Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: ZBFcBj+FpPBy57tzg/LncR1cCL5y3zsZffVckr3gckI=
Subject key identifier: D5:40:D1:B7:D3:82:D0:54:40:A6:D9:F4:A9:F0:36:19:5B:DC:39:10
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019CAA58DAFBF9FE43E843A51D9DBB56C71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 090D
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: SnvbVJWWhUx/3AVPHmQLEwraIs00K6s0hcikxNomKnY=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:da:fb:f9:fe:43:e8:43:a5:1d:9d:bb:56:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=d540d1b7d382d05440a6d9f4a9f036195bdc3910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:3e:87:57:0e:0f:ef:6e:10:8f:45:e5:1b:
47:82:ec:38:6d:30:4c:a1:44:6d:55:8d:46:53:ff:
9f:34:66:4d:a7:73:d6:af:b1:71:c0:a2:e4:83:c9:
12:ba:56:d0:cd:14:54:de:c8:46:1c:8b:67:fe:3d:
57:e8:c1:76:c3:89:d7:fe:35:5d:c6:5e:16:06:19:
54:65:ab:23:3b:26:9e:70:1b:a9:fd:ce:88:fc:c6:
5c:44:05:ed:87:04:80:ea:26:5c:a1:0d:5b:2f:4f:
7b:f4:db:cd:47:62:65:b7:07:37:0a:15:b0:ac:b8:
6d:ac:c5:3b:9e:6b:5c:51:39:c7:16:7a:f6:ac:a8:
c1:b3:24:8a:94:3e:6c:4d:77:61:ca:7c:54:fd:f2:
32:0a:f5:2e:ca:a2:9c:f4:67:0e:60:59:4a:34:1d:
35:0c:43:b0:5d:b6:c0:16:82:44:00:e1:ea:41:89:
8d:41:40:61:41:55:23:71:36:ef:01:5a:de:d5:be:
b3:61:25:c7:eb:e5:05:05:b7:e8:87:a2:b5:15:6e:
e5:2b:5d:b2:84:9d:dd:c6:87:bb:4e:5e:c1:06:b8:
24:d6:56:d1:a7:40:bd:1e:b3:00:5a:94:99:ec:c2:
23:c4:3f:9b:e7:29:d8:30:d4:80:97:c6:39:e2:ba:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:D1:B7:D3:82:D0:54:40:A6:D9:F4:A9:F0:36:19:5B:DC:39:10
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:94:52:0b:4a:0d:59:f1:f1:2d:f0:e7:f8:9c:83:b0:b7:
5c:da:d6:3e:f9:fa:b4:6f:8a:0f:95:5f:2f:d5:72:76:d2:29:
4b:41:5d:e0:1c:11:77:df:59:18:b8:5e:35:4a:13:71:e1:ea:
fe:32:df:f0:cc:e6:77:9c:c6:2b:ba:84:2f:8e:ef:8a:5e:1d:
b8:97:5c:17:50:3f:4d:5a:66:92:7c:1a:b1:03:17:80:da:d4:
2f:b6:6f:5f:fb:97:67:fe:41:bc:d5:6a:cd:05:9e:1c:63:02:
03:7e:fd:ee:5e:76:70:1f:00:ce:f8:18:e1:b4:b9:80:42:ff:
55:21:51:e3:3d:df:dc:e5:3f:1b:cc:b9:e8:13:b5:f3:f6:54:
f4:6b:3c:28:15:b4:94:8e:23:3d:51:16:11:a4:2f:79:a5:68:
ca:d6:75:d9:2e:d2:82:c9:89:35:c2:5f:73:8a:81:90:e4:b6:
f2:47:5f:16:b6:db:da:93:d0:ca:4a:3b:e6:69:63:f5:51:bd:
72:08:4b:47:84:6f:f0:fc:3b:4c:42:82:ab:63:82:6e:a0:27:
c7:2f:ac:ab:b3:4d:49:17:af:da:e6:6e:c1:93:93:46:14:28:
6c:8d:20:38:60:1e:88:db:b5:1a:9a:a1:de:a6:79:8b:54:21:
ea:d8:9a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNr7+f5D6EOlHZ27VscfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzM4MWY1M2YyNWRiYzJhMGVmYWJmODg5ZmNhMzI0MTk5
NThkZDAwHhcNMjYwMzAxMTcwMTE1WhcNMjYwMzAyMTcwMTE1WjAzMTEwLwYDVQQD
EyhkNTQwZDFiN2QzODJkMDU0NDBhNmQ5ZjRhOWYwMzYxOTViZGMzOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU0+h1cOD+9uEI9F5RtHguw4bTBM
oURtVY1GU/+fNGZNp3PWr7FxwKLkg8kSulbQzRRU3shGHItn/j1X6MF2w4nX/jVd
xl4WBhlUZasjOyaecBup/c6I/MZcRAXthwSA6iZcoQ1bL0979NvNR2Jltwc3ChWw
rLhtrMU7nmtcUTnHFnr2rKjBsySKlD5sTXdhynxU/fIyCvUuyqKc9GcOYFlKNB01
DEOwXbbAFoJEAOHqQYmNQUBhQVUjcTbvAVre1b6zYSXH6+UFBbfoh6K1FW7lK12y
hJ3dxoe7Tl7BBrgk1lbRp0C9HrMAWpSZ7MIjxD+b5ynYMNSAl8Y54rolmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVA0bfTgtBUQKbZ9KnwNhlb3DkQMB8GA1UdIwQY
MBaAFP/DgfU/JdvCoO+r+In8oyQZlY3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDkt
NmZlMzQ4MDVhNmM2LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNjRlNDItYjlkZS00YzY2LTllZDktNmZlMzQ4MDVhNmM2
LzEvXzhPQjlUOGwyOEtnNzZ2NGlmeWpKQm1WamRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7aUUgtK
DVnx8S3w5/icg7C3XNrWPvn6tG+KD5VfL9VydtIpS0Fd4BwRd99ZGLheNUoTceHq
/jLf8Mzmd5zGK7qEL47vil4duJdcF1A/TVpmknwasQMXgNrUL7ZvX/uXZ/5BvNVq
zQWeHGMCA3797l52cB8AzvgY4bS5gEL/VSFR4z3f3OU/G8y56BO18/ZU9Gs8KBW0
lI4jPVEWEaQveaVoytZ12S7SgsmJNcJfc4qBkOS28kdfFrbb2pPQyko75mlj9VG9
cghLR4Rv8Pw7TEKCq2OCbqAnxy+sq7NNSRev2uZuwZOTRhQobI0gOGAeiNu1Gpqh
3qZ5i1Qh6tiaxQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:39 2026 by rpki-client