Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: b/auT+bQ1RhCo7Cz2+zmD9pb20NsoZjOTjI+0eLpxNY=
Subject key identifier: 57:E4:8A:5D:C3:D5:94:1A:C5:AD:63:2A:DA:FA:C0:14:3F:6D:AF:72
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019CAFB652D405118D7E97238CB39838D840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 60
Signing time: Mon 02 Mar 2026 18:01:27 +0000
Manifest this update: Mon 02 Mar 2026 18:01:27 +0000
Manifest next update: Tue 03 Mar 2026 18:01:27 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: yReDfOjR4lcyheCvMfJtgwt3RR9andsqq/iOhrKEd3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:52:d4:05:11:8d:7e:97:23:8c:b3:98:38:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Mar 2 18:01:27 2026 GMT
Not After : Mar 3 18:01:27 2026 GMT
Subject: CN=57e48a5dc3d5941ac5ad632adafac0143f6daf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:22:eb:42:95:31:97:36:73:d1:bb:7c:3c:
66:46:70:97:6b:c6:f6:fc:50:a2:bb:71:f0:fd:59:
1a:e7:60:96:90:24:b8:63:e3:7a:6d:f2:eb:2c:0b:
cd:b4:7a:80:94:9a:06:d7:7c:57:e7:7d:7e:23:94:
5d:da:1b:64:3e:7f:51:5c:a4:0a:57:47:27:fb:fd:
da:fc:09:71:40:98:86:be:3e:39:de:27:5c:49:2d:
14:69:a5:14:22:3b:65:cf:2b:c5:48:b3:3b:0e:d3:
78:50:08:d4:c5:88:d7:21:e1:76:5a:2a:c1:a6:ab:
a5:9a:d4:5c:fe:a5:02:4e:9f:b5:e9:17:f2:7d:c3:
dd:3f:aa:f5:23:a5:ef:af:81:6a:d8:58:44:fc:a7:
7d:9a:44:1b:4a:9f:5b:bb:c3:eb:7c:cd:a6:07:87:
9f:62:e0:af:dc:78:e4:b8:84:7a:63:c2:44:71:bd:
f8:e6:f8:83:5c:13:b6:1d:09:7a:b9:e5:8f:29:b9:
7e:5e:53:7e:23:e0:d9:13:08:43:b8:37:f7:34:f3:
64:36:8f:14:4d:c6:3d:a2:c9:92:8d:e8:67:ba:e6:
2e:3b:98:f3:b7:8f:c8:8c:59:04:10:03:40:36:30:
a6:a2:1c:3a:11:7c:5d:45:13:ff:63:e0:93:43:28:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E4:8A:5D:C3:D5:94:1A:C5:AD:63:2A:DA:FA:C0:14:3F:6D:AF:72
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:0f:ff:4c:1e:3c:23:1c:61:26:55:d1:a3:84:c0:6f:d1:
26:f0:6a:27:b2:5f:37:18:8f:56:48:8d:1b:72:14:81:7d:9e:
40:44:9d:ef:a1:15:2e:74:58:16:df:6b:04:01:a9:8a:ed:ad:
28:98:aa:c4:f0:22:bd:3d:23:28:dd:dd:00:2d:94:a6:c5:69:
ed:b4:47:e5:8b:cf:1f:62:46:a1:46:d1:3c:1e:36:a2:5d:aa:
17:20:a3:5d:3d:4f:fa:54:03:94:de:e6:88:77:33:c6:62:12:
8a:68:a6:8b:de:06:29:46:fb:45:c4:12:9d:e5:e3:56:25:a2:
e3:dd:04:1a:45:fd:4e:43:01:af:33:e3:0f:38:38:4f:64:69:
b0:22:74:d6:d3:c2:de:0b:10:c0:bc:cc:f7:6a:22:8b:77:dd:
50:b2:af:a5:38:17:d8:49:3f:99:9c:d2:5c:be:ca:8f:75:84:
48:73:1e:a1:52:7d:44:1d:bd:6d:1d:26:78:e0:a2:a2:d2:51:
07:d3:fe:2e:bd:d4:95:cf:3f:30:a4:01:02:99:9a:6f:bc:42:
57:4d:2b:ed:a9:d5:79:6f:c5:60:7f:c2:78:cc:5b:dd:0a:61:
12:6c:7a:2e:2d:9c:12:d4:aa:06:b8:20:db:5f:52:e5:ea:08:
86:ec:2c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtlLUBRGNfpcjjLOYONhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjFjMGU5MTFjY2U0YzQ1M2ZlYzJiMTY4ZjZjMTNkMzZl
MGRmODUwHhcNMjYwMzAyMTgwMTI3WhcNMjYwMzAzMTgwMTI3WjAzMTEwLwYDVQQD
Eyg1N2U0OGE1ZGMzZDU5NDFhYzVhZDYzMmFkYWZhYzAxNDNmNmRhZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZIi60KVMZc2c9G7fDxmRnCXa8b2
/FCiu3Hw/Vka52CWkCS4Y+N6bfLrLAvNtHqAlJoG13xX531+I5Rd2htkPn9RXKQK
V0cn+/3a/AlxQJiGvj453idcSS0UaaUUIjtlzyvFSLM7DtN4UAjUxYjXIeF2WirB
pqulmtRc/qUCTp+16RfyfcPdP6r1I6Xvr4Fq2FhE/Kd9mkQbSp9bu8PrfM2mB4ef
YuCv3HjkuIR6Y8JEcb345viDXBO2HQl6ueWPKbl+XlN+I+DZEwhDuDf3NPNkNo8U
TcY9osmSjehnuuYuO5jzt4/IjFkEEANANjCmohw6EXxdRRP/Y+CTQyj4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfkil3D1ZQaxa1jKtr6wBQ/ba9yMB8GA1UdIwQY
MBaAFA/xwOkRzOTEU/7CsWj2wT024N+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUt
NzlkMTNmYWFiNjJjLzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUtNzlkMTNmYWFiNjJj
LzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIsP/0we
PCMcYSZV0aOEwG/RJvBqJ7JfNxiPVkiNG3IUgX2eQESd76EVLnRYFt9rBAGpiu2t
KJiqxPAivT0jKN3dAC2UpsVp7bRH5YvPH2JGoUbRPB42ol2qFyCjXT1P+lQDlN7m
iHczxmISimimi94GKUb7RcQSneXjViWi490EGkX9TkMBrzPjDzg4T2RpsCJ01tPC
3gsQwLzM92oii3fdULKvpTgX2Ek/mZzSXL7Kj3WESHMeoVJ9RB29bR0meOCiotJR
B9P+Lr3Ulc8/MKQBApmab7xCV00r7anVeW/FYH/CeMxb3QphEmx6Li2cEtSqBrgg
219S5eoIhuws5A==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:39:35 2026 by rpki-client