Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: BtgGMDnhFfKmfEzJS0zkfRsE32gyMFLnbEYm8SuiNkI=
Subject key identifier: 4F:50:58:33:38:9A:E9:7D:D9:14:0A:4F:E1:F8:56:E3:D1:83:AF:69
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 019CAA8F9BDE684459A3D3A04D32B76F77B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0FF9
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: dDbzYGzy47o1moMTA0PWnLD/xO4z/M4AUSTGB9CalCk=)
2: WkDOgdUMhIbvisg1gB1VqlRy5CE.roa (hash: n8TyrFK/s854qKIOj2eeizMFn+Hfv9n1i9/epsUGYR0=)
3: ow55IcypodraGq5qBa3kayj01Ts.roa (hash: QBzRFkOgbS8ToubyKAp8uRDnvfFLz0Wij1mejxjFju0=)
4: qFX_V5K9S7pFc_wZHT0Iz0bF_ag.roa (hash: IQpJTlL5gYm7svny6BIGlabTeTBoMOPgbwqqpZYWraQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9b:de:68:44:59:a3:d3:a0:4d:32:b7:6f:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=4f505833389ae97dd9140a4fe1f856e3d183af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:c7:a2:92:22:e2:2f:fe:5c:bc:fa:04:48:
d6:86:b8:4b:7e:1d:64:c7:35:c5:29:03:ee:ec:51:
80:ee:59:5d:36:db:eb:30:7a:94:af:8c:51:d9:ca:
dc:2a:ab:05:09:af:a7:f3:1c:1a:d3:b6:a1:ca:af:
68:f6:b1:b9:80:cf:00:8a:23:bf:44:dc:5e:6c:00:
dc:98:a4:a6:df:1b:49:35:23:b4:cd:ea:12:7c:12:
6a:0d:b6:a9:fc:5c:05:5d:6c:b4:f6:b3:20:61:d6:
fd:3b:69:d4:c4:e6:d0:55:78:dc:aa:56:4a:4c:4a:
e4:88:f2:55:52:bb:38:5b:de:54:d0:7a:44:a5:30:
b7:d9:43:41:8d:b3:09:ce:3e:00:36:a9:1e:46:26:
b8:2b:60:bb:99:a9:51:e1:1c:7e:71:3a:4c:56:a4:
39:80:09:6c:c8:c0:ae:9b:f9:62:53:e5:51:72:3e:
9a:ec:7d:d7:60:86:b4:bb:83:77:f6:a0:8c:b2:fc:
6f:19:53:c5:d5:7b:76:eb:11:ed:f3:3d:f5:b4:09:
b4:d6:57:2e:f1:6a:f0:40:a9:df:76:f6:0d:08:91:
08:51:16:dc:fc:1b:d1:da:77:de:64:38:84:0b:33:
29:cd:dd:08:fc:7a:e6:1e:ee:ad:8d:06:c2:b9:5c:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:58:33:38:9A:E9:7D:D9:14:0A:4F:E1:F8:56:E3:D1:83:AF:69
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:45:5f:03:40:50:b1:2a:b1:25:0e:3a:5e:4c:f3:b8:51:
aa:83:e6:e9:57:37:05:cc:c4:c2:ab:0d:ff:e6:23:ab:ed:54:
d0:47:ab:bf:07:53:96:d1:72:7b:e9:9d:20:9b:7a:dc:96:fc:
4e:9b:96:a1:17:3a:4e:16:8f:da:55:e5:45:5a:e4:68:24:3e:
06:2c:e8:0f:49:cf:81:c7:3c:ab:c9:54:1d:9e:0b:29:7f:37:
fa:f3:04:63:c3:63:da:f3:54:9a:d8:d0:1b:f0:8b:8c:90:dd:
fe:eb:b3:ec:ca:71:cc:e0:76:75:b6:da:de:71:63:4d:c3:b8:
56:6d:b5:f2:77:ef:44:3b:f6:f7:6b:fb:7c:66:e8:f9:ab:b1:
74:b9:c4:3e:2c:4d:1c:2c:6d:d9:01:b1:74:b0:04:22:98:a7:
89:bb:bc:ce:97:d2:b2:3b:5e:2d:03:a2:6b:d5:37:c9:d7:a0:
01:56:64:b6:bd:a7:d8:18:4c:de:d8:6f:ba:e0:0b:ad:81:a9:
0b:77:db:cc:1e:b6:fe:bd:5d:f3:45:ce:6d:49:b2:90:3d:c5:
a3:fe:54:40:37:2e:0a:03:c6:a5:6f:62:62:f4:6d:f3:7c:4d:
b5:f3:9f:2b:bf:ec:df:2b:58:bb:59:10:0a:d7:d1:78:2f:9d:
fb:c7:b0:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj5veaERZo9OgTTK3b3e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4
OTI1MmYwHhcNMjYwMzAxMTgwMTA0WhcNMjYwMzAyMTgwMTA0WjAzMTEwLwYDVQQD
Eyg0ZjUwNTgzMzM4OWFlOTdkZDkxNDBhNGZlMWY4NTZlM2QxODNhZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YrHopIi4i/+XLz6BEjWhrhLfh1k
xzXFKQPu7FGA7lldNtvrMHqUr4xR2crcKqsFCa+n8xwa07ahyq9o9rG5gM8AiiO/
RNxebADcmKSm3xtJNSO0zeoSfBJqDbap/FwFXWy09rMgYdb9O2nUxObQVXjcqlZK
TErkiPJVUrs4W95U0HpEpTC32UNBjbMJzj4ANqkeRia4K2C7malR4Rx+cTpMVqQ5
gAlsyMCum/liU+VRcj6a7H3XYIa0u4N39qCMsvxvGVPF1Xt26xHt8z31tAm01lcu
8WrwQKnfdvYNCJEIURbc/BvR2nfeZDiECzMpzd0I/HrmHu6tjQbCuVyuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9QWDM4mul92RQKT+H4VuPRg69pMB8GA1UdIwQY
MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt
NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl
LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnepFXwNA
ULEqsSUOOl5M87hRqoPm6Vc3BczEwqsN/+Yjq+1U0EervwdTltFye+mdIJt63Jb8
TpuWoRc6ThaP2lXlRVrkaCQ+BizoD0nPgcc8q8lUHZ4LKX83+vMEY8Nj2vNUmtjQ
G/CLjJDd/uuz7MpxzOB2dbba3nFjTcO4Vm218nfvRDv292v7fGbo+auxdLnEPixN
HCxt2QGxdLAEIpinibu8zpfSsjteLQOia9U3ydegAVZktr2n2BhM3thvuuALrYGp
C3fbzB62/r1d80XObUmykD3Fo/5UQDcuCgPGpW9iYvRt83xNtfOfK7/s3ytYu1kQ
CtfReC+d+8ew+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:08 2026 by rpki-client