Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: a5SDc1FZk1zMLNefdN/anpLbKFUL6qbIoHTVNJwGswo=
Subject key identifier: C3:E9:F0:40:30:40:9B:C1:AB:8F:7D:D5:59:83:86:70:B4:09:B2:9C
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019CAAC6B9B7E0670CE23547D3977EC51BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: cVlURNqZQAh6Qe1KHamU9SvF4u8.roa (hash: GimlEEISLfZZspdQqTlAmRyOG3nJltXybDu3f42C8MQ=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: SV8ePqjT2g2rx6+YMUnLCZsdFT5j+Pq5MpXAnpdRE8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b9:b7:e0:67:0c:e2:35:47:d3:97:7e:c5:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=c3e9f04030409bc1ab8f7dd559838670b409b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:0f:fa:50:b8:9d:1f:11:58:8b:20:e7:23:
e9:04:0c:68:bc:0d:e1:0a:fb:60:9c:01:ae:6b:74:
2f:ff:81:bf:2c:cc:e2:5c:b0:ac:21:47:85:74:0b:
2c:84:6b:ec:c9:45:45:6c:6e:ba:04:31:6d:49:fb:
96:c5:05:8a:3b:c0:a1:8f:f4:90:0c:56:15:89:4a:
19:7a:58:2c:7e:8d:08:16:85:f7:9d:23:50:fd:98:
16:c0:ed:2b:8a:a3:9e:9a:fa:c9:96:ec:df:70:b6:
86:95:6b:16:bb:74:10:32:67:42:63:91:9f:98:61:
51:dc:e2:01:8c:db:d8:ea:3d:34:dc:c3:ec:ee:02:
f0:4f:50:0e:2a:97:4d:75:b3:70:9d:d8:cb:a7:6e:
b1:3e:09:fd:0d:34:fc:1c:30:38:3a:a3:9e:5d:a9:
84:ff:8c:53:33:4e:0f:dc:7b:3a:4f:15:b4:20:97:
7b:21:c4:86:e6:1f:55:72:33:ec:78:cc:ea:c1:6a:
64:5d:3d:ef:a4:86:95:24:ae:b4:e0:6e:2b:00:e0:
5b:93:8c:da:2c:61:10:a2:8f:3d:c2:1e:fd:77:23:
2a:52:9d:9d:78:3f:4f:30:43:87:11:54:a5:75:f4:
2c:36:12:1e:33:e7:9f:68:07:ab:b2:6d:32:41:a0:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:F0:40:30:40:9B:C1:AB:8F:7D:D5:59:83:86:70:B4:09:B2:9C
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fa:7c:8b:8f:4b:25:05:b8:1f:1d:f6:23:ce:90:00:b6:2c:
d0:53:bd:59:a4:08:15:06:66:e8:29:e2:80:6d:8a:a4:65:a5:
51:7e:10:b8:a4:08:8e:23:35:a4:7b:d9:b6:0e:3a:00:7a:e5:
fe:bc:12:06:c1:85:0d:47:f7:f4:ec:d6:06:30:4f:48:8e:7f:
05:4f:92:56:b1:82:9c:df:8f:17:34:69:a1:cb:9e:72:e1:ff:
7d:5a:e1:44:c0:b7:63:2f:65:4a:2f:06:69:8d:97:a3:7e:44:
be:a4:31:76:92:ee:a6:cd:ec:c6:15:40:77:96:bd:38:89:5d:
73:fc:7d:0a:2e:24:d5:70:06:26:bf:f2:0c:92:ae:64:ab:1a:
69:2e:1e:c5:cf:68:66:8b:69:80:02:a8:94:d4:51:9b:28:e3:
d3:d9:2d:0e:3e:c7:0d:5e:5e:8c:b6:07:97:31:63:d2:42:9b:
89:3f:23:d6:80:4e:07:dd:3c:84:68:a8:9e:99:05:75:57:3e:
33:3a:f8:f0:57:8d:c4:56:6e:b2:c3:c5:d2:ea:5e:14:5d:75:
99:e1:ec:39:20:3e:20:65:8b:40:f5:0b:56:68:16:3a:be:b9:
2d:6a:84:c6:f2:0f:c0:63:9b:46:10:c4:f2:ee:81:0c:15:67:
5e:e8:3e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrm34GcM4jVH05d+xRu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx
MThiMmMwHhcNMjYwMzAxMTkwMTE2WhcNMjYwMzAyMTkwMTE2WjAzMTEwLwYDVQQD
EyhjM2U5ZjA0MDMwNDA5YmMxYWI4ZjdkZDU1OTgzODY3MGI0MDliMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4P+lC4nR8RWIsg5yPpBAxovA3h
CvtgnAGua3Qv/4G/LMziXLCsIUeFdAsshGvsyUVFbG66BDFtSfuWxQWKO8Chj/SQ
DFYViUoZelgsfo0IFoX3nSNQ/ZgWwO0riqOemvrJluzfcLaGlWsWu3QQMmdCY5Gf
mGFR3OIBjNvY6j003MPs7gLwT1AOKpdNdbNwndjLp26xPgn9DTT8HDA4OqOeXamE
/4xTM04P3Hs6TxW0IJd7IcSG5h9VcjPseMzqwWpkXT3vpIaVJK604G4rAOBbk4za
LGEQoo89wh79dyMqUp2deD9PMEOHEVSldfQsNhIeM+efaAersm0yQaB+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPp8EAwQJvBq4991VmDhnC0CbKcMB8GA1UdIwQY
MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt
NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk
LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPp8i49L
JQW4Hx32I86QALYs0FO9WaQIFQZm6CnigG2KpGWlUX4QuKQIjiM1pHvZtg46AHrl
/rwSBsGFDUf39OzWBjBPSI5/BU+SVrGCnN+PFzRpocuecuH/fVrhRMC3Yy9lSi8G
aY2Xo35EvqQxdpLups3sxhVAd5a9OIldc/x9Ci4k1XAGJr/yDJKuZKsaaS4exc9o
ZotpgAKolNRRmyjj09ktDj7HDV5ejLYHlzFj0kKbiT8j1oBOB908hGionpkFdVc+
Mzr48FeNxFZussPF0upeFF11meHsOSA+IGWLQPULVmgWOr65LWqExvIPwGObRhDE
8u6BDBVnXug+dQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:09 2026 by rpki-client