Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: rAIn1FfB1tKefR8uMYFdTQnSHYkZuniHNRVkRpuPg3o=
Subject key identifier: 0F:6A:BE:7E:64:9A:6C:76:38:7D:51:A1:8F:8A:3B:60:9C:0E:2D:82
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019CAA21E54041BB661436068E50D05534BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0CB0
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: vxbOsA/Dhrn1D94ZkuZvz9s6OVnmuqCrT+H3t2ufOPs=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e5:40:41:bb:66:14:36:06:8e:50:d0:55:34:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=0f6abe7e649a6c76387d51a18f8a3b609c0e2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:30:6f:f3:18:f7:2a:6a:e5:8c:0a:c7:f4:
bb:b2:57:eb:4c:71:f7:72:09:23:73:3b:11:cb:a4:
ab:00:c9:3e:6b:19:ce:8e:c7:6d:98:9c:4c:ef:f5:
08:4c:16:d0:e9:68:5c:f4:af:ce:31:4e:2d:70:2c:
8b:41:9e:51:bc:b4:a1:03:85:47:42:72:fa:d1:f4:
d1:7b:5d:6c:a7:45:68:e1:43:0c:c4:a9:cd:3c:13:
51:6c:26:88:e2:6f:30:2c:53:e7:0d:e1:fa:21:11:
ba:37:7d:e3:2b:74:22:3a:9e:97:ea:a0:17:3a:12:
58:05:8c:74:22:9f:f1:e4:5b:a3:a7:0b:3f:7b:62:
cc:e0:01:92:37:11:3d:84:e4:4c:83:e1:36:cc:88:
f0:4e:98:bd:f5:ea:11:a6:de:14:4e:58:03:49:53:
1c:e7:94:d8:02:78:bd:a3:ed:00:66:cc:3c:63:28:
62:da:12:b6:69:8e:bc:7a:60:86:2b:93:d1:26:a8:
a4:b6:19:f7:fc:79:b0:9c:5d:1f:46:68:e7:70:c1:
15:04:97:e7:02:0f:18:c3:ef:8e:f1:d9:75:e9:1d:
4c:e4:b3:2b:26:7f:0b:6d:f3:a0:d1:80:41:01:e3:
48:15:a4:8c:af:07:18:28:de:9f:7b:0f:d9:8e:f1:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6A:BE:7E:64:9A:6C:76:38:7D:51:A1:8F:8A:3B:60:9C:0E:2D:82
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a7:f5:86:b6:a1:3a:c0:de:d1:11:a4:63:4e:d3:49:cd:3b:
a8:bc:16:94:4f:1a:b8:76:d3:e6:1b:7e:dd:6a:f9:a9:48:d1:
22:ba:f5:20:ca:bd:a0:89:6e:62:f2:ee:3c:62:e7:e9:37:99:
77:1a:64:62:45:8a:a6:0d:44:1c:1c:a2:05:0a:45:cb:16:73:
bf:68:f8:53:6e:aa:10:d7:51:31:e3:34:e0:fd:c8:76:93:42:
75:6b:90:5d:60:57:ca:9a:91:bc:51:54:71:5e:68:f6:b3:06:
b6:e6:1f:86:1c:78:04:69:68:29:09:a0:86:b5:c4:00:b8:7f:
00:1a:d4:73:24:15:2a:bf:6b:bc:35:88:76:5b:b6:7a:cd:53:
6c:a8:ad:b5:75:1b:de:03:6e:3b:87:2b:7c:7f:62:66:77:b2:
c3:77:f7:ae:60:64:cb:41:72:7a:f3:c7:68:50:9f:26:18:c9:
b4:db:da:be:9e:78:ac:64:34:c7:21:75:fb:92:c7:51:87:b4:
a9:07:91:30:ad:cd:51:fa:fb:30:4b:27:0d:fc:e4:3a:0b:e6:
dd:f9:5c:61:00:c0:35:1b:94:e1:8c:7f:11:9b:75:ef:fd:e3:
4d:07:12:42:e3:74:6d:8e:67:34:95:25:2a:6d:ca:92:39:04:
08:98:91:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIeVAQbtmFDYGjlDQVTS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjYwMzAxMTYwMTEzWhcNMjYwMzAyMTYwMTEzWjAzMTEwLwYDVQQD
EygwZjZhYmU3ZTY0OWE2Yzc2Mzg3ZDUxYTE4ZjhhM2I2MDljMGUyZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUwb/MY9ypq5YwKx/S7slfrTHH3
cgkjczsRy6SrAMk+axnOjsdtmJxM7/UITBbQ6Whc9K/OMU4tcCyLQZ5RvLShA4VH
QnL60fTRe11sp0Vo4UMMxKnNPBNRbCaI4m8wLFPnDeH6IRG6N33jK3QiOp6X6qAX
OhJYBYx0Ip/x5Fujpws/e2LM4AGSNxE9hORMg+E2zIjwTpi99eoRpt4UTlgDSVMc
55TYAni9o+0AZsw8Yyhi2hK2aY68emCGK5PRJqikthn3/HmwnF0fRmjncMEVBJfn
Ag8Yw++O8dl16R1M5LMrJn8LbfOg0YBBAeNIFaSMrwcYKN6few/ZjvFyrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9qvn5kmmx2OH1RoY+KO2CcDi2CMB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKf1hrah
OsDe0RGkY07TSc07qLwWlE8auHbT5ht+3Wr5qUjRIrr1IMq9oIluYvLuPGLn6TeZ
dxpkYkWKpg1EHByiBQpFyxZzv2j4U26qENdRMeM04P3IdpNCdWuQXWBXypqRvFFU
cV5o9rMGtuYfhhx4BGloKQmghrXEALh/ABrUcyQVKr9rvDWIdlu2es1TbKittXUb
3gNuO4crfH9iZneyw3f3rmBky0FyevPHaFCfJhjJtNvavp54rGQ0xyF1+5LHUYe0
qQeRMK3NUfr7MEsnDfzkOgvm3flcYQDANRuU4Yx/EZt17/3jTQcSQuN0bY5nNJUl
Km3KkjkECJiRuw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:50 2026 by rpki-client