Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: QTK3iCmlMIyFsSO0HNQhn/IevEVsSQqZpCimGaXGw3c=
Subject key identifier: 90:00:87:0F:06:DA:FE:88:D6:7D:AF:DD:25:67:9B:9B:83:86:70:4F
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 019CABD93A341EFB041CAC9D1B9969D359FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa (hash: FunMB/X94eHRJVpgjb/DKK3OKKV8NdcYckDgjUBxDNs=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: L+50c/b9LEUbWKZ+oOm2D+XG7JXjjQvi5hhOxyWic/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3a:34:1e:fb:04:1c:ac:9d:1b:99:69:d3:59:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=9000870f06dafe88d67dafdd25679b9b8386704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:02:82:b5:58:7e:d6:6b:65:cc:96:7a:34:
23:f4:75:c5:e4:14:06:2a:9d:9b:3f:bc:e1:dc:c0:
d8:2f:40:45:6a:ea:45:2d:d4:52:88:9b:6c:2a:bf:
b6:d1:6f:39:5d:8a:34:c4:f6:c7:59:89:8a:46:6b:
e3:e2:17:95:d5:67:97:94:05:fc:70:a6:26:57:2e:
f9:97:a1:b6:d7:a1:1a:43:5e:3f:9a:e0:60:0a:a2:
15:fe:db:a4:9a:63:b4:27:72:ff:b0:35:b3:af:3b:
73:37:74:33:cb:ea:de:ef:4e:e9:e2:76:cd:8f:64:
8e:e7:60:e7:b4:bd:73:c0:9a:aa:34:c3:7b:96:8f:
17:78:72:83:01:26:02:8b:96:07:85:62:30:55:20:
a0:5a:0f:77:09:c2:01:bf:fc:a3:8d:bd:55:28:06:
44:a8:ce:f2:15:1b:60:8d:b8:1b:67:32:b5:e8:ab:
aa:10:02:7b:4f:d2:bd:c6:9b:89:b4:63:e6:38:3f:
4a:37:ed:b0:b6:cc:91:a9:d1:a0:df:42:51:11:11:
dd:fe:bd:9d:ff:49:c3:f2:92:0a:c8:34:0c:05:59:
4e:f9:34:ed:89:3c:c2:7b:62:14:89:b9:00:92:f1:
97:e4:6a:7d:26:aa:48:a8:e4:24:52:ab:b6:24:8f:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:87:0F:06:DA:FE:88:D6:7D:AF:DD:25:67:9B:9B:83:86:70:4F
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:c1:20:6e:d7:65:91:3b:b0:e3:a3:58:ce:c3:5a:8f:ea:
01:4b:5b:d8:d3:48:33:68:0e:76:86:51:02:be:ea:f1:20:c3:
91:17:14:b1:55:89:f3:3f:a7:11:7f:f7:14:83:62:28:f6:52:
b7:57:59:af:fa:16:53:68:24:bd:27:c0:d4:9b:46:a8:b6:e6:
ef:d3:78:91:04:c4:d5:f3:63:8e:b1:da:33:78:d9:04:e5:3f:
e4:e6:e0:4f:76:ee:c1:8b:77:b7:f4:b9:8d:29:1c:34:3c:ce:
f7:25:83:91:69:2d:a9:88:fd:f4:f0:1e:c5:c2:78:63:da:fe:
5b:73:ef:5f:38:fb:1c:a9:6e:90:00:58:6f:31:a9:ab:ef:73:
00:d5:a4:cd:1b:e4:8f:f9:58:7b:c8:cf:c0:8a:4f:c0:d0:95:
60:e6:d9:66:a4:97:2a:bc:f9:4c:76:07:d3:38:0a:ea:78:57:
a0:82:88:a2:d6:67:6a:3e:70:c8:59:64:a8:0f:91:76:51:ef:
b4:74:5a:49:f9:ff:ff:54:e8:47:e7:06:79:4c:96:5a:4f:0c:
60:eb:fc:54:48:02:80:5b:af:7c:d0:66:db:0e:c4:a3:1a:29:
94:3d:41:c6:3a:6b:4e:ab:fd:d0:37:4a:97:fd:5f:08:3c:9e:
3f:86:88:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2To0HvsEHKydG5lp01n+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NjU2NzMzNGUwMzU2MzlkZDdjY2I0OTc2YTliMjcwZjcy
NjMyMWQwHhcNMjYwMzAyMDAwMTA2WhcNMjYwMzAzMDAwMTA2WjAzMTEwLwYDVQQD
Eyg5MDAwODcwZjA2ZGFmZTg4ZDY3ZGFmZGQyNTY3OWI5YjgzODY3MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWQCgrVYftZrZcyWejQj9HXF5BQG
Kp2bP7zh3MDYL0BFaupFLdRSiJtsKr+20W85XYo0xPbHWYmKRmvj4heV1WeXlAX8
cKYmVy75l6G216EaQ14/muBgCqIV/tukmmO0J3L/sDWzrztzN3Qzy+re707p4nbN
j2SO52DntL1zwJqqNMN7lo8XeHKDASYCi5YHhWIwVSCgWg93CcIBv/yjjb1VKAZE
qM7yFRtgjbgbZzK16KuqEAJ7T9K9xpuJtGPmOD9KN+2wtsyRqdGg30JRERHd/r2d
/0nD8pIKyDQMBVlO+TTtiTzCe2IUibkAkvGX5Gp9JqpIqOQkUqu2JI91uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAAhw8G2v6I1n2v3SVnm5uDhnBPMB8GA1UdIwQY
MBaAFFdlZzNOA1Y53XzLSXapsnD3JjIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt
ZTRmNjRiMGRlMzZhLzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh
LzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0bBIG7X
ZZE7sOOjWM7DWo/qAUtb2NNIM2gOdoZRAr7q8SDDkRcUsVWJ8z+nEX/3FINiKPZS
t1dZr/oWU2gkvSfA1JtGqLbm79N4kQTE1fNjjrHaM3jZBOU/5ObgT3buwYt3t/S5
jSkcNDzO9yWDkWktqYj99PAexcJ4Y9r+W3PvXzj7HKlukABYbzGpq+9zANWkzRvk
j/lYe8jPwIpPwNCVYObZZqSXKrz5THYH0zgK6nhXoIKIotZnaj5wyFlkqA+RdlHv
tHRaSfn//1ToR+cGeUyWWk8MYOv8VEgCgFuvfNBm2w7EoxoplD1BxjprTqv90DdK
l/1fCDyeP4aIWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:49 2026 by rpki-client