Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: jpfaFnXsJKzNduay1+r46xHC+RNm35jDO/wAe556a8I=
Subject key identifier: 19:A4:7A:5C:68:C1:E5:DA:8B:D7:C8:BF:FD:E3:68:27:92:CE:B7:BB
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 019CABD90CD62185C403D7A71E8D5A5878D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: v+ZqXoGc2GjpBu2vBMjpEAddTm4S8+usUNV7nO7OtX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0c:d6:21:85:c4:03:d7:a7:1e:8d:5a:58:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=19a47a5c68c1e5da8bd7c8bffde3682792ceb7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:bb:e0:3f:83:ea:59:88:98:68:23:8e:56:
b0:23:99:98:fb:25:6d:3b:64:33:02:38:c3:56:ed:
b6:d1:30:19:3a:64:97:68:45:10:e9:d6:9e:e0:e9:
5c:e9:20:05:43:ad:63:09:5f:17:5b:e8:4c:3d:92:
cc:5d:09:1b:a7:db:1b:22:d7:5e:5c:13:15:d2:3f:
18:8c:b6:e8:6f:4c:5c:70:d2:dc:1c:5f:27:02:47:
13:fa:22:87:8c:96:3e:93:a8:21:10:7f:8e:8f:36:
f8:4e:a3:fc:0d:4c:4a:55:f8:40:02:46:1b:a2:ee:
a8:32:ca:70:82:34:c0:f8:39:e1:8d:6f:ed:63:d1:
c8:f0:20:18:1c:5b:89:b0:f8:c8:48:e9:99:3c:a5:
27:e8:ab:eb:37:3d:06:d2:e5:5d:87:2d:00:78:86:
f2:e0:7d:17:aa:f7:0a:e6:61:c5:36:e5:06:78:92:
23:47:1a:b0:80:dc:aa:18:ea:22:a7:b6:d4:23:27:
4e:4a:e8:cf:18:07:51:dd:40:2e:d2:44:3b:7c:b6:
a3:4c:43:41:ad:a6:50:5b:37:e0:e0:85:63:28:2c:
ef:f5:05:2e:6c:62:ef:30:2b:a5:31:e0:09:7b:f5:
a9:55:bd:10:af:ff:00:e2:af:7a:cf:26:61:fe:95:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A4:7A:5C:68:C1:E5:DA:8B:D7:C8:BF:FD:E3:68:27:92:CE:B7:BB
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:83:8f:18:85:90:c4:fb:ae:87:22:e8:21:4d:42:87:01:c4:
41:7f:02:01:42:44:6b:08:d6:78:69:27:04:71:85:e1:1c:99:
5e:02:ae:89:df:c2:ee:5f:02:e1:3f:fe:b5:96:6b:67:0b:ec:
44:24:b7:44:c9:3e:05:2e:95:b4:e7:9d:7d:b9:be:58:5e:13:
88:b6:83:1d:36:2c:6e:9d:2a:c2:50:c2:39:e3:ca:a5:0d:92:
57:25:c8:d6:a7:68:e6:7b:d1:3f:27:f1:88:d9:ee:a3:8f:8d:
72:ab:68:7a:ae:49:c7:91:0d:05:c7:0f:47:b5:21:c1:d0:11:
0a:47:e2:70:e3:d9:35:2c:f2:7f:5a:9f:cd:ee:1a:3a:a4:f9:
b6:b6:18:8f:48:1b:f1:e7:05:26:10:c1:b4:44:2c:a3:ff:6d:
60:a0:1e:bd:71:95:8e:b4:b7:a0:6d:43:3d:87:c8:b7:28:1c:
64:d9:9a:4f:83:e8:4b:60:17:95:5b:b3:f6:62:ec:f3:e6:59:
f4:4d:0a:b1:52:30:e1:82:b2:70:c8:51:cf:70:53:40:c7:b7:
e0:2d:20:63:ec:a7:3c:08:f5:16:ad:79:5b:f3:80:57:ca:92:
fe:0e:83:29:ca:e9:54:73:8b:31:1b:d3:c1:23:92:5c:6f:cf:
fc:c2:f3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QzWIYXEA9enHo1aWHjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2
NjBlZjUwHhcNMjYwMzAyMDAwMDU0WhcNMjYwMzAzMDAwMDU0WjAzMTEwLwYDVQQD
EygxOWE0N2E1YzY4YzFlNWRhOGJkN2M4YmZmZGUzNjgyNzkyY2ViN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjK74D+D6lmImGgjjlawI5mY+yVt
O2QzAjjDVu220TAZOmSXaEUQ6dae4Olc6SAFQ61jCV8XW+hMPZLMXQkbp9sbItde
XBMV0j8YjLbob0xccNLcHF8nAkcT+iKHjJY+k6ghEH+Ojzb4TqP8DUxKVfhAAkYb
ou6oMspwgjTA+DnhjW/tY9HI8CAYHFuJsPjISOmZPKUn6KvrNz0G0uVdhy0AeIby
4H0XqvcK5mHFNuUGeJIjRxqwgNyqGOoip7bUIydOSujPGAdR3UAu0kQ7fLajTENB
raZQWzfg4IVjKCzv9QUubGLvMCulMeAJe/WpVb0Qr/8A4q96zyZh/pW5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmkelxoweXai9fIv/3jaCeSzre7MB8GA1UdIwQY
MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt
OGU4MWQxMzUwNzM2LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2
LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4OPGIWQ
xPuuhyLoIU1ChwHEQX8CAUJEawjWeGknBHGF4RyZXgKuid/C7l8C4T/+tZZrZwvs
RCS3RMk+BS6VtOedfbm+WF4TiLaDHTYsbp0qwlDCOePKpQ2SVyXI1qdo5nvRPyfx
iNnuo4+Ncqtoeq5Jx5ENBccPR7UhwdARCkficOPZNSzyf1qfze4aOqT5trYYj0gb
8ecFJhDBtEQso/9tYKAevXGVjrS3oG1DPYfItygcZNmaT4PoS2AXlVuz9mLs8+ZZ
9E0KsVIw4YKycMhRz3BTQMe34C0gY+ynPAj1Fq15W/OAV8qS/g6DKcrpVHOLMRvT
wSOSXG/P/MLzBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:34:07 2026 by rpki-client