Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: srXBcUNCt7NtcK5TzIqIR73MIjQjVpICG65yMaPKz24=
Subject key identifier: 98:7D:B1:2B:E5:7B:40:81:9D:3F:A4:ED:D1:37:35:54:F1:8B:31:6D
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019CAAFD9C69273BD81179A19A2B04111530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:01:13 +0000
Manifest this update: Sun 01 Mar 2026 20:01:13 +0000
Manifest next update: Mon 02 Mar 2026 20:01:13 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: 121UQSreubdG4LzbOvaofrkxIrjEoKg5wrCpomkk9Ns=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:9c:69:27:3b:d8:11:79:a1:9a:2b:04:11:15:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Mar 1 20:01:13 2026 GMT
Not After : Mar 2 20:01:13 2026 GMT
Subject: CN=987db12be57b40819d3fa4edd1373554f18b316d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:d5:3c:f1:9c:ec:6c:54:46:3b:69:86:e1:
36:1e:98:49:52:83:84:8d:35:51:6a:3c:a1:75:3c:
20:82:a8:50:fe:48:5f:c9:96:fd:8b:e5:11:6c:04:
53:c2:c6:fb:10:0f:27:ed:fd:be:d7:da:e2:c2:a1:
25:c1:6c:3d:f0:43:0e:a2:d7:5d:db:54:0f:82:ad:
92:b9:fc:8b:c5:5a:f1:29:29:e0:64:5b:0c:45:c9:
a5:b5:80:0f:3a:5d:4c:95:ea:bc:a9:df:5f:46:c4:
55:c3:32:24:c5:9f:dd:1f:a5:7c:2f:11:7c:2e:6d:
34:ff:9b:37:37:33:f6:17:8f:02:48:36:89:7f:01:
8d:26:ca:36:8d:9f:64:50:49:25:0f:41:93:8a:66:
d1:8f:a1:66:45:e9:46:ed:cc:bc:ea:dc:54:25:42:
19:1b:d1:34:7b:1e:56:9f:6b:54:d0:48:7f:fa:73:
ed:87:e6:17:18:53:34:d5:44:4a:fb:5f:ce:5f:3c:
20:02:e0:cf:00:fb:c5:e3:48:7f:35:4a:c4:ce:f7:
03:bb:56:fc:7f:09:dc:81:38:2f:2f:02:09:7c:f6:
2a:51:87:bb:7f:89:14:0a:b1:17:1d:37:a7:98:e9:
30:b0:f3:e6:8a:cb:bb:14:c7:7d:91:5f:36:ce:4e:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:B1:2B:E5:7B:40:81:9D:3F:A4:ED:D1:37:35:54:F1:8B:31:6D
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:95:75:61:43:f9:61:5c:13:73:8d:46:be:ea:d1:e3:cb:b4:
a8:82:c7:c9:53:8d:bb:ec:f3:d8:0d:42:27:af:9a:a9:7f:8a:
66:51:81:18:09:d1:0a:9a:bb:b4:2a:35:2f:ee:4e:6c:23:63:
e3:f3:f2:77:7b:19:29:dd:f2:c3:e2:dd:c0:1c:ad:b1:32:05:
3b:5d:ad:0b:01:9b:74:06:70:48:b4:48:b2:bc:f2:65:01:b3:
2f:42:b0:ec:d3:86:3e:fb:e0:55:9e:97:d5:8f:f3:9b:15:95:
a5:2b:08:22:f6:1e:74:15:18:6a:bc:0a:d5:f1:9a:f8:51:d4:
b4:55:3c:d2:1b:f7:e0:81:7f:e7:7f:6b:fb:a8:7b:80:12:7d:
06:38:3a:37:ee:c7:84:bb:4e:63:8b:36:fc:e1:88:fb:96:d5:
46:e3:d4:6f:d7:49:5a:4d:2e:26:7f:c0:fc:1e:a7:95:44:3d:
ac:cd:b8:17:61:93:a4:bf:34:08:fd:01:de:48:5f:8d:dd:bf:
50:4c:bb:39:13:2c:b9:93:c6:b8:70:0e:27:3d:08:a4:a5:7b:
9c:64:82:ea:8a:3a:f8:6a:68:f0:3d:5b:e9:f5:47:a7:96:74:
89:81:af:4c:77:df:ca:4a:c0:fe:9a:1f:e1:fd:80:36:9c:89:
29:16:17:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/ZxpJzvYEXmhmisEERUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGEwM2M5YzgyNjg1YWU2ZDZiM2QyMWQ2ODRiYmNmNDY4
YmY3NWIwHhcNMjYwMzAxMjAwMTEzWhcNMjYwMzAyMjAwMTEzWjAzMTEwLwYDVQQD
Eyg5ODdkYjEyYmU1N2I0MDgxOWQzZmE0ZWRkMTM3MzU1NGYxOGIzMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN3VPPGc7GxURjtphuE2HphJUoOE
jTVRajyhdTwggqhQ/khfyZb9i+URbARTwsb7EA8n7f2+19riwqElwWw98EMOotdd
21QPgq2SufyLxVrxKSngZFsMRcmltYAPOl1Mleq8qd9fRsRVwzIkxZ/dH6V8LxF8
Lm00/5s3NzP2F48CSDaJfwGNJso2jZ9kUEklD0GTimbRj6FmRelG7cy86txUJUIZ
G9E0ex5Wn2tU0Eh/+nPth+YXGFM01URK+1/OXzwgAuDPAPvF40h/NUrEzvcDu1b8
fwncgTgvLwIJfPYqUYe7f4kUCrEXHTenmOkwsPPmisu7FMd9kV82zk5tlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh9sSvle0CBnT+k7dE3NVTxizFtMB8GA1UdIwQY
MBaAFAfaA8nIJoWubWs9IdaEu89Gi/dbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2It
YWEwMWRjZDNkZmE3LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZWVmMjItMjYyNC00OWI2LWEyM2ItYWEwMWRjZDNkZmE3
LzEvQjlvRHljZ21oYTV0YXowaDFvUzd6MGFMOTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZV1YUP5
YVwTc41GvurR48u0qILHyVONu+zz2A1CJ6+aqX+KZlGBGAnRCpq7tCo1L+5ObCNj
4/Pyd3sZKd3yw+LdwBytsTIFO12tCwGbdAZwSLRIsrzyZQGzL0Kw7NOGPvvgVZ6X
1Y/zmxWVpSsIIvYedBUYarwK1fGa+FHUtFU80hv34IF/539r+6h7gBJ9Bjg6N+7H
hLtOY4s2/OGI+5bVRuPUb9dJWk0uJn/A/B6nlUQ9rM24F2GTpL80CP0B3khfjd2/
UEy7ORMsuZPGuHAOJz0IpKV7nGSC6oo6+Gpo8D1b6fVHp5Z0iYGvTHffykrA/pof
4f2ANpyJKRYX1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:31 2026 by rpki-client