Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: +o2AV3Qk4mPM8cDzASiWLrWe4FaPLZQAObX81PCsaSo=
Subject key identifier: 88:20:E6:93:E0:CE:DF:B4:1E:C4:14:42:D0:1E:9D:37:06:0B:49:F5
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 019CAD226BC803EC59B5FBAC5FF378ED20FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 03D1
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: T5D9HY2S6rixTLZ7P5O5ckhe4Ctdz1ukXbLaGQaCtZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6b:c8:03:ec:59:b5:fb:ac:5f:f3:78:ed:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=8820e693e0cedfb41ec41442d01e9d37060b49f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:3b:e3:1a:00:e4:24:6c:ea:2e:0b:81:2b:
45:39:f0:f7:fa:79:50:59:49:b9:57:1b:c8:f6:f7:
52:e4:d3:58:61:51:6b:ad:4c:72:1f:4d:50:c3:26:
76:11:41:7a:cb:f7:91:78:6b:b2:b3:d9:3d:80:bc:
b0:d6:da:c7:da:bc:94:71:dc:08:46:e7:bf:d4:a6:
c3:40:cd:2e:0c:8a:50:ac:49:6b:81:14:3f:54:ab:
4d:c0:e8:72:ec:e4:62:14:67:84:8c:1d:a8:ad:7e:
85:3d:40:5b:d7:64:65:b2:21:be:f3:9d:4c:e4:7a:
33:1f:d2:cf:ec:06:71:39:35:28:7b:a0:ed:86:8c:
d9:21:0a:1a:bb:cd:32:ec:d6:98:9c:3a:55:3b:a1:
05:74:ec:9d:ea:f5:a1:c4:37:69:19:c1:ef:66:b0:
7d:31:df:16:35:b7:02:20:6c:bf:d7:5d:9c:59:85:
e3:e7:58:12:9b:2d:e8:34:e8:de:93:23:fb:64:88:
e2:80:3d:2f:8d:f1:33:4e:19:26:d8:30:ab:f3:86:
a2:78:6e:50:d4:48:90:e7:8e:72:b2:28:2a:67:9d:
12:69:fb:6a:65:a9:4b:22:2e:33:5f:0c:89:43:bf:
e8:36:3f:30:7d:14:09:3c:34:20:81:65:cb:cc:f1:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:E6:93:E0:CE:DF:B4:1E:C4:14:42:D0:1E:9D:37:06:0B:49:F5
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:41:ef:f2:ba:19:5c:d5:35:bf:1a:0f:de:8d:41:ab:d3:6f:
73:e6:12:fe:77:17:9f:3f:a3:e7:e4:96:9b:49:8d:1d:7e:e1:
74:aa:48:f2:47:32:99:ef:d3:c5:df:91:86:4e:37:be:77:15:
4d:8a:d0:6c:9e:3f:f0:eb:ec:6a:e6:a2:a6:18:4a:52:f3:a2:
a1:13:8d:46:a4:3f:91:64:c7:bb:1e:8e:31:4d:89:d6:33:d2:
40:cd:b3:a6:4a:b9:b9:90:53:3d:75:1d:fe:bb:39:14:6b:fe:
02:9f:c1:17:e6:a5:d3:a7:bc:ac:33:d8:e3:00:68:bf:65:da:
ec:7f:8f:45:ac:67:a0:d2:5b:9a:39:6f:c5:6b:57:5c:26:21:
8f:52:80:ab:73:7e:d3:84:64:b9:25:f5:53:79:1a:99:b7:fe:
1b:e1:59:18:e2:ba:c8:c2:e5:e0:5c:14:8a:3f:50:48:6c:e8:
61:c3:4b:64:d6:57:75:e8:61:06:8b:2d:5e:81:70:5c:53:89:
67:5b:33:93:d6:0d:0e:fc:57:c8:05:5c:0a:3d:06:f4:01:05:
3e:1f:ab:97:0d:24:ff:0a:19:01:62:64:4f:61:97:09:94:90:
0e:8c:be:bf:20:42:89:23:9f:f4:ef:ce:84:e2:f3:f9:a1:c5:
0c:c5:64:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImvIA+xZtfusX/N47SD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0
Yjc5NTAwHhcNMjYwMzAyMDYwMDM5WhcNMjYwMzAzMDYwMDM5WjAzMTEwLwYDVQQD
Eyg4ODIwZTY5M2UwY2VkZmI0MWVjNDE0NDJkMDFlOWQzNzA2MGI0OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiY74xoA5CRs6i4LgStFOfD3+nlQ
WUm5VxvI9vdS5NNYYVFrrUxyH01QwyZ2EUF6y/eReGuys9k9gLyw1trH2ryUcdwI
Rue/1KbDQM0uDIpQrElrgRQ/VKtNwOhy7ORiFGeEjB2orX6FPUBb12RlsiG+851M
5HozH9LP7AZxOTUoe6DthozZIQoau80y7NaYnDpVO6EFdOyd6vWhxDdpGcHvZrB9
Md8WNbcCIGy/112cWYXj51gSmy3oNOjekyP7ZIjigD0vjfEzThkm2DCr84aieG5Q
1EiQ545ysigqZ50SaftqZalLIi4zXwyJQ7/oNj8wfRQJPDQggWXLzPEYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgg5pPgzt+0HsQUQtAenTcGC0n1MB8GA1UdIwQY
MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct
MThjNWViZWYyN2E4LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4
LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEHv8roZ
XNU1vxoP3o1Bq9Nvc+YS/ncXnz+j5+SWm0mNHX7hdKpI8kcyme/Txd+Rhk43vncV
TYrQbJ4/8OvsauaiphhKUvOioRONRqQ/kWTHux6OMU2J1jPSQM2zpkq5uZBTPXUd
/rs5FGv+Ap/BF+al06e8rDPY4wBov2Xa7H+PRaxnoNJbmjlvxWtXXCYhj1KAq3N+
04RkuSX1U3kambf+G+FZGOK6yMLl4FwUij9QSGzoYcNLZNZXdehhBostXoFwXFOJ
Z1szk9YNDvxXyAVcCj0G9AEFPh+rlw0k/woZAWJkT2GXCZSQDoy+vyBCiSOf9O/O
hOLz+aHFDMVkfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:48 2026 by rpki-client