Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: aBXSLA2l8VGLF3h4g7Qjy3rcPFw0uDUzfM6bdWPWENk=
Subject key identifier: C3:9B:5C:4D:86:08:31:3A:B9:4A:FB:7C:7E:42:33:EB:BA:F2:CF:2A
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019CACB5121EC5F10CE0EF61888E384F1DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 166A
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: JHVs+fgpfjSZ8yymqi1ib6pUzYR3KFALgP8lxJ2X4Fc=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:12:1e:c5:f1:0c:e0:ef:61:88:8e:38:4f:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=c39b5c4d8608313ab94afb7c7e4233ebbaf2cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:f8:ee:7b:f2:0e:13:55:95:b3:9b:36:d1:
a7:6e:4a:bb:d4:22:fc:8f:00:f0:d3:b1:94:48:5c:
05:dd:af:cc:df:ea:36:fb:17:2c:05:8e:a8:0d:2e:
bb:b3:f9:97:c9:c0:e4:e8:73:06:55:cd:bd:34:ef:
ff:de:e2:a7:b3:df:1c:c1:47:c4:c4:b6:1a:fe:03:
75:3d:95:49:35:25:9e:a8:23:69:85:c1:c1:d9:3f:
02:da:ff:03:2b:51:d6:d9:e5:9c:87:31:ff:7c:24:
8e:0d:94:28:c8:20:2c:d4:49:fe:02:8b:88:62:2d:
a3:44:6d:8f:59:0d:de:1a:e5:20:55:90:58:d6:2f:
81:47:96:a4:62:09:86:24:cf:ae:8e:39:a4:fb:eb:
f7:65:07:b4:6d:49:26:46:f6:6c:3b:04:d9:27:e3:
97:7d:d3:be:7d:76:da:66:4e:41:52:0f:f6:34:28:
61:ca:11:40:7a:f5:54:8b:e0:33:59:6a:c6:50:3e:
6e:98:96:97:59:c2:62:18:cf:15:a5:8c:12:3f:40:
b0:1d:1c:51:74:0d:82:84:c3:74:96:84:c8:52:a3:
99:de:d2:a9:91:52:b1:b7:a8:32:24:82:6f:b0:8d:
cb:2b:73:3b:34:e9:7a:5e:cb:f1:e0:ad:af:da:5c:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:5C:4D:86:08:31:3A:B9:4A:FB:7C:7E:42:33:EB:BA:F2:CF:2A
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:9c:b2:d8:ae:14:40:7a:1c:4a:17:54:53:6a:00:3b:10:
94:82:61:eb:4d:2e:79:dd:49:41:4e:cb:f9:60:c1:d9:ef:63:
8c:00:a9:47:d8:f1:5c:05:b3:48:2a:42:94:fc:ef:07:49:1d:
ef:bc:d7:b2:93:fd:a5:3d:60:ea:5c:dd:bc:95:32:0d:72:2a:
0f:54:55:df:af:60:7e:c2:2d:f0:24:51:ed:f6:40:b3:c2:2d:
07:b6:1c:bc:3c:f3:cb:66:90:7e:65:e6:e0:93:02:a3:dc:29:
76:fd:e6:68:0e:ec:dd:43:a0:bb:c6:b3:76:d6:a2:ab:7b:a2:
9e:26:a9:05:86:4a:d5:76:a3:0c:1e:06:0b:7a:b7:c3:80:dd:
9d:e4:5c:68:f0:cf:80:13:4d:0a:d3:d5:3d:53:31:c6:81:3d:
d4:15:1e:86:66:b8:78:cd:da:d9:ca:b8:f2:d9:7d:15:d5:70:
c6:94:d9:eb:f9:32:66:6e:36:35:99:76:c5:05:60:6f:63:3e:
eb:1c:41:88:11:0d:92:13:ab:87:8a:9b:1d:da:a8:55:2c:eb:
5b:1e:4b:4f:f4:4e:08:59:da:05:c7:9a:30:80:ef:2a:c1:77:
54:89:1c:f8:2a:de:37:8f:18:ae:65:00:e9:4b:cd:fb:4c:63:
a4:6f:f2:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystRIexfEM4O9hiI44Tx38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjYwMzAyMDQwMTEzWhcNMjYwMzAzMDQwMTEzWjAzMTEwLwYDVQQD
EyhjMzliNWM0ZDg2MDgzMTNhYjk0YWZiN2M3ZTQyMzNlYmJhZjJjZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnL47nvyDhNVlbObNtGnbkq71CL8
jwDw07GUSFwF3a/M3+o2+xcsBY6oDS67s/mXycDk6HMGVc29NO//3uKns98cwUfE
xLYa/gN1PZVJNSWeqCNphcHB2T8C2v8DK1HW2eWchzH/fCSODZQoyCAs1En+AouI
Yi2jRG2PWQ3eGuUgVZBY1i+BR5akYgmGJM+ujjmk++v3ZQe0bUkmRvZsOwTZJ+OX
fdO+fXbaZk5BUg/2NChhyhFAevVUi+AzWWrGUD5umJaXWcJiGM8VpYwSP0CwHRxR
dA2ChMN0loTIUqOZ3tKpkVKxt6gyJIJvsI3LK3M7NOl6Xsvx4K2v2lzl0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMObXE2GCDE6uUr7fH5CM+u68s8qMB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEamcstiu
FEB6HEoXVFNqADsQlIJh600ued1JQU7L+WDB2e9jjACpR9jxXAWzSCpClPzvB0kd
77zXspP9pT1g6lzdvJUyDXIqD1RV369gfsIt8CRR7fZAs8ItB7YcvDzzy2aQfmXm
4JMCo9wpdv3maA7s3UOgu8azdtaiq3uiniapBYZK1XajDB4GC3q3w4DdneRcaPDP
gBNNCtPVPVMxxoE91BUehma4eM3a2cq48tl9FdVwxpTZ6/kyZm42NZl2xQVgb2M+
6xxBiBENkhOrh4qbHdqoVSzrWx5LT/ROCFnaBceaMIDvKsF3VIkc+CreN48YrmUA
6UvN+0xjpG/yBg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:31 2026 by rpki-client