Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: v2BP4pysyIP/REM9pyWYnoix9h3jVwCP5dvT6FLpctQ=
Subject key identifier: 99:48:BD:8F:75:A5:E6:E2:58:83:E6:71:BF:03:61:77:8A:32:F7:3A
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019CAA8F5898EFCDDBCDD9D8637CFCC986E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:00:46 +0000
Manifest this update: Sun 01 Mar 2026 18:00:46 +0000
Manifest next update: Mon 02 Mar 2026 18:00:46 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: dpmP+pim7x2qQ9BFbACI9YL4rQcwt6PpeMSph5Ph8Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:58:98:ef:cd:db:cd:d9:d8:63:7c:fc:c9:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Mar 1 18:00:46 2026 GMT
Not After : Mar 2 18:00:46 2026 GMT
Subject: CN=9948bd8f75a5e6e25883e671bf0361778a32f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:49:f5:d8:31:f6:b3:65:0a:04:7d:da:c5:
7d:e7:e1:87:e6:20:55:22:26:4c:30:bd:e0:89:db:
d8:1b:bc:ba:f4:54:37:f8:e9:f5:0a:90:af:45:2c:
d5:a3:26:fe:b7:2a:03:53:7f:c3:74:4b:dd:9a:81:
1b:c5:a1:18:29:a8:31:f9:41:db:56:88:41:f8:f5:
97:73:54:fa:22:de:4b:c6:9f:4c:a6:8a:9e:56:f4:
53:ca:2b:89:2f:67:f5:69:fd:da:0c:69:76:a9:6a:
e9:90:82:f7:55:98:34:f6:61:59:18:c8:66:ea:4c:
48:42:89:71:7b:d7:fb:9f:b7:ad:69:f0:93:77:58:
01:ee:9d:be:fb:e3:1e:8e:a6:bb:c8:b3:13:c5:1f:
65:d2:bf:e1:c6:a4:f1:e6:2d:6c:28:c9:7c:96:d5:
c1:57:be:1b:5e:e7:d0:79:2a:2c:47:cb:d5:cd:21:
3e:2f:83:f1:e4:70:f3:55:e6:36:36:1c:a4:95:57:
d1:3f:e4:a7:06:1b:39:4e:34:ed:44:c3:1e:97:9b:
7a:00:1c:27:9f:e2:5a:a5:3b:bd:b2:1c:c2:86:77:
24:1d:4c:30:53:83:9a:4e:7f:76:dc:84:c9:60:33:
6e:00:14:b3:8f:da:85:48:98:b7:e8:b6:c2:18:51:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:BD:8F:75:A5:E6:E2:58:83:E6:71:BF:03:61:77:8A:32:F7:3A
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:3a:06:dd:6e:ba:d4:91:db:79:97:a4:90:bb:5f:70:0b:
a9:69:cb:2e:4a:c0:69:e1:af:32:56:ab:04:f3:79:37:3e:16:
a3:27:f0:97:30:d6:91:27:b5:b1:29:fd:e4:e9:3d:6b:3a:18:
67:34:cc:5f:74:0d:11:37:03:44:eb:b5:f8:c4:6d:60:0f:fa:
8b:42:d0:2c:61:74:03:0f:be:b7:f4:f2:9b:c1:d0:e6:0d:d0:
85:e7:b3:78:de:72:62:76:d5:59:d3:51:ef:ba:41:fe:cb:12:
ea:2b:01:d7:99:e8:50:29:2a:c2:f2:d2:1c:36:2c:3c:b0:49:
d3:bf:e2:3c:d6:6b:45:09:6d:f9:e8:10:68:43:c3:ec:1f:b1:
a1:3e:f8:fc:35:eb:1f:29:62:da:64:23:4c:e9:28:1e:6b:e1:
94:60:a0:db:47:15:99:e3:52:c9:2d:e1:79:4b:47:86:ba:0d:
87:40:d8:13:2b:11:c0:05:52:d6:cf:4a:9b:a4:63:6d:9e:b0:
5e:9b:e1:86:8e:8b:d3:66:c1:28:5f:97:54:18:6b:91:c1:be:
c4:8f:90:0e:fd:2a:ae:5a:f9:19:b4:09:7e:b9:f4:11:6a:a3:
5c:bd:a0:23:3d:f2:34:05:64:72:af:f3:bc:7f:de:18:ef:7d:
ca:e4:b1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj1iY783bzdnYY3z8yYbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1
NzA3ZGYwHhcNMjYwMzAxMTgwMDQ2WhcNMjYwMzAyMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg5OTQ4YmQ4Zjc1YTVlNmUyNTg4M2U2NzFiZjAzNjE3NzhhMzJmNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGpJ9dgx9rNlCgR92sV95+GH5iBV
IiZMML3gidvYG7y69FQ3+On1CpCvRSzVoyb+tyoDU3/DdEvdmoEbxaEYKagx+UHb
VohB+PWXc1T6It5Lxp9MpoqeVvRTyiuJL2f1af3aDGl2qWrpkIL3VZg09mFZGMhm
6kxIQolxe9f7n7etafCTd1gB7p2+++Mejqa7yLMTxR9l0r/hxqTx5i1sKMl8ltXB
V74bXufQeSosR8vVzSE+L4Px5HDzVeY2NhyklVfRP+SnBhs5TjTtRMMel5t6ABwn
n+JapTu9shzChnckHUwwU4OaTn923ITJYDNuABSzj9qFSJi36LbCGFGqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlIvY91pebiWIPmcb8DYXeKMvc6MB8GA1UdIwQY
MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt
OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj
LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaY6Bt1u
utSR23mXpJC7X3ALqWnLLkrAaeGvMlarBPN5Nz4WoyfwlzDWkSe1sSn95Ok9azoY
ZzTMX3QNETcDROu1+MRtYA/6i0LQLGF0Aw++t/Tym8HQ5g3QheezeN5yYnbVWdNR
77pB/ssS6isB15noUCkqwvLSHDYsPLBJ07/iPNZrRQlt+egQaEPD7B+xoT74/DXr
Hyli2mQjTOkoHmvhlGCg20cVmeNSyS3heUtHhroNh0DYEysRwAVS1s9Km6RjbZ6w
Xpvhho6L02bBKF+XVBhrkcG+xI+QDv0qrlr5GbQJfrn0EWqjXL2gIz3yNAVkcq/z
vH/eGO99yuSxcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:39 2026 by rpki-client