Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: EQc/aLXr+aAQ8BpSFb7rrdzMhsKBrSLjrwUtepiut3Y=
Subject key identifier: 99:81:17:B7:AF:14:BB:3A:F7:CA:5F:87:4E:9D:8B:B8:20:58:EC:52
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019CAD22F85DB959FCE9001BDFD078D7C8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0C40
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: ZZe7izzbjpsu2SX31zTPievaDup6bByB5d1fU0GGP5g=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f8:5d:b9:59:fc:e9:00:1b:df:d0:78:d7:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=998117b7af14bb3af7ca5f874e9d8bb82058ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:80:8e:96:e3:fc:b4:82:41:91:59:dd:3e:
18:59:ac:ad:a2:58:16:60:bb:4a:73:c1:0d:60:0a:
13:5c:e7:a4:c2:0b:65:c9:74:c1:5c:d8:cd:25:4a:
64:19:d6:56:b6:67:58:d6:6a:a7:75:13:37:48:6d:
68:18:80:12:f9:b9:6e:01:7c:11:8d:b9:b6:1a:28:
a1:c9:8e:ab:d4:c2:b6:42:e6:39:ab:65:25:b9:7c:
d9:91:17:02:fa:96:54:92:da:af:e9:30:de:e6:55:
1d:84:80:32:31:ba:23:4d:5e:b9:97:18:35:7e:d9:
a1:6b:64:a3:a6:74:c6:a7:f6:c4:11:16:de:7b:22:
15:0f:77:4b:3b:34:a1:a3:3c:8b:41:0f:e1:96:08:
40:9e:2c:d8:53:7a:7b:fd:b5:94:33:01:1e:e9:21:
bd:86:67:12:b2:85:01:a6:44:f9:c8:d3:6a:2d:25:
a9:43:0d:3d:14:40:4c:ac:6c:5c:39:8e:ba:ea:27:
d3:c9:6a:7f:8e:fb:9b:5b:e5:43:c4:46:33:db:c8:
34:83:67:30:67:ff:c7:08:70:21:6e:cd:bb:2e:16:
45:49:f9:24:cc:b0:a4:9c:3e:ef:be:4d:d2:3d:e6:
43:47:34:19:0e:30:3c:32:2b:71:57:01:16:43:e7:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:17:B7:AF:14:BB:3A:F7:CA:5F:87:4E:9D:8B:B8:20:58:EC:52
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:17:b9:cd:1a:15:38:58:af:b9:67:3f:5e:00:8e:5d:94:59:
5a:6f:75:c2:ab:1f:93:f5:04:fa:20:fc:e4:4c:f5:15:e2:ad:
bd:2f:5e:bb:d0:ba:a9:4f:9e:5f:b3:c0:97:ae:95:56:d3:0c:
75:91:16:08:29:ea:55:ef:9c:f9:3b:cc:28:4c:e9:aa:b4:b1:
28:5d:4d:9b:dc:2b:44:3a:9a:4c:80:58:6a:ea:71:b3:f2:7c:
24:7d:16:69:b2:e5:60:00:f6:38:0c:0f:09:59:fe:a5:e6:60:
3c:b9:18:d3:20:90:c4:44:f4:ea:96:61:e6:9e:29:55:b0:db:
1e:5e:b0:59:b6:86:a4:da:1e:a5:ea:cc:59:bb:b6:df:d5:40:
8f:da:6f:e3:f0:ef:e3:a3:fa:0f:3c:2b:7a:99:ee:88:cf:11:
34:d4:f1:97:80:de:07:bb:d7:3a:0a:6c:f0:71:b2:84:06:08:
ea:11:4a:4f:3f:6b:23:a3:54:b2:c0:13:73:41:3e:f8:7d:20:
27:d8:b4:74:c2:da:6c:ad:34:ad:ab:09:07:6a:63:3e:85:d9:
1b:dc:ac:88:95:f1:97:d0:cc:d5:c8:94:d3:16:b3:33:df:97:
8b:4f:90:16:fc:ab:a1:eb:6e:9c:ad:cd:8e:7b:14:08:25:54:
c5:c7:92:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvhduVn86QAb39B418jOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OGQ5ODAwZDY5ZGViYWUxMWI3ZjgxNjFjM2NlODgxODFm
ZGU3YjQwHhcNMjYwMzAyMDYwMTE2WhcNMjYwMzAzMDYwMTE2WjAzMTEwLwYDVQQD
Eyg5OTgxMTdiN2FmMTRiYjNhZjdjYTVmODc0ZTlkOGJiODIwNThlYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KAjpbj/LSCQZFZ3T4YWaytolgW
YLtKc8ENYAoTXOekwgtlyXTBXNjNJUpkGdZWtmdY1mqndRM3SG1oGIAS+bluAXwR
jbm2GiihyY6r1MK2QuY5q2UluXzZkRcC+pZUktqv6TDe5lUdhIAyMbojTV65lxg1
ftmha2SjpnTGp/bEERbeeyIVD3dLOzShozyLQQ/hlghAnizYU3p7/bWUMwEe6SG9
hmcSsoUBpkT5yNNqLSWpQw09FEBMrGxcOY666ifTyWp/jvubW+VDxEYz28g0g2cw
Z//HCHAhbs27LhZFSfkkzLCknD7vvk3SPeZDRzQZDjA8MitxVwEWQ+fBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmBF7evFLs698pfh06di7ggWOxSMB8GA1UdIwQY
MBaAFISNmADWneuuEbf4Fhw86IGB/ee0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEt
M2Q5M2ZlNmQyMGFhLzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEtM2Q5M2ZlNmQyMGFh
LzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBe5zRoV
OFivuWc/XgCOXZRZWm91wqsfk/UE+iD85Ez1FeKtvS9eu9C6qU+eX7PAl66VVtMM
dZEWCCnqVe+c+TvMKEzpqrSxKF1Nm9wrRDqaTIBYaupxs/J8JH0WabLlYAD2OAwP
CVn+peZgPLkY0yCQxET06pZh5p4pVbDbHl6wWbaGpNoeperMWbu239VAj9pv4/Dv
46P6DzwrepnuiM8RNNTxl4DeB7vXOgps8HGyhAYI6hFKTz9rI6NUssATc0E++H0g
J9i0dMLabK00rasJB2pjPoXZG9ysiJXxl9DM1ciU0xazM9+Xi0+QFvyroetunK3N
jnsUCCVUxceSfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:32 2026 by rpki-client