Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: A2YcrzNpuK3H+CETx9H6/igcZiu7hrpDMPodd4xal1o=
Subject key identifier: 9A:E3:D4:77:E4:CD:10:6C:EC:D2:09:4F:CE:C1:4F:05:60:70:CA:15
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019CAAC6A2E6C684D17EE87151EC99E6484D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: FZgm-m-tM7etG2QpRA9NtYKJMp0.roa (hash: UQwsai2QfSWLMJ1/MEG9VD0VHu/w7xSrHdqEgRycwjY=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: KKjUBiH7pIn8lKAwsXsNz5hyusB6p1R1XrmNAeMUd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:e6:c6:84:d1:7e:e8:71:51:ec:99:e6:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=9ae3d477e4cd106cecd2094fcec14f056070ca15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:5a:fb:31:8c:89:4c:71:4d:06:f0:64:7b:
bf:f6:11:10:55:2b:62:4b:f8:a9:7c:91:07:af:c9:
1e:a2:e6:fc:f4:c1:e8:48:f1:e1:74:79:18:dd:e7:
f0:af:d4:38:65:a6:4d:3f:b9:c3:6d:cc:e2:ea:2e:
d0:24:12:6a:e4:93:f2:0e:e2:2e:22:8c:b8:dd:03:
d7:ab:85:61:90:11:35:5a:59:38:f5:c8:cc:a8:52:
f0:f8:56:20:fa:02:b3:93:19:c3:79:96:d2:ba:e5:
79:5c:9a:0f:f3:6f:fb:e7:91:d1:ae:1f:b6:c4:77:
5f:dc:19:28:1d:1d:e5:58:7a:54:d2:f6:6a:5a:8c:
fc:b7:49:45:95:5a:60:10:ed:c1:19:77:9c:6e:c3:
57:ea:a3:f8:6b:4a:27:e6:24:f2:8f:e5:32:8e:f0:
bc:63:c3:92:7f:ea:9f:a7:74:0e:d7:98:b8:38:67:
64:b4:71:54:d9:3a:40:b6:83:28:0e:09:47:65:da:
6e:df:10:50:b2:62:fe:8c:d5:53:f8:67:1b:5e:26:
96:86:cc:54:c4:68:59:38:ec:66:90:19:e0:00:a9:
23:23:45:19:e3:59:1b:b4:66:1d:b4:87:27:1b:bd:
0f:42:2e:35:c0:7e:b8:fb:42:78:55:4b:74:43:28:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E3:D4:77:E4:CD:10:6C:EC:D2:09:4F:CE:C1:4F:05:60:70:CA:15
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:ac:6f:b4:18:6b:84:be:6f:f3:e7:5b:08:0f:dd:63:bf:
0d:f9:5d:8c:9c:3e:55:47:c3:b8:d1:b0:eb:67:b4:ad:9b:98:
1e:6f:c1:57:86:66:74:b6:6b:e9:0b:d4:50:c9:f0:27:23:d0:
9c:91:7d:ae:2a:d7:55:2f:da:fb:20:a9:77:65:30:8e:e6:5b:
02:52:35:97:66:ed:da:15:51:9b:85:14:38:d3:cb:e2:10:50:
78:39:cc:c1:98:0e:c1:4c:11:e4:89:19:dc:11:2f:74:eb:2a:
9c:72:97:11:73:6c:67:1b:c9:3e:3d:5c:08:ce:24:dd:d9:1a:
41:1b:16:fc:3c:02:db:f0:a1:e9:6a:b7:2b:b7:95:98:6d:5a:
9b:fc:d8:41:23:a6:67:48:86:5c:c0:8c:aa:2f:b2:a4:d5:77:
2f:8c:dd:96:02:aa:e3:b0:67:31:2e:e7:3e:2b:37:4a:ee:4e:
50:74:27:dc:93:ff:0c:ab:81:51:dc:a7:2e:f2:dc:f0:92:a8:
c6:71:92:2c:4e:f8:a7:71:2c:98:ab:0f:f2:f0:d8:e0:9b:8d:
76:05:7b:d9:a3:85:19:cc:86:69:59:14:54:d8:52:44:6d:fe:
a6:c3:c0:3a:d2:22:ea:7a:b9:3c:b2:49:d7:ba:43:bd:0f:d4:
85:06:f9:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqLmxoTRfuhxUeyZ5khNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzQ4MTQxZmM0NmRjMDE4NzA4N2NiYzg2NTU2ZTlhNDQ5
ZWUxZTcwHhcNMjYwMzAxMTkwMTEwWhcNMjYwMzAyMTkwMTEwWjAzMTEwLwYDVQQD
Eyg5YWUzZDQ3N2U0Y2QxMDZjZWNkMjA5NGZjZWMxNGYwNTYwNzBjYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwJa+zGMiUxxTQbwZHu/9hEQVSti
S/ipfJEHr8keoub89MHoSPHhdHkY3efwr9Q4ZaZNP7nDbczi6i7QJBJq5JPyDuIu
Ioy43QPXq4VhkBE1Wlk49cjMqFLw+FYg+gKzkxnDeZbSuuV5XJoP82/755HRrh+2
xHdf3BkoHR3lWHpU0vZqWoz8t0lFlVpgEO3BGXecbsNX6qP4a0on5iTyj+UyjvC8
Y8OSf+qfp3QO15i4OGdktHFU2TpAtoMoDglHZdpu3xBQsmL+jNVT+GcbXiaWhsxU
xGhZOOxmkBngAKkjI0UZ41kbtGYdtIcnG70PQi41wH64+0J4VUt0QyjvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrj1HfkzRBs7NIJT87BTwVgcMoVMB8GA1UdIwQY
MBaAFEQ0gUH8RtwBhwh8vIZVbppEnuHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmIt
NDVhMTEyYTFlN2FjLzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmItNDVhMTEyYTFlN2Fj
LzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt+sb7QY
a4S+b/PnWwgP3WO/DfldjJw+VUfDuNGw62e0rZuYHm/BV4ZmdLZr6QvUUMnwJyPQ
nJF9rirXVS/a+yCpd2UwjuZbAlI1l2bt2hVRm4UUONPL4hBQeDnMwZgOwUwR5IkZ
3BEvdOsqnHKXEXNsZxvJPj1cCM4k3dkaQRsW/DwC2/Ch6Wq3K7eVmG1am/zYQSOm
Z0iGXMCMqi+ypNV3L4zdlgKq47BnMS7nPis3Su5OUHQn3JP/DKuBUdynLvLc8JKo
xnGSLE74p3EsmKsP8vDY4JuNdgV72aOFGcyGaVkUVNhSRG3+psPAOtIi6nq5PLJJ
17pDvQ/UhQb5KQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:57 2026 by rpki-client