Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: DDIVxTb4CyQAYRhb5KEx0ku8kzic1wRzsZP7C42CeBA=
Subject key identifier: D8:D6:F9:18:63:81:82:3B:39:C9:08:75:E1:3C:99:0A:DE:F0:A9:71
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 019CABD9470E7D91AB6F9A7FC7A908DAAA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: CzuBwM8BexrMvmVe1lNGnFx0SsI.roa (hash: oYbWXOSCXTX+A100giVddYXbi/Uhc0FrRcUcum8QwfU=)
2: FArXL1JBxBIhbGVrwaflCucFOq8.roa (hash: AOe3tdekyCDra8yyNdQxen9Bx4xuh6A4UvlcGwvAu1A=)
3: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: Y5o6ZQGI/UsmX7Nrgc+VXtZ7HJ4eiHt05rxdrMTH+VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:47:0e:7d:91:ab:6f:9a:7f:c7:a9:08:da:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=d8d6f9186381823b39c90875e13c990adef0a971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:34:58:b0:e4:be:db:6b:cd:dd:dc:db:a5:
35:c7:c6:bc:19:e7:1f:6f:6e:f3:af:a5:7e:77:e1:
52:f3:d1:39:03:ff:11:97:05:ab:49:80:ff:3b:22:
39:fa:92:1e:b7:2f:e2:91:9e:1b:7a:ce:ee:28:34:
20:5e:6a:e8:ff:65:7c:6a:ec:39:79:c9:96:05:c4:
71:0d:f4:98:c0:74:f1:d1:ef:6c:89:5a:8d:5c:24:
2f:29:4e:b0:fe:17:63:fb:78:27:41:f0:e7:a0:16:
d2:9a:f7:05:7c:c4:0e:f5:ee:60:1f:70:41:ee:c2:
a5:3d:8a:15:fc:49:a4:78:23:79:b5:c2:09:8c:3c:
04:1e:7f:b0:a6:18:80:56:a5:80:65:8f:ff:d5:76:
0b:d8:7d:37:d1:a0:0f:20:49:22:c8:9a:06:b7:30:
ec:32:4b:aa:72:29:08:77:ba:35:ab:51:87:20:6c:
a3:da:21:f8:e3:c6:7b:54:4f:43:23:c5:53:96:82:
9e:3a:b0:2f:95:23:80:2f:5e:ae:5f:a8:56:71:0c:
9b:e2:79:75:99:f6:61:d1:ad:7f:59:05:92:bb:a6:
fa:e0:95:5b:8e:16:1e:a6:a8:67:9e:0b:fb:d9:89:
21:f4:e8:53:88:4c:37:9b:c0:d5:87:d8:7d:48:c0:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:F9:18:63:81:82:3B:39:C9:08:75:E1:3C:99:0A:DE:F0:A9:71
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:48:f6:6d:98:48:6e:ed:99:87:19:65:b7:1a:9c:6e:e4:
69:52:d9:59:5d:5b:a6:ac:c2:34:6e:98:a2:98:1b:0e:4e:eb:
a6:a1:55:9b:d6:da:9f:5f:30:98:27:65:55:50:41:9d:9d:52:
fd:4a:29:94:1f:67:10:c3:ab:c4:ab:ab:86:50:76:90:fc:28:
9e:97:d9:0d:43:6a:f9:ca:6b:68:52:e2:d5:87:f1:6f:d8:c1:
3e:bd:f3:0d:4f:fd:06:0b:77:d8:0d:ed:84:4a:d1:3a:a4:5f:
d6:72:f8:81:f9:e4:ab:c9:e3:b6:f3:4a:9b:a5:be:d9:ea:ba:
f1:29:4b:a5:3c:08:0d:65:9b:b1:46:c0:5b:95:5b:97:80:84:
cf:af:97:74:b3:b5:a6:02:1d:d6:44:1c:08:de:cf:d0:d8:89:
5e:79:82:41:38:01:fa:f6:e5:d8:35:88:73:c7:3d:03:a5:27:
bc:4e:5d:78:9b:93:b6:c8:75:ec:0a:34:93:e2:20:42:9f:06:
de:76:af:03:14:6f:6f:41:02:f7:d5:39:52:c4:4f:7e:47:45:
ed:3c:96:0e:ea:82:dd:cb:b5:87:97:5c:dd:eb:3f:34:74:64:
5c:0d:95:70:e5:34:a9:6b:10:98:c7:d0:c1:34:34:95:78:d4:
9d:e3:6a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2UcOfZGrb5p/x6kI2qonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmQ3MjRlMjM5ZWZiN2YyZjdiZWE1MjZhOWUwYzVlN2Zj
ODliYmUwHhcNMjYwMzAyMDAwMTA5WhcNMjYwMzAzMDAwMTA5WjAzMTEwLwYDVQQD
EyhkOGQ2ZjkxODYzODE4MjNiMzljOTA4NzVlMTNjOTkwYWRlZjBhOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk80WLDkvttrzd3c26U1x8a8Gecf
b27zr6V+d+FS89E5A/8RlwWrSYD/OyI5+pIety/ikZ4bes7uKDQgXmro/2V8auw5
ecmWBcRxDfSYwHTx0e9siVqNXCQvKU6w/hdj+3gnQfDnoBbSmvcFfMQO9e5gH3BB
7sKlPYoV/EmkeCN5tcIJjDwEHn+wphiAVqWAZY//1XYL2H030aAPIEkiyJoGtzDs
MkuqcikId7o1q1GHIGyj2iH448Z7VE9DI8VTloKeOrAvlSOAL16uX6hWcQyb4nl1
mfZh0a1/WQWSu6b64JVbjhYepqhnngv72Ykh9OhTiEw3m8DVh9h9SMDTxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjW+RhjgYI7OckIdeE8mQre8KlxMB8GA1UdIwQY
MBaAFHNtck4jnvt/L3vqUmqeDF5/yJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQt
MGJlYmZjYmRlMWYzLzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQtMGJlYmZjYmRlMWYz
LzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPZI9m2Y
SG7tmYcZZbcanG7kaVLZWV1bpqzCNG6YopgbDk7rpqFVm9ban18wmCdlVVBBnZ1S
/UoplB9nEMOrxKurhlB2kPwonpfZDUNq+cpraFLi1Yfxb9jBPr3zDU/9Bgt32A3t
hErROqRf1nL4gfnkq8njtvNKm6W+2eq68SlLpTwIDWWbsUbAW5Vbl4CEz6+XdLO1
pgId1kQcCN7P0NiJXnmCQTgB+vbl2DWIc8c9A6UnvE5deJuTtsh17Ao0k+IgQp8G
3navAxRvb0EC99U5UsRPfkdF7TyWDuqC3cu1h5dc3es/NHRkXA2VcOU0qWsQmMfQ
wTQ0lXjUneNqOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:47 2026 by rpki-client