Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: N4AJFzxyyk8mFFssW9Av+OWwBlQGWSxwcJ9pLDTsmd4=
Subject key identifier: 9E:2B:42:32:83:0E:18:26:0C:89:89:6E:AA:63:70:D1:D0:8C:30:82
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019CAA58700162486C64D77113C0ED1D5E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: UCvJsltBbuMcad3jcsbnEglfOETz6RhHxN9hKpcKofQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:70:01:62:48:6c:64:d7:71:13:c0:ed:1d:5e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=9e2b4232830e18260c89896eaa6370d1d08c3082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:43:1e:de:fe:dd:75:b5:ad:7f:33:71:94:
cd:f7:82:e5:fc:0d:51:a0:69:0a:27:4a:f0:c0:11:
c1:68:7b:6b:45:6f:56:85:0c:d0:33:b7:51:71:35:
71:b0:8f:6e:84:ca:c5:92:b1:91:90:fb:77:66:68:
81:40:ed:9e:63:7b:54:1e:52:c3:f2:c9:fc:91:c6:
d7:23:50:4c:0f:ad:93:b9:bc:10:41:fe:d0:f9:a2:
60:81:a3:0e:3a:b7:d3:3e:96:53:b1:91:2f:36:9f:
b0:b9:0e:aa:10:75:82:92:37:d0:fc:a3:3a:70:2f:
93:a5:40:0d:f3:2c:4f:fd:ae:58:70:94:b6:ed:2c:
d7:b4:de:4d:d1:4f:97:56:e4:50:fc:7d:75:ce:4c:
dc:0d:30:8c:76:3f:65:5d:5f:9e:5e:44:57:a0:b2:
6f:b0:b0:92:0d:7f:62:31:14:80:95:19:44:1a:8a:
df:df:c9:ab:c8:b9:30:85:38:b6:e8:e6:f1:79:21:
de:08:1f:19:ce:c3:61:4f:f6:ec:87:cd:83:11:93:
1c:13:6b:cb:b7:38:dd:79:8d:ee:9c:06:69:07:5c:
58:a9:51:35:b7:88:73:96:cb:af:ba:68:cc:27:08:
5b:0c:94:20:96:19:ce:1c:c1:ad:82:b7:1f:c4:af:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:42:32:83:0E:18:26:0C:89:89:6E:AA:63:70:D1:D0:8C:30:82
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3a:ef:05:cf:1d:d3:71:2e:5e:7d:4c:c6:28:9e:fd:21:4f:
2e:b5:15:fa:78:fd:57:97:9d:97:d8:79:d3:05:73:ef:82:7f:
7d:01:fd:8e:7c:f9:a4:a2:1c:7a:9d:62:51:95:f2:1b:0f:39:
2b:35:57:3a:0f:b0:c9:45:70:15:ce:28:b0:2e:90:b2:41:93:
83:5c:91:5c:a6:77:a1:f3:15:dc:af:86:e1:96:17:8e:51:62:
04:d1:f4:89:85:b5:de:e3:68:2d:63:fe:25:df:42:00:93:23:
b5:f6:b6:5b:a2:9f:bb:2e:72:e5:4c:13:88:c5:b1:51:c6:73:
e2:3d:cd:0e:01:f7:de:6e:0f:ec:96:6f:27:a7:22:fa:51:b2:
6d:c6:20:a4:37:1e:06:a9:09:15:4b:99:e6:08:6c:5c:0d:64:
44:68:f3:3a:a0:1a:a0:34:84:c6:ba:a9:f5:b5:df:c8:d1:8a:
64:9b:61:17:b7:db:d7:1a:1b:ca:9d:32:4a:c6:fd:8b:03:04:
9f:f1:36:ef:ae:0c:41:2a:00:16:c7:12:c3:dc:0d:56:17:21:
16:de:63:a2:48:c6:e6:42:df:da:35:a0:22:08:b3:48:3c:bb:
12:bc:f4:a2:cb:66:e6:91:f2:7f:88:b7:fc:24:12:a3:12:88:
09:4c:20:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHABYkhsZNdxE8DtHV5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4
MTRhY2EwHhcNMjYwMzAxMTcwMDQ4WhcNMjYwMzAyMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZTJiNDIzMjgzMGUxODI2MGM4OTg5NmVhYTYzNzBkMWQwOGMzMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZDHt7+3XW1rX8zcZTN94Ll/A1R
oGkKJ0rwwBHBaHtrRW9WhQzQM7dRcTVxsI9uhMrFkrGRkPt3ZmiBQO2eY3tUHlLD
8sn8kcbXI1BMD62TubwQQf7Q+aJggaMOOrfTPpZTsZEvNp+wuQ6qEHWCkjfQ/KM6
cC+TpUAN8yxP/a5YcJS27SzXtN5N0U+XVuRQ/H11zkzcDTCMdj9lXV+eXkRXoLJv
sLCSDX9iMRSAlRlEGorf38mryLkwhTi26ObxeSHeCB8ZzsNhT/bsh82DEZMcE2vL
tzjdeY3unAZpB1xYqVE1t4hzlsuvumjMJwhbDJQglhnOHMGtgrcfxK+xGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4rQjKDDhgmDImJbqpjcNHQjDCCMB8GA1UdIwQY
MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt
MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3
LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzrvBc8d
03EuXn1Mxiie/SFPLrUV+nj9V5edl9h50wVz74J/fQH9jnz5pKIcep1iUZXyGw85
KzVXOg+wyUVwFc4osC6QskGTg1yRXKZ3ofMV3K+G4ZYXjlFiBNH0iYW13uNoLWP+
Jd9CAJMjtfa2W6Kfuy5y5UwTiMWxUcZz4j3NDgH33m4P7JZvJ6ci+lGybcYgpDce
BqkJFUuZ5ghsXA1kRGjzOqAaoDSExrqp9bXfyNGKZJthF7fb1xobyp0ySsb9iwME
n/E2764MQSoAFscSw9wNVhchFt5jokjG5kLf2jWgIgizSDy7Erz0ostm5pHyf4i3
/CQSoxKICUwgZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:58 2026 by rpki-client