Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: xD/rnYGXhiaYc5BALUI3xZbXoKohSP/31is9wyTuR3g=
Subject key identifier: 18:D9:4A:BD:59:F7:9A:D4:96:7B:65:9F:7A:1A:57:B7:CF:8C:88:32
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 019CAA585475B1DCBE144544DE3F2006C018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: FpPhQAsGevZiavtvaaBnhfcRjXybnbvj5c9t8cZyl5s=)
2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:54:75:b1:dc:be:14:45:44:de:3f:20:06:c0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=18d94abd59f79ad4967b659f7a1a57b7cf8c8832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:75:1f:a1:7b:14:d3:94:65:2e:b0:c6:cb:
a5:39:eb:a6:ba:01:bc:a2:fe:30:90:32:f5:3c:20:
ae:28:4c:58:6d:16:30:54:57:8e:ff:ac:a4:c1:d2:
ca:f8:29:78:b4:ea:88:e7:90:c0:12:42:3e:27:ed:
36:a5:a5:07:e1:16:b2:0c:45:6c:72:0d:bf:0c:e3:
15:32:e0:ad:46:12:fe:c9:ac:c4:7c:61:f1:e0:aa:
c7:cc:83:9c:b2:2f:f8:a9:bb:e1:d1:f5:d1:2f:12:
22:1c:4d:5b:c2:e7:02:4a:ee:4a:80:cb:d4:be:91:
cd:52:fa:be:55:f0:ea:ef:78:a7:69:e1:04:e3:aa:
23:1c:69:ce:50:c3:86:7d:cc:30:84:73:9d:c3:0d:
86:d0:01:d6:27:c1:5a:b2:9a:78:d3:29:38:c6:f2:
29:04:74:aa:be:66:7f:98:69:33:36:96:3c:c5:69:
e1:91:8a:f5:c9:90:05:5a:c4:d8:77:fc:74:69:1e:
c3:01:de:47:16:2a:ea:df:56:94:6b:22:8e:41:2f:
64:7d:bd:d9:ca:3c:2f:7d:b5:b3:88:66:88:a8:33:
e6:67:4d:a3:72:dc:25:4e:b9:2f:dd:ac:b7:f9:af:
08:3b:ae:2b:9f:46:9b:a5:23:88:4d:fe:9d:9a:28:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:4A:BD:59:F7:9A:D4:96:7B:65:9F:7A:1A:57:B7:CF:8C:88:32
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:aa:5c:85:43:af:03:61:a8:8c:f8:2b:ad:f7:1c:6d:e6:
19:0d:ea:68:c5:a4:a5:26:94:6e:4c:1c:0f:22:9b:33:d4:ce:
43:30:67:8b:b7:5b:72:a5:0a:bc:8e:53:7d:cf:04:db:7e:8c:
1e:7b:58:ea:47:e0:84:00:66:d1:62:0a:20:4b:99:a8:ef:5a:
91:e1:3d:6c:88:dd:c9:04:1f:c2:07:b4:78:5c:49:19:6d:71:
d0:a5:ca:f6:b9:4f:3a:22:b4:98:76:e6:7c:10:93:db:d8:20:
34:c8:07:8d:38:e9:65:da:d1:e2:e0:a3:bc:e4:c0:53:48:48:
7e:0d:42:ea:d2:98:32:f7:3b:a2:06:d4:c8:7b:f8:ef:40:b2:
39:77:5e:f1:69:94:3f:84:fe:cb:7e:e3:de:2e:4f:a9:9a:ad:
65:32:16:6c:f7:6b:15:a5:fa:14:35:25:9f:e0:5f:ce:b1:0c:
34:0c:06:b1:2b:06:86:b4:17:8f:75:79:ca:b6:13:24:27:0b:
3d:53:7f:09:b4:bb:62:0b:4d:43:3a:b2:67:84:6c:c3:32:77:
fa:52:1b:9c:37:ce:19:ff:71:19:e4:29:0e:79:49:20:d9:4b:
08:47:60:84:42:c6:f7:1e:be:5b:d2:6f:95:63:09:b9:ad:37:
64:11:5f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFR1sdy+FEVE3j8gBsAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl
ZTBkMWUwHhcNMjYwMzAxMTcwMDQxWhcNMjYwMzAyMTcwMDQxWjAzMTEwLwYDVQQD
EygxOGQ5NGFiZDU5Zjc5YWQ0OTY3YjY1OWY3YTFhNTdiN2NmOGM4ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+F1H6F7FNOUZS6wxsulOeumugG8
ov4wkDL1PCCuKExYbRYwVFeO/6ykwdLK+Cl4tOqI55DAEkI+J+02paUH4RayDEVs
cg2/DOMVMuCtRhL+yazEfGHx4KrHzIOcsi/4qbvh0fXRLxIiHE1bwucCSu5KgMvU
vpHNUvq+VfDq73inaeEE46ojHGnOUMOGfcwwhHOdww2G0AHWJ8Faspp40yk4xvIp
BHSqvmZ/mGkzNpY8xWnhkYr1yZAFWsTYd/x0aR7DAd5HFirq31aUayKOQS9kfb3Z
yjwvfbWziGaIqDPmZ02jctwlTrkv3ay3+a8IO64rn0abpSOITf6dmig2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjZSr1Z95rUlntln3oaV7fPjIgyMB8GA1UdIwQY
MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt
NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy
LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4uqXIVD
rwNhqIz4K633HG3mGQ3qaMWkpSaUbkwcDyKbM9TOQzBni7dbcqUKvI5Tfc8E236M
HntY6kfghABm0WIKIEuZqO9akeE9bIjdyQQfwge0eFxJGW1x0KXK9rlPOiK0mHbm
fBCT29ggNMgHjTjpZdrR4uCjvOTAU0hIfg1C6tKYMvc7ogbUyHv470CyOXde8WmU
P4T+y37j3i5PqZqtZTIWbPdrFaX6FDUln+BfzrEMNAwGsSsGhrQXj3V5yrYTJCcL
PVN/CbS7YgtNQzqyZ4RswzJ3+lIbnDfOGf9xGeQpDnlJINlLCEdghELG9x6+W9Jv
lWMJua03ZBFfow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:32 2026 by rpki-client