Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: X7ZLpNC7AfN0nzFUFcIpw+Ctwa3H9q0z+eDavX8yr58=
Subject key identifier: 9B:DB:15:9C:29:EE:65:80:E5:D3:96:27:7E:83:A9:97:A0:A6:D9:40
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 019CACEBF5653275952AFD40616B77165696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 1557
Signing time: Mon 02 Mar 2026 05:01:10 +0000
Manifest this update: Mon 02 Mar 2026 05:01:10 +0000
Manifest next update: Tue 03 Mar 2026 05:01:10 +0000
Files and hashes: 1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=)
2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: NC7SphbksGL+3JLp38ffQRIs5wKbwM7MMtIW9UpboMw=)
3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f5:65:32:75:95:2a:fd:40:61:6b:77:16:56:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Mar 2 05:01:10 2026 GMT
Not After : Mar 3 05:01:10 2026 GMT
Subject: CN=9bdb159c29ee6580e5d396277e83a997a0a6d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:4c:2f:f6:2c:9b:bf:be:98:4f:91:36:d5:
67:84:99:e7:aa:f7:68:5e:47:38:8e:a0:de:c0:0c:
25:a2:95:70:6e:e1:c0:02:96:c1:2b:e9:13:01:3a:
87:84:10:39:91:b5:b5:9d:16:d2:a9:65:66:f5:66:
92:03:31:49:24:84:58:dd:0d:1b:8e:74:f9:d7:c3:
97:bb:ba:a6:71:d4:a7:27:b9:1a:10:f8:55:01:02:
15:a7:5c:91:9e:c1:7b:43:76:ff:f2:53:50:96:05:
8f:f3:98:ac:05:8f:ee:04:70:4c:87:00:a2:62:97:
15:94:45:b8:00:56:0d:f4:c5:f6:06:1c:12:2c:c3:
76:5e:4e:4d:52:e6:c7:5e:ad:77:9e:20:77:12:e9:
9b:fb:9f:30:3e:d3:e9:4e:c7:3f:1b:c8:c4:48:fb:
b0:e7:d8:69:2b:b4:96:a6:27:ec:7f:77:9a:7b:aa:
f6:27:19:a6:82:90:56:24:e9:e8:28:c4:88:64:94:
5e:7e:9a:93:af:4b:7f:b9:47:7f:c9:b0:df:3d:30:
97:e7:0d:41:10:ab:9a:50:9b:74:44:46:70:1a:de:
1c:2c:81:f6:cc:7d:46:4f:c5:75:45:8e:a0:8e:dc:
41:a1:15:cf:5f:76:a5:6f:73:54:79:03:33:5b:46:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:15:9C:29:EE:65:80:E5:D3:96:27:7E:83:A9:97:A0:A6:D9:40
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:74:3a:ab:9d:0d:c6:b9:87:fc:4e:11:0f:27:43:fc:6f:
21:24:47:0f:18:bc:0e:ca:2e:8f:74:26:36:58:63:d0:80:4e:
f9:b9:a2:5c:a0:85:53:20:45:77:5d:96:8b:47:2c:d5:a1:46:
90:4d:10:22:c5:63:bf:3e:8f:88:d6:90:5d:b9:f2:98:1e:5e:
30:42:90:af:0b:72:4a:22:bf:07:92:b1:ea:94:9c:18:a4:14:
dc:4b:bb:68:5c:88:fc:5a:1a:19:79:da:ff:a8:a6:67:68:bf:
4e:f5:22:13:93:96:16:ac:2e:04:51:4e:12:1c:fc:ef:17:b1:
43:6e:71:ea:9f:9c:76:28:f5:21:3b:80:94:03:7b:87:f2:d8:
b1:f7:b9:4d:66:df:33:60:b0:22:16:93:fe:03:41:bd:d1:e8:
9d:43:49:d6:c7:fa:29:f9:17:82:d8:cb:90:15:a9:f3:11:c6:
4d:99:08:55:4b:c0:4c:00:29:42:4b:40:36:8a:ce:c7:ab:bc:
3f:76:83:d0:06:ee:ed:3e:e6:a9:63:c4:11:58:92:01:26:ec:
00:70:fe:d7:48:13:1b:71:c7:e2:eb:19:36:94:e4:e5:89:5b:
da:04:ea:dc:52:a3:f7:3c:8c:f0:df:82:4e:29:21:86:f8:80:
d3:21:b6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6/VlMnWVKv1AYWt3FlaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3
ZThlM2YwHhcNMjYwMzAyMDUwMTEwWhcNMjYwMzAzMDUwMTEwWjAzMTEwLwYDVQQD
Eyg5YmRiMTU5YzI5ZWU2NTgwZTVkMzk2Mjc3ZTgzYTk5N2EwYTZkOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IRML/Ysm7++mE+RNtVnhJnnqvdo
Xkc4jqDewAwlopVwbuHAApbBK+kTATqHhBA5kbW1nRbSqWVm9WaSAzFJJIRY3Q0b
jnT518OXu7qmcdSnJ7kaEPhVAQIVp1yRnsF7Q3b/8lNQlgWP85isBY/uBHBMhwCi
YpcVlEW4AFYN9MX2BhwSLMN2Xk5NUubHXq13niB3Eumb+58wPtPpTsc/G8jESPuw
59hpK7SWpifsf3eae6r2JxmmgpBWJOnoKMSIZJRefpqTr0t/uUd/ybDfPTCX5w1B
EKuaUJt0REZwGt4cLIH2zH1GT8V1RY6gjtxBoRXPX3alb3NUeQMzW0aJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvbFZwp7mWA5dOWJ36DqZegptlAMB8GA1UdIwQY
MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt
MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl
LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOh0Oqud
Dca5h/xOEQ8nQ/xvISRHDxi8Dsouj3QmNlhj0IBO+bmiXKCFUyBFd12Wi0cs1aFG
kE0QIsVjvz6PiNaQXbnymB5eMEKQrwtySiK/B5Kx6pScGKQU3Eu7aFyI/FoaGXna
/6imZ2i/TvUiE5OWFqwuBFFOEhz87xexQ25x6p+cdij1ITuAlAN7h/LYsfe5TWbf
M2CwIhaT/gNBvdHonUNJ1sf6KfkXgtjLkBWp8xHGTZkIVUvATAApQktANorOx6u8
P3aD0Abu7T7mqWPEEViSASbsAHD+10gTG3HH4usZNpTk5Ylb2gTq3FKj9zyM8N+C
TikhhviA0yG2yA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:33 2026 by rpki-client