Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: y+bm7uyCyO2OAoVLRzwrVVxmhq5zDfvzGuQWoCU7sz8=
Subject key identifier: 1C:67:2D:CA:7A:37:27:BF:9A:5C:94:D1:00:B8:46:C4:F3:2E:CC:12
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 019CA97CFD27B9D37E971CD10DD9FB983E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 08BC
Signing time: Sun 01 Mar 2026 13:01:06 +0000
Manifest this update: Sun 01 Mar 2026 13:01:06 +0000
Manifest next update: Mon 02 Mar 2026 13:01:06 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: QpO9hmpclq3T1UWtdChbJ++RRj2nQWuh27GhNw4n+b8=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:fd:27:b9:d3:7e:97:1c:d1:0d:d9:fb:98:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Mar 1 13:01:06 2026 GMT
Not After : Mar 2 13:01:06 2026 GMT
Subject: CN=1c672dca7a3727bf9a5c94d100b846c4f32ecc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:c1:fd:73:72:cc:dd:f9:50:00:e5:70:07:
fd:39:bf:5e:2e:60:77:22:4a:0e:40:ad:8d:51:06:
d2:09:79:d6:85:57:77:ee:29:ec:d4:a8:60:2d:99:
84:58:09:60:c4:1e:8b:5a:50:99:cf:18:7a:99:87:
58:fc:8e:95:0e:13:2d:7f:8f:23:bb:7e:97:fb:8f:
01:a4:04:b8:0d:c3:22:07:2a:78:54:8e:61:78:3e:
77:6f:ca:d6:83:e9:44:50:ca:2a:51:45:e4:5f:10:
d2:8e:88:9b:0e:ba:da:d9:f7:ef:6f:b2:b3:83:c8:
b7:13:60:ec:c6:ea:51:ee:82:80:33:da:69:71:a0:
a0:7a:7e:f5:ba:72:e9:ac:4e:cb:25:6a:87:79:35:
25:ae:ff:4e:ee:36:77:cd:e8:f1:05:61:9e:bd:85:
6d:0f:74:6b:38:8e:e4:09:20:8d:b7:9a:50:62:dd:
5f:3c:62:f4:08:f4:71:12:87:0e:bb:c7:8a:4c:f0:
a4:cd:b4:66:7c:30:ff:64:a0:15:99:f6:32:53:6b:
61:56:00:c8:90:7b:00:0c:78:b2:ee:77:13:52:36:
c2:8b:6c:29:6d:9f:84:5e:07:2e:32:4b:4c:20:9e:
14:74:0f:71:f5:f0:6f:3d:a6:ab:3f:ac:50:61:e4:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:2D:CA:7A:37:27:BF:9A:5C:94:D1:00:B8:46:C4:F3:2E:CC:12
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2b:fa:ac:bc:fa:ac:36:02:7a:3e:62:33:60:56:88:e2:ed:
2b:e5:38:71:d0:2e:88:62:9d:47:09:7d:f5:35:f0:29:05:17:
bb:31:05:2a:b4:d7:e6:18:d8:7d:fb:fa:ec:2e:34:57:de:33:
e1:4a:64:ae:ce:16:87:59:e4:48:87:2c:9e:d3:ec:92:fc:55:
ac:9b:68:2d:d3:e8:a2:74:b1:13:25:38:f1:fd:2e:d8:a6:77:
23:3c:32:f8:e2:88:59:f1:41:f8:eb:3a:d0:b8:2e:f7:a8:4f:
7a:bb:77:77:5f:26:be:9f:4c:6b:11:48:79:1b:96:b3:58:28:
16:cc:f1:6b:4d:c6:2b:41:5d:8e:4c:09:d4:67:48:69:7e:70:
b5:0a:38:ee:5f:ab:53:47:fd:64:bf:4f:9f:ee:6f:3c:32:b5:
39:d7:ab:82:bd:d2:d9:b4:eb:f9:eb:20:9e:40:fd:64:d8:f8:
f9:74:ea:0e:f9:33:f7:d8:74:33:22:89:37:35:ca:05:66:22:
f4:cb:0e:02:ab:f8:56:42:60:dd:09:5b:2d:96:97:e0:16:ee:
ec:77:09:df:92:0f:75:e7:ac:9b:e9:a3:79:68:ac:08:d7:d5:
39:b2:29:4e:be:3d:c7:19:fe:77:41:8a:31:69:bf:8f:59:7e:
49:1e:bf:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfP0nudN+lxzRDdn7mD6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhY2YzZGNjZWEzMTdlMzVlNzA1NDFhNDhiMjU4NmE0ZDMy
YmQ5NGMwHhcNMjYwMzAxMTMwMTA2WhcNMjYwMzAyMTMwMTA2WjAzMTEwLwYDVQQD
EygxYzY3MmRjYTdhMzcyN2JmOWE1Yzk0ZDEwMGI4NDZjNGYzMmVjYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9XB/XNyzN35UADlcAf9Ob9eLmB3
IkoOQK2NUQbSCXnWhVd37ins1KhgLZmEWAlgxB6LWlCZzxh6mYdY/I6VDhMtf48j
u36X+48BpAS4DcMiByp4VI5heD53b8rWg+lEUMoqUUXkXxDSjoibDrra2ffvb7Kz
g8i3E2DsxupR7oKAM9ppcaCgen71unLprE7LJWqHeTUlrv9O7jZ3zejxBWGevYVt
D3RrOI7kCSCNt5pQYt1fPGL0CPRxEocOu8eKTPCkzbRmfDD/ZKAVmfYyU2thVgDI
kHsADHiy7ncTUjbCi2wpbZ+EXgcuMktMIJ4UdA9x9fBvPaarP6xQYeTVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxnLcp6Nye/mlyU0QC4RsTzLswSMB8GA1UdIwQY
MBaAFArPPczqMX415wVBpIslhqTTK9lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yMWJiZjctY2JmMi00MTk4LWFmY2Mt
NGJlNGRkNmNkMmVjLzEvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yMWJiZjctY2JmMi00MTk4LWFmY2MtNGJlNGRkNmNkMmVj
LzEvQ3M4OXpPb3hmalhuQlVHa2l5V0dwTk1yMlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyv6rLz6
rDYCej5iM2BWiOLtK+U4cdAuiGKdRwl99TXwKQUXuzEFKrTX5hjYffv67C40V94z
4Upkrs4Wh1nkSIcsntPskvxVrJtoLdPoonSxEyU48f0u2KZ3Izwy+OKIWfFB+Os6
0Lgu96hPert3d18mvp9MaxFIeRuWs1goFszxa03GK0FdjkwJ1GdIaX5wtQo47l+r
U0f9ZL9Pn+5vPDK1Odergr3S2bTr+esgnkD9ZNj4+XTqDvkz99h0MyKJNzXKBWYi
9MsOAqv4VkJg3QlbLZaX4Bbu7HcJ35IPdeesm+mjeWisCNfVObIpTr49xxn+d0GK
MWm/j1l+SR6/mA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:54 2026 by rpki-client