Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: DOlF/kZcNXJhw90ok/dYMLsLVIQC1LiU30azk5V2Z18=
Subject key identifier: 71:30:C4:89:E4:B5:4F:9D:CD:D2:32:9A:65:82:A2:3A:14:62:79:5B
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 019CAAFD7C41E04AD01EA537EBA3F74CAFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: uUIPsA0R37GYhkeYu/D3XPAU/UTzmzYaCNsKVEljYBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7c:41:e0:4a:d0:1e:a5:37:eb:a3:f7:4c:af:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=7130c489e4b54f9dcdd2329a6582a23a1462795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:9c:e0:b6:12:01:0e:f0:04:b1:05:72:42:
c8:41:bb:8b:68:e5:ce:86:c3:33:c1:33:53:ad:55:
0a:db:cb:33:06:82:7f:1a:63:22:e6:43:40:67:ad:
8f:7a:2f:f2:a0:6e:57:cf:db:dc:fd:7c:28:18:dd:
c1:e8:3f:a1:16:d6:1f:e8:dc:db:e3:df:a2:0b:bf:
0f:13:c7:08:8d:83:c2:c4:4f:d4:e9:0e:20:c8:10:
c6:4d:36:ab:59:43:4d:39:17:90:a1:df:42:9b:b1:
3c:b3:c8:30:19:1f:2b:52:f2:ca:65:0f:37:c4:eb:
d4:06:94:e7:5b:10:23:8c:a8:30:10:05:c9:ec:95:
b0:c4:ba:e1:75:70:59:29:cd:df:a9:19:90:5a:6c:
64:7d:fc:28:57:48:be:fb:39:f5:aa:a2:fd:7a:db:
6e:e3:e7:89:e8:4e:40:83:9c:92:12:4b:0b:92:3c:
aa:dd:3c:c9:82:f3:3e:8b:a0:5e:c0:08:35:59:e2:
51:93:04:21:87:7f:3c:0d:79:84:f7:89:ed:a1:45:
c4:73:80:24:51:62:16:2b:59:96:12:f7:d4:6a:13:
8b:ee:cd:27:81:5f:02:7a:f3:16:d3:7a:49:c2:45:
f2:4b:d8:ad:3f:57:12:85:43:1b:52:ab:ca:83:15:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:C4:89:E4:B5:4F:9D:CD:D2:32:9A:65:82:A2:3A:14:62:79:5B
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:79:4b:50:f6:12:53:66:77:2f:6c:4e:a9:e8:87:15:07:f5:
b0:4e:90:40:fb:d7:eb:fc:35:80:3f:ad:93:22:85:66:5b:e2:
bb:4a:46:00:a5:b5:7f:6c:ba:44:75:0d:d2:ff:6a:e1:83:1b:
82:d8:3c:9a:9f:ad:2c:ee:a8:a9:54:aa:c6:c8:37:0d:72:f0:
79:46:4b:fe:ed:3b:ea:8b:79:61:64:07:c6:a1:b5:13:08:a7:
3e:64:a2:04:e2:73:d0:9b:57:9d:0c:61:4c:69:af:c5:79:3c:
cd:a0:49:05:7e:c3:58:69:68:2a:3a:84:27:d2:f6:7d:84:18:
e5:8f:ee:55:2c:ca:1d:6f:34:69:8c:50:f9:d7:78:9e:0c:fa:
95:61:7c:3c:02:a6:d3:50:e7:65:de:8a:b0:0d:a8:ff:63:82:
7a:81:69:2c:8f:00:c9:9e:3d:01:1c:74:c2:0a:8d:57:a3:9a:
39:61:28:4a:d6:6f:c8:d0:46:52:7b:f0:5b:e6:10:f4:e1:86:
a8:90:96:ee:d3:6f:0f:5e:42:c0:56:9f:5c:d8:8a:80:2f:b3:
ec:e1:cb:fb:de:fb:2e:8f:7d:61:d3:0e:88:30:84:62:68:89:
79:4f:45:d3:58:c4:f2:c8:ae:83:bf:fa:e3:6d:a1:a2:ae:0e:
32:82:60:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/XxB4ErQHqU366P3TK/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0
ZjhhZTgwHhcNMjYwMzAxMjAwMTA0WhcNMjYwMzAyMjAwMTA0WjAzMTEwLwYDVQQD
Eyg3MTMwYzQ4OWU0YjU0ZjlkY2RkMjMyOWE2NTgyYTIzYTE0NjI3OTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWyc4LYSAQ7wBLEFckLIQbuLaOXO
hsMzwTNTrVUK28szBoJ/GmMi5kNAZ62Pei/yoG5Xz9vc/XwoGN3B6D+hFtYf6Nzb
49+iC78PE8cIjYPCxE/U6Q4gyBDGTTarWUNNOReQod9Cm7E8s8gwGR8rUvLKZQ83
xOvUBpTnWxAjjKgwEAXJ7JWwxLrhdXBZKc3fqRmQWmxkffwoV0i++zn1qqL9ettu
4+eJ6E5Ag5ySEksLkjyq3TzJgvM+i6BewAg1WeJRkwQhh388DXmE94ntoUXEc4Ak
UWIWK1mWEvfUahOL7s0ngV8CevMW03pJwkXyS9itP1cShUMbUqvKgxXscwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEwxInktU+dzdIymmWCojoUYnlbMB8GA1UdIwQY
MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt
ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk
LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnlLUPYS
U2Z3L2xOqeiHFQf1sE6QQPvX6/w1gD+tkyKFZlviu0pGAKW1f2y6RHUN0v9q4YMb
gtg8mp+tLO6oqVSqxsg3DXLweUZL/u076ot5YWQHxqG1EwinPmSiBOJz0JtXnQxh
TGmvxXk8zaBJBX7DWGloKjqEJ9L2fYQY5Y/uVSzKHW80aYxQ+dd4ngz6lWF8PAKm
01DnZd6KsA2o/2OCeoFpLI8AyZ49ARx0wgqNV6OaOWEoStZvyNBGUnvwW+YQ9OGG
qJCW7tNvD15CwFafXNiKgC+z7OHL+977Lo99YdMOiDCEYmiJeU9F01jE8siug7/6
422hoq4OMoJgQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:03 2026 by rpki-client