
88:26:90:78:fc:8d:39:10:62:78:50:c8:0b:bf:49:
b5:32:9d:75:d0:6a:09:3d:ac:b7:0c:de:4b:fd:cd:
2f:3c:a8:0e:83:46:4b:fc:ab:ab:88:3c:95:22:d1:
b5:eb:00:b1:6f:a3:8b:e7:f4:7d:cc:40:fe:1f:8d:
0e:a8:ad:dd:70:14:0a:44:b3:22:b2:48:ce:a1:ee:
b0:3c:e1:19:e8:11:10:30:c8:af:0d:a5:60:bc:e5:
55:5b:42:c1:e8:77:88:eb:b0:74:10:c0:74:a7:77:
1b:ca:6a:7f:50:ad:01:04:e0:59:78:ef:0b:39:a1:
69:ea:ef:89:66:ea:f7:69:dc:cf:4d:b6:e0:ce:56:
ad:83:d5:2f:f0:28:56:06:24:aa:b9:7f:b6:20:e1:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:DC:40:68:81:EB:D5:20:D8:D7:3B:D0:1C:07:35:9E:41:59:B8
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:19:90:38:f6:0c:74:8e:07:dc:19:b2:b4:fc:4a:00:ff:e2:
23:cd:a0:64:82:30:62:e1:e8:7b:07:73:8e:ca:57:69:9a:41:
3e:44:3a:a7:86:cc:b7:15:c8:05:e3:13:36:a8:19:4d:6d:e4:
b9:94:f7:a1:cd:28:58:39:0e:46:86:ae:89:1d:fd:fc:de:09:
c7:58:d6:5f:c9:9b:39:eb:79:7e:42:69:e0:35:3b:8c:02:57:
b0:a3:7f:96:9f:a3:9b:24:a8:7f:a2:9a:d4:0c:da:b1:58:ca:
13:b5:30:33:e6:9c:e7:7e:91:30:b7:a1:31:96:28:5f:95:89:
5a:55:80:bc:41:ee:e1:5f:19:5a:9b:41:cd:d6:32:a7:6c:41:
c1:3f:03:e0:c0:42:3d:a5:35:e0:56:f6:33:89:a7:9d:78:13:
2c:01:18:d3:72:39:84:e3:11:66:2e:cb:b4:d5:30:71:04:45:
32:19:47:02:53:1f:5f:e1:f0:c0:e5:2c:26:16:55:18:60:28:
cb:79:b7:4a:d9:c7:8e:a2:d9:6c:14:a9:e6:5f:7e:0a:b7:6c:
42:ce:53:9d:52:30:34:cd:c5:64:d6:5a:21:34:1c:9d:6d:5e:
fc:fb:12:87:ad:a6:a6:68:3c:9e:e0:2b:eb:92:1d:ff:99:ab:
4c:80:cd:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxu7ri8BZZu7TQJ9AFw8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy
ZWE3NTYwHhcNMjYwMzAxMTkwMTI5WhcNMjYwMzAyMTkwMTI5WjAzMTEwLwYDVQQD
Eyg0NWFmZGM0MDY4ODFlYmQ1MjBkOGQ3M2JkMDFjMDczNTllNDE1OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnDDGM87r2udOSY6ogQGZ4MiGNCK
jtki136GMuNZGeMLIbqrZJ6SoaPeu9ftQUz2UXwvKR5YDaqxFTzFpN2UoYdMFHFe
/y4PBG1IM3NOjS9ZrCd8b+gmHmgoiHe6zd09UYWzFvqqZyiIJpB4/I05EGJ4UMgL
v0m1Mp110GoJPay3DN5L/c0vPKgOg0ZL/KuriDyVItG16wCxb6OL5/R9zED+H40O
qK3dcBQKRLMiskjOoe6wPOEZ6BEQMMivDaVgvOVVW0LB6HeI67B0EMB0p3cbymp/
UK0BBOBZeO8LOaFp6u+JZur3adzPTbbgzlatg9Uv8ChWBiSquX+2IOFhiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWv3EBogevVINjXO9AcBzWeQVm4MB8GA1UdIwQY
MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt
ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz
LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhmQOPYM
dI4H3BmytPxKAP/iI82gZIIwYuHoewdzjspXaZpBPkQ6p4bMtxXIBeMTNqgZTW3k
uZT3oc0oWDkORoauiR39/N4Jx1jWX8mbOet5fkJp4DU7jAJXsKN/lp+jmySof6Ka
1AzasVjKE7UwM+ac536RMLehMZYoX5WJWlWAvEHu4V8ZWptBzdYyp2xBwT8D4MBC
PaU14Fb2M4mnnXgTLAEY03I5hOMRZi7LtNUwcQRFMhlHAlMfX+HwwOUsJhZVGGAo
y3m3StnHjqLZbBSp5l9+CrdsQs5TnVIwNM3FZNZaITQcnW1e/PsSh62mpmg8nuAr
65Id/5mrTIDNCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:31 2026 by rpki-client