Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: 7JcdRlNQAU5IpSorsucFTWeq2CYOWoMAoOF1CaLisxo=
Subject key identifier: 89:33:A4:2C:CD:82:09:67:58:48:EA:1E:36:29:08:02:CB:EE:9B:5B
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019CAD59709A4C0ABF1B87A189C0B215E477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0EC7
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: XiZte+QcTZIkSmtLQ1xJj0W2K1AwBCpoIY22TN8XMBg=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:70:9a:4c:0a:bf:1b:87:a1:89:c0:b2:15:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=8933a42ccd8209675848ea1e36290802cbee9b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:df:99:1a:f1:3b:c5:4c:c7:3b:92:61:60:
72:62:4f:8e:24:30:11:ae:f1:a5:17:7a:4a:61:6b:
6e:27:29:1a:a4:67:bc:ad:49:ce:c8:81:52:45:ad:
0d:42:9a:fb:34:84:73:df:00:9b:37:75:09:24:ce:
c7:d1:e3:8f:10:53:0d:4b:cc:dc:dc:e6:5d:80:b1:
c8:50:9e:59:c7:dc:8c:90:bf:4a:f9:4f:32:da:32:
f3:53:96:45:ca:6a:16:18:58:85:e5:40:88:aa:a1:
9f:f3:93:ce:6b:9c:0f:79:b1:2e:16:f0:90:37:13:
a7:52:22:1e:c7:b4:1f:bc:43:27:73:43:b1:47:3f:
ce:cc:fd:d0:4a:71:dd:38:db:ae:c1:2a:86:21:8c:
8f:27:7c:07:42:bb:6b:31:73:6c:86:42:42:0d:eb:
29:cc:ee:ea:99:e2:11:e6:b5:78:71:94:ce:0e:68:
4b:61:71:df:ee:bc:09:e0:45:d6:ea:12:46:71:21:
fd:62:7f:46:15:1a:99:ba:3f:cf:18:b3:1c:c5:81:
f2:30:da:2f:c5:89:b5:9f:b8:f7:47:7c:37:24:0d:
d3:2d:68:5c:fc:58:ea:d8:1a:ff:4e:d8:1a:d7:41:
34:35:7e:a7:f2:dd:b3:a0:18:c3:05:da:f4:f3:9a:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:A4:2C:CD:82:09:67:58:48:EA:1E:36:29:08:02:CB:EE:9B:5B
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:4f:41:8c:3b:2b:cc:e1:d0:7b:37:26:09:c9:63:fa:2a:
d5:61:e8:23:3a:44:80:21:5c:d4:8d:0b:1a:8d:11:b6:e2:c7:
c2:46:69:53:f8:c8:d0:e0:eb:a6:43:c8:51:f3:44:ff:4e:9d:
5a:0c:b9:9f:88:d0:65:2c:9b:be:05:5c:3a:ba:c6:ed:38:d4:
c9:02:85:e5:aa:d0:69:a6:71:25:1e:97:0b:bb:1d:33:f0:25:
cb:58:01:a4:e2:3f:6b:7c:04:a6:0b:78:2f:71:fc:c1:fb:d9:
94:37:ec:20:56:5f:96:e9:47:76:b7:9e:d3:20:4c:1b:1a:8b:
d5:19:7b:d1:e5:57:35:86:08:d1:00:f2:20:1f:a0:89:2b:53:
d6:ed:44:02:c0:c3:2d:f8:0a:33:a9:c4:00:c2:5e:18:b2:39:
b9:68:f8:33:c5:1b:52:60:d2:92:ef:88:6c:2f:6f:0a:5d:29:
0e:20:34:8f:91:ad:e5:d0:82:af:27:3e:96:6a:39:a1:f1:20:
a0:b7:75:ae:91:f6:5c:d0:02:90:63:cc:9f:be:48:ab:90:4f:
25:80:6e:db:14:d4:c6:ba:cb:b4:76:a5:e5:e9:b6:4d:e6:b0:
ec:4b:70:36:7a:54:fe:13:5d:ee:6c:d0:46:4b:c5:4c:5a:57:
36:a1:d8:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWXCaTAq/G4ehicCyFeR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy
MmU4OGYwHhcNMjYwMzAyMDcwMDQ1WhcNMjYwMzAzMDcwMDQ1WjAzMTEwLwYDVQQD
Eyg4OTMzYTQyY2NkODIwOTY3NTg0OGVhMWUzNjI5MDgwMmNiZWU5YjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8TfmRrxO8VMxzuSYWByYk+OJDAR
rvGlF3pKYWtuJykapGe8rUnOyIFSRa0NQpr7NIRz3wCbN3UJJM7H0eOPEFMNS8zc
3OZdgLHIUJ5Zx9yMkL9K+U8y2jLzU5ZFymoWGFiF5UCIqqGf85POa5wPebEuFvCQ
NxOnUiIex7QfvEMnc0OxRz/OzP3QSnHdONuuwSqGIYyPJ3wHQrtrMXNshkJCDesp
zO7qmeIR5rV4cZTODmhLYXHf7rwJ4EXW6hJGcSH9Yn9GFRqZuj/PGLMcxYHyMNov
xYm1n7j3R3w3JA3TLWhc/Fjq2Br/Ttga10E0NX6n8t2zoBjDBdr085paQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkzpCzNgglnWEjqHjYpCALL7ptbMB8GA1UdIwQY
MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt
ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz
LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU1PQYw7
K8zh0Hs3JgnJY/oq1WHoIzpEgCFc1I0LGo0RtuLHwkZpU/jI0ODrpkPIUfNE/06d
Wgy5n4jQZSybvgVcOrrG7TjUyQKF5arQaaZxJR6XC7sdM/Aly1gBpOI/a3wEpgt4
L3H8wfvZlDfsIFZflulHdree0yBMGxqL1Rl70eVXNYYI0QDyIB+giStT1u1EAsDD
LfgKM6nEAMJeGLI5uWj4M8UbUmDSku+IbC9vCl0pDiA0j5Gt5dCCryc+lmo5ofEg
oLd1rpH2XNACkGPMn75Iq5BPJYBu2xTUxrrLtHal5em2Teaw7EtwNnpU/hNd7mzQ
RkvFTFpXNqHYSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:47 2026 by rpki-client