Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: /d8elOisRkJi8MOoBM3mX5PW3IQzdMRktbea9CS/Vdw=
Subject key identifier: 14:91:51:45:E9:D1:CB:3F:73:6F:83:FF:82:E1:F5:50:A0:86:04:8C
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019CB1DB501877D6956224DBF5412C86C6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 184C
Signing time: Tue 03 Mar 2026 04:01:05 +0000
Manifest this update: Tue 03 Mar 2026 04:01:05 +0000
Manifest next update: Wed 04 Mar 2026 04:01:05 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: vFUxZ1YDi/SIf7c1iJXuYGeJKyLo83uxQQW2Wl3fshQ=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:db:50:18:77:d6:95:62:24:db:f5:41:2c:86:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Mar 3 04:01:05 2026 GMT
Not After : Mar 4 04:01:05 2026 GMT
Subject: CN=14915145e9d1cb3f736f83ff82e1f550a086048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:61:9e:75:33:2a:d7:d9:c0:3f:e0:3b:6a:
41:4a:70:42:56:46:48:2e:92:5a:1c:fa:05:9b:4d:
cd:55:80:8e:11:f0:18:82:2f:dd:91:0b:95:96:08:
a3:f6:d1:7c:09:7e:ee:30:e8:63:8e:44:41:34:7f:
db:aa:84:97:eb:ab:d0:b8:32:34:44:08:73:24:62:
55:9f:cc:42:f8:50:45:d8:64:79:8d:70:db:bb:62:
65:cb:af:6e:e5:b8:01:fb:98:8a:41:3f:99:b3:72:
3f:dd:48:87:2c:9f:f1:98:0d:45:13:f3:92:fa:63:
57:82:9f:b8:d1:44:4b:9e:96:7b:d1:da:7e:b9:77:
9e:92:de:04:28:77:c1:36:79:c8:c6:80:aa:3a:2d:
07:b8:56:b5:65:61:4b:64:44:c5:07:cb:ce:56:bc:
b6:48:52:7c:cd:10:ef:0c:fd:40:88:a4:c0:e8:4d:
0d:06:6c:fb:1c:12:84:04:84:40:e5:11:ab:c1:09:
58:f5:1d:f0:39:28:72:08:21:22:16:13:df:d9:34:
df:dd:8d:14:6a:99:c2:d5:d5:dd:30:73:39:29:cb:
0d:1a:6f:5e:12:7e:da:da:ce:89:e9:96:9b:dc:17:
54:0c:16:21:65:67:6a:28:d3:e9:8d:98:6b:9a:7e:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:51:45:E9:D1:CB:3F:73:6F:83:FF:82:E1:F5:50:A0:86:04:8C
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:65:7e:47:91:02:02:03:37:27:26:6c:43:6e:74:4a:b8:
7d:53:c2:c2:69:6c:0d:e7:1a:26:1d:8c:99:39:2f:e4:bc:35:
fe:7f:ef:02:e4:49:c4:fd:11:7d:af:2e:53:de:c0:c3:58:fc:
f6:f8:9c:ce:c1:05:2d:7a:55:4a:80:fb:ea:0e:08:81:44:37:
f8:21:0a:9b:6d:21:32:f3:0e:8e:0f:04:23:07:93:f5:9b:90:
4d:42:f5:d0:16:c1:a6:fa:62:e0:bd:8d:68:83:a7:97:7a:37:
5d:cd:6f:3a:73:59:69:02:d2:6d:b4:42:be:40:72:fb:ed:b6:
3c:87:f3:b9:b1:7a:15:63:e0:83:e4:3f:54:56:e0:62:8b:e5:
42:f5:c2:29:b4:e0:fa:22:48:f0:1e:e2:23:47:33:6f:79:71:
d9:73:34:37:5b:00:c6:a5:db:9d:fd:5b:ef:33:0c:83:92:40:
b1:4a:f1:3e:92:46:d2:6f:11:e1:7a:ba:2a:22:c1:87:6c:d1:
18:a7:70:e1:d0:9c:91:fe:79:64:e6:1c:71:2b:8d:87:05:25:
7e:d4:f6:68:c8:88:57:ae:b6:40:55:37:c8:9b:3e:29:8f:22:
39:fe:22:39:92:a3:66:93:05:78:f5:33:dd:cf:c8:37:43:2c:
9e:4b:0e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyx21AYd9aVYiTb9UEshsbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjYwMzAzMDQwMTA1WhcNMjYwMzA0MDQwMTA1WjAzMTEwLwYDVQQD
EygxNDkxNTE0NWU5ZDFjYjNmNzM2ZjgzZmY4MmUxZjU1MGEwODYwNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUthnnUzKtfZwD/gO2pBSnBCVkZI
LpJaHPoFm03NVYCOEfAYgi/dkQuVlgij9tF8CX7uMOhjjkRBNH/bqoSX66vQuDI0
RAhzJGJVn8xC+FBF2GR5jXDbu2Jly69u5bgB+5iKQT+Zs3I/3UiHLJ/xmA1FE/OS
+mNXgp+40URLnpZ70dp+uXeekt4EKHfBNnnIxoCqOi0HuFa1ZWFLZETFB8vOVry2
SFJ8zRDvDP1AiKTA6E0NBmz7HBKEBIRA5RGrwQlY9R3wOShyCCEiFhPf2TTf3Y0U
apnC1dXdMHM5KcsNGm9eEn7a2s6J6Zab3BdUDBYhZWdqKNPpjZhrmn4pgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSRUUXp0cs/c2+D/4Lh9VCghgSMMB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHatlfkeR
AgIDNycmbENudEq4fVPCwmlsDecaJh2MmTkv5Lw1/n/vAuRJxP0Rfa8uU97Aw1j8
9viczsEFLXpVSoD76g4IgUQ3+CEKm20hMvMOjg8EIweT9ZuQTUL10BbBpvpi4L2N
aIOnl3o3Xc1vOnNZaQLSbbRCvkBy++22PIfzubF6FWPgg+Q/VFbgYovlQvXCKbTg
+iJI8B7iI0czb3lx2XM0N1sAxqXbnf1b7zMMg5JAsUrxPpJG0m8R4Xq6KiLBh2zR
GKdw4dCckf55ZOYccSuNhwUlftT2aMiIV662QFU3yJs+KY8iOf4iOZKjZpMFePUz
3c/IN0MsnksOWg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 06:57:56 2026 by rpki-client