Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: A0XsqeJR+8/mbQxgi6W/K4Q0YXzSbd8fwJIYPbuAv4I=
Subject key identifier: AA:B6:42:1C:CD:68:C8:12:71:70:14:45:69:6A:C6:EB:9F:3A:54:12
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 019CAB344F5588A7BAFBFDAAADFC8C35CFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 0863
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa (hash: 49h69eiCv9MsxP2gN+eJBOZr+EudlWoVpdEDAOKpTcI=)
2: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: WLj3n7HZKziysiarX2Ng7bXpmF54RZDkuJl6H7TsZZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4f:55:88:a7:ba:fb:fd:aa:ad:fc:8c:35:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=aab6421ccd68c81271701445696ac6eb9f3a5412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:d0:f2:c3:56:09:e1:57:c4:23:69:e5:14:
cf:b7:43:11:4b:50:c2:72:29:09:bd:f8:30:02:42:
50:7c:73:d6:db:e4:0c:05:f3:1c:d8:77:46:c6:9f:
ee:25:da:60:e1:25:8a:27:58:4d:c0:75:3b:e7:05:
39:1b:7a:01:72:d3:8a:48:56:1b:1a:d1:7a:7a:b3:
d3:be:a6:02:b6:43:ca:d1:f3:ed:8e:a4:87:70:56:
94:4c:4a:92:71:5e:3a:5d:89:a6:01:36:8d:93:26:
70:f3:0f:f6:ef:50:8f:ad:8a:ad:a7:7c:03:ec:a4:
af:df:6d:ea:ef:ec:36:3e:b6:d4:4c:10:d8:e5:8e:
14:06:eb:df:de:4a:37:7e:82:c8:12:73:aa:94:16:
6b:66:2e:c2:94:e3:91:3c:9d:9c:84:0e:0e:ee:1c:
34:74:a3:85:fc:b7:36:1a:51:a1:17:d6:90:d9:71:
31:92:63:ce:47:12:81:68:75:55:b1:15:15:64:99:
11:db:58:6e:c1:6c:28:c0:95:2f:38:27:82:da:66:
16:a6:c3:c9:c6:f0:2e:d0:3a:50:24:01:2f:3e:28:
f0:de:69:92:ab:fc:2a:59:98:dd:91:b8:37:66:5f:
be:db:a2:9d:1e:12:8f:b5:3f:93:28:a3:b2:d7:21:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:42:1C:CD:68:C8:12:71:70:14:45:69:6A:C6:EB:9F:3A:54:12
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3a:e9:53:de:2e:d3:7e:44:9f:6b:46:3c:17:e5:06:04:e4:
a6:cc:e5:67:51:62:03:30:ae:c4:16:91:7a:31:f4:ab:82:70:
4c:27:93:7b:9e:43:62:8b:28:db:e7:57:96:4d:34:8c:ff:d1:
e7:a6:eb:88:b2:cf:ab:4b:76:5f:76:4e:fa:f0:63:0c:ed:77:
00:3e:da:e5:e7:03:69:11:49:f3:79:10:d1:86:e7:1c:6e:50:
4f:8d:b5:0a:f7:68:52:51:9b:12:bb:3e:95:ef:c1:7d:d0:16:
ca:0a:7b:23:be:49:ba:99:1a:c6:e8:25:f0:b0:78:eb:3c:eb:
d0:14:6b:26:27:5f:20:c1:bd:64:94:0d:99:2e:d8:c6:54:26:
ab:05:31:34:53:c9:fb:a7:35:fd:32:67:2f:fa:db:fd:9e:25:
44:41:f9:f3:52:6b:46:55:e5:bb:c7:18:d9:e2:e3:91:8a:8d:
50:d1:9b:28:f7:36:cf:39:eb:8b:a5:e5:43:44:f2:dc:17:ba:
e8:f8:d2:2b:b4:72:21:d6:16:d9:11:15:4d:16:31:a6:f5:c6:
f2:87:95:8c:8c:d1:af:ae:85:c3:f6:be:e7:0c:62:d2:49:f2:
7c:7b:39:ac:d3:e7:9b:71:36:ed:3d:6e:77:50:3e:d8:77:00:
34:fd:8b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNE9ViKe6+/2qrfyMNc/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTg3ZDU2NGNjYjg2MTFlMTQwYTdiMmJmMjYwYzRhMjIy
YjU5ZDYwHhcNMjYwMzAxMjEwMDU3WhcNMjYwMzAyMjEwMDU3WjAzMTEwLwYDVQQD
EyhhYWI2NDIxY2NkNjhjODEyNzE3MDE0NDU2OTZhYzZlYjlmM2E1NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28jQ8sNWCeFXxCNp5RTPt0MRS1DC
cikJvfgwAkJQfHPW2+QMBfMc2HdGxp/uJdpg4SWKJ1hNwHU75wU5G3oBctOKSFYb
GtF6erPTvqYCtkPK0fPtjqSHcFaUTEqScV46XYmmATaNkyZw8w/271CPrYqtp3wD
7KSv323q7+w2PrbUTBDY5Y4UBuvf3ko3foLIEnOqlBZrZi7ClOORPJ2chA4O7hw0
dKOF/Lc2GlGhF9aQ2XExkmPORxKBaHVVsRUVZJkR21huwWwowJUvOCeC2mYWpsPJ
xvAu0DpQJAEvPijw3mmSq/wqWZjdkbg3Zl++26KdHhKPtT+TKKOy1yGT+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq2QhzNaMgScXAURWlqxuufOlQSMB8GA1UdIwQY
MBaAFJnofVZMy4YR4UCnsr8mDEoiK1nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAt
Y2Y1MWQ4ZTRjMTRiLzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAtY2Y1MWQ4ZTRjMTRi
LzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDrpU94u
035En2tGPBflBgTkpszlZ1FiAzCuxBaRejH0q4JwTCeTe55DYoso2+dXlk00jP/R
56briLLPq0t2X3ZO+vBjDO13AD7a5ecDaRFJ83kQ0YbnHG5QT421CvdoUlGbErs+
le/BfdAWygp7I75Jupkaxugl8LB46zzr0BRrJidfIMG9ZJQNmS7YxlQmqwUxNFPJ
+6c1/TJnL/rb/Z4lREH581JrRlXlu8cY2eLjkYqNUNGbKPc2zznri6XlQ0Ty3Be6
6PjSK7RyIdYW2REVTRYxpvXG8oeVjIzRr66Fw/a+5wxi0knyfHs5rNPnm3E27T1u
d1A+2HcANP2LyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:51 2026 by rpki-client