Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File: H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier: ocw3NqkMGRb6Gonxr1BgUUp9pCa/zq2XZKJfXxXSgSw=
Subject key identifier: 1E:B2:13:88:D5:88:FC:B7:C7:C5:15:65:E4:91:B5:EF:FF:C9:65:DE
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial: 019CABD9318DDE70AE168FC7E65C2A7D9463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: +I5KLG1sQREiin1u7SZKU8JtRSEd9CI0v08xoMc0BKI=)
2: T6n7EDa7L7y2Likx1LJt9fY0e84.roa (hash: 1EysGC86dcCWQcka9wvraq3MLvlF/xfglQjOwZsEyRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:31:8d:de:70:ae:16:8f:c7:e6:5c:2a:7d:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=1eb21388d588fcb7c7c51565e491b5efffc965de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:fe:07:f4:43:6b:17:4b:4c:ca:09:5b:42:
ee:92:3c:9f:88:cc:44:ac:07:a2:58:bf:06:8b:b5:
bb:9e:d3:61:41:ff:87:aa:41:4c:07:1f:ba:e8:2a:
99:57:5a:4a:f5:2d:5f:c9:0f:f9:0a:b3:77:37:a6:
22:b5:5e:8d:d2:cc:e3:c8:73:e6:8f:ac:c7:10:f1:
9e:50:a7:86:5f:0d:d4:11:9b:2f:8b:fb:71:15:89:
74:fb:cf:7d:85:3f:e9:8c:80:fb:8c:8a:a3:d7:a5:
90:9f:14:a6:1e:9f:0d:ca:49:3e:c2:ea:cb:41:81:
10:5a:85:c5:c1:99:4b:c2:ad:33:fa:8a:7e:43:bd:
e9:f9:1c:3b:de:91:36:7c:59:43:e3:77:6e:01:62:
5c:21:2d:ec:16:16:54:5a:9c:8d:fc:61:32:0e:07:
3e:55:4f:7f:d1:11:a9:c6:31:5c:00:2c:2d:8f:d5:
df:79:8b:f7:33:bc:5e:da:94:66:22:60:0a:ff:0a:
c9:d0:3d:a2:ad:55:c5:72:06:e1:de:e5:01:12:89:
62:04:97:a7:31:5b:60:82:39:d0:a0:67:e3:80:d3:
63:1f:e9:0f:c6:9f:74:8d:26:83:66:02:38:80:44:
ea:83:f4:c4:74:65:6c:79:78:17:21:df:b9:4a:82:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:13:88:D5:88:FC:B7:C7:C5:15:65:E4:91:B5:EF:FF:C9:65:DE
X509v3 Authority Key Identifier:
keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5c:52:67:44:50:30:4f:6a:a4:c6:bc:6a:6f:c1:53:6b:0e:
95:f6:5a:ea:d0:d3:1d:ca:62:73:da:4c:3d:29:75:8e:a0:09:
60:14:28:40:ab:74:83:3e:84:74:12:4d:7f:35:46:f2:b6:94:
c7:98:71:b8:22:81:64:ec:9a:66:92:f0:51:05:af:77:68:00:
f2:36:0f:10:d4:7d:1c:13:14:43:ca:3b:68:86:3e:12:d3:71:
d5:fe:1c:f3:fe:2e:f0:96:33:ce:d9:b3:ec:04:63:c6:1b:ba:
ca:3d:2e:a0:c8:67:72:85:fc:68:6a:78:04:51:3f:80:c6:89:
bf:04:44:1f:51:ed:53:a3:2f:a0:6c:fe:b1:8a:83:76:9c:4f:
b5:0c:e4:39:b3:1c:ee:e1:11:65:0e:6f:97:7f:10:5b:e3:4b:
e8:e7:66:34:6a:40:ec:e2:53:9e:a8:09:81:4b:13:4d:a8:c3:
5a:a1:d5:e6:21:6c:59:ee:d0:f0:9a:7e:e8:8b:42:a5:6b:d7:
da:86:08:b5:c3:bb:91:74:8d:33:89:08:fe:69:b3:e1:d0:21:
83:e0:b7:f5:3e:61:38:c9:86:59:ef:96:e1:9b:2f:38:b4:a7:
ce:45:ab:7f:d8:0d:91:08:d8:49:c1:ba:c8:0e:12:84:b8:12:
2d:f1:9c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2TGN3nCuFo/H5lwqfZRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmE3Zjc3MmIzMjNiMjRkYmU2OWQzZjNhY2Y3NTVlNjlk
NjAxY2QwHhcNMjYwMzAyMDAwMTAzWhcNMjYwMzAzMDAwMTAzWjAzMTEwLwYDVQQD
EygxZWIyMTM4OGQ1ODhmY2I3YzdjNTE1NjVlNDkxYjVlZmZmYzk2NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqb+B/RDaxdLTMoJW0LukjyfiMxE
rAeiWL8Gi7W7ntNhQf+HqkFMBx+66CqZV1pK9S1fyQ/5CrN3N6YitV6N0szjyHPm
j6zHEPGeUKeGXw3UEZsvi/txFYl0+899hT/pjID7jIqj16WQnxSmHp8Nykk+wurL
QYEQWoXFwZlLwq0z+op+Q73p+Rw73pE2fFlD43duAWJcIS3sFhZUWpyN/GEyDgc+
VU9/0RGpxjFcACwtj9XfeYv3M7xe2pRmImAK/wrJ0D2irVXFcgbh3uUBEoliBJen
MVtggjnQoGfjgNNjH+kPxp90jSaDZgI4gETqg/TEdGVseXgXId+5SoKA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6yE4jViPy3x8UVZeSRte//yWXeMB8GA1UdIwQY
MBaAFB/6f3crMjsk2+adPzrPdV5p1gHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGIt
ODcwMzRmOWZjZTYxLzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGItODcwMzRmOWZjZTYx
LzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlxSZ0RQ
ME9qpMa8am/BU2sOlfZa6tDTHcpic9pMPSl1jqAJYBQoQKt0gz6EdBJNfzVG8raU
x5hxuCKBZOyaZpLwUQWvd2gA8jYPENR9HBMUQ8o7aIY+EtNx1f4c8/4u8JYzztmz
7ARjxhu6yj0uoMhncoX8aGp4BFE/gMaJvwREH1HtU6MvoGz+sYqDdpxPtQzkObMc
7uERZQ5vl38QW+NL6OdmNGpA7OJTnqgJgUsTTajDWqHV5iFsWe7Q8Jp+6ItCpWvX
2oYItcO7kXSNM4kI/mmz4dAhg+C39T5hOMmGWe+W4ZsvOLSnzkWrf9gNkQjYScG6
yA4ShLgSLfGcdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:05 2026 by rpki-client