Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: LTAF5WaAdJQQ4X9jBSbRVBffnvRs5JDAfbT4UE33Bvk=
Subject key identifier: 25:3A:D8:40:63:7E:34:7E:99:E3:2B:C2:01:6B:A2:C3:02:24:BC:6A
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019CAAC62C0D188DC9A649115A507350C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: WdH/JASifswj+uBJ8EY6ejt0VEaU+V742quwDvxnBiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2c:0d:18:8d:c9:a6:49:11:5a:50:73:50:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=253ad840637e347e99e32bc2016ba2c30224bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:cd:f8:97:52:71:03:d8:fe:31:99:da:e7:
e9:dc:28:c6:52:7c:53:4a:1e:51:4e:ed:59:7f:c7:
b9:da:b4:3a:40:d5:1e:32:9c:7f:2d:41:75:dd:c4:
3e:d8:73:45:94:64:04:02:59:b5:3d:28:eb:0c:3b:
d1:d7:6e:01:76:7f:8f:12:6e:54:e4:e6:3d:32:f9:
c8:16:60:5a:d5:fb:a3:ba:cd:ad:af:ce:98:96:f8:
22:c4:5c:37:85:0a:f1:7e:93:5a:4f:90:cc:10:a8:
1e:c8:ac:ac:88:d3:42:18:39:84:b3:97:f8:0d:55:
3f:a6:43:23:fb:89:16:f5:47:ae:b4:fa:4b:da:7b:
52:c5:d4:4a:f8:cd:76:50:15:81:d7:71:e6:4b:27:
91:62:1c:55:23:65:47:43:12:85:1b:e3:4d:97:bb:
a8:0f:c7:1f:c9:b2:bb:af:34:86:b1:37:49:19:1a:
43:08:9d:e0:c5:53:18:5a:d4:ed:00:dc:0a:4f:34:
1b:2b:2b:4b:90:55:4f:58:b2:06:41:92:d3:39:65:
ee:a0:53:ea:aa:ee:88:f2:d5:dc:a5:74:78:44:85:
b9:b3:de:79:a4:b6:02:ef:61:d1:0b:e1:2e:f0:6a:
91:ad:95:ca:50:9e:bb:17:04:2c:12:0a:b1:d4:2f:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:D8:40:63:7E:34:7E:99:E3:2B:C2:01:6B:A2:C3:02:24:BC:6A
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:44:1d:71:d1:73:b2:aa:cc:3c:4b:d1:6b:23:cf:4c:46:
5e:5f:de:9d:47:f1:a1:9b:84:4f:38:22:88:0e:fe:8f:27:66:
86:59:3a:a0:47:c9:eb:91:88:49:79:83:a5:29:99:94:2c:15:
fa:1a:60:e5:4c:ae:a3:4e:23:58:cd:cd:73:fb:9d:9b:a4:7a:
9f:80:9c:66:18:b5:67:0b:8e:f5:67:c3:92:92:b0:96:59:81:
37:9f:dd:80:81:f4:2f:a1:8b:0f:ba:9b:f8:33:33:36:b0:e8:
de:3c:4a:6e:9c:f0:5c:03:d1:b9:4e:9d:8b:18:d8:61:1b:47:
b3:aa:4a:fe:3b:ed:cd:4c:b9:c5:69:8a:f2:64:d4:ec:a9:b6:
c3:ec:e6:d8:b9:89:db:b5:11:70:47:2b:53:85:5e:9e:6a:0e:
18:d7:35:72:da:18:2d:da:ff:cc:6b:85:47:03:e6:c1:c3:de:
1f:a6:8d:c4:64:e0:aa:ce:8d:2f:de:9a:a7:9b:eb:75:56:07:
5b:c8:fc:7d:a9:d6:03:4a:e0:6b:3e:79:6b:39:aa:3f:2e:66:
6f:c8:35:d1:12:0f:9e:29:a5:28:c9:e1:b0:f6:7e:f5:9d:fb:
cb:36:6a:a2:e2:54:76:a8:40:b6:e3:70:b5:a1:5d:54:11:ca:
58:c7:9d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxiwNGI3JpkkRWlBzUML0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjYwMzAxMTkwMDM5WhcNMjYwMzAyMTkwMDM5WjAzMTEwLwYDVQQD
EygyNTNhZDg0MDYzN2UzNDdlOTllMzJiYzIwMTZiYTJjMzAyMjRiYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvjN+JdScQPY/jGZ2ufp3CjGUnxT
Sh5RTu1Zf8e52rQ6QNUeMpx/LUF13cQ+2HNFlGQEAlm1PSjrDDvR124Bdn+PEm5U
5OY9MvnIFmBa1fujus2tr86YlvgixFw3hQrxfpNaT5DMEKgeyKysiNNCGDmEs5f4
DVU/pkMj+4kW9UeutPpL2ntSxdRK+M12UBWB13HmSyeRYhxVI2VHQxKFG+NNl7uo
D8cfybK7rzSGsTdJGRpDCJ3gxVMYWtTtANwKTzQbKytLkFVPWLIGQZLTOWXuoFPq
qu6I8tXcpXR4RIW5s955pLYC72HRC+Eu8GqRrZXKUJ67FwQsEgqx1C8kMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU62EBjfjR+meMrwgFrosMCJLxqMB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/BEHXHR
c7KqzDxL0Wsjz0xGXl/enUfxoZuETzgiiA7+jydmhlk6oEfJ65GISXmDpSmZlCwV
+hpg5Uyuo04jWM3Nc/udm6R6n4CcZhi1ZwuO9WfDkpKwllmBN5/dgIH0L6GLD7qb
+DMzNrDo3jxKbpzwXAPRuU6dixjYYRtHs6pK/jvtzUy5xWmK8mTU7Km2w+zm2LmJ
27URcEcrU4VenmoOGNc1ctoYLdr/zGuFRwPmwcPeH6aNxGTgqs6NL96ap5vrdVYH
W8j8fanWA0rgaz55azmqPy5mb8g10RIPnimlKMnhsPZ+9Z37yzZqouJUdqhAtuNw
taFdVBHKWMedJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:37 2026 by rpki-client