Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File: aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier: jzRMzm7GG26wDn0jkfBnq/Tz7KCH1ZL7NsUroHEU3CY=
Subject key identifier: 4E:74:19:E6:05:BC:0C:40:6E:B1:E0:EF:3B:AA:98:3A:0A:CC:1D:00
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 019CAA5895B04CCBE979D532714A76A9663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number: 0666
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: 21nHooBv9-ktSOOtF_rf9bEr-vE.roa (hash: he2BZP3IQjID9ExBYsw3YnUeSyPctJDJvetlHZilXvY=)
2: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: WdL29ogjkb68ky6bAORW+5VmS9QODZoHsC5u0JnFchs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:95:b0:4c:cb:e9:79:d5:32:71:4a:76:a9:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=4e7419e605bc0c406eb1e0ef3baa983a0acc1d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:04:e7:52:52:a4:5a:6e:b8:06:46:33:30:
1f:84:5c:bf:86:c5:34:7a:da:67:f0:f4:b9:b6:8c:
bb:b0:e6:35:12:ca:c9:e9:63:eb:80:af:e9:b5:b2:
f4:8e:2b:af:d0:59:55:ae:88:3d:89:a4:7f:a4:90:
b4:93:6a:46:41:a7:0d:b4:6a:0b:69:66:03:b3:25:
70:01:24:7f:06:f2:a9:8a:a3:40:f8:be:22:7e:ca:
01:10:e4:2d:94:db:70:c4:9b:92:cb:eb:1c:d0:e1:
cd:40:04:2f:1c:c3:ca:88:8e:f9:2d:2a:f7:81:08:
bf:27:60:8a:45:57:91:a0:ee:44:9d:09:2a:c0:69:
53:13:2b:36:4d:9d:02:90:ee:3a:09:5d:bc:a4:17:
d2:b9:68:d7:91:55:12:b2:91:dd:e3:c9:2e:ac:43:
75:55:fa:07:d2:15:32:89:8e:9f:ff:aa:99:6a:2e:
40:3f:47:50:96:ec:70:55:3b:00:c0:0b:52:39:fa:
4d:9e:b5:bf:72:35:60:6b:90:45:34:93:93:a0:47:
27:e0:84:f9:64:7a:50:15:f1:58:c3:96:2c:e9:6f:
2c:eb:df:11:52:65:d8:b0:60:10:6b:3e:8b:93:c7:
37:8f:cf:47:f8:c2:5a:1d:ac:e4:2b:fa:22:cb:e5:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:19:E6:05:BC:0C:40:6E:B1:E0:EF:3B:AA:98:3A:0A:CC:1D:00
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ed:52:5d:08:b2:2f:bd:5d:e6:d3:db:52:e4:0d:bf:43:cc:
e4:9c:16:21:33:1a:33:e1:ef:8d:1a:1d:f5:f4:ff:10:1a:2d:
f5:08:20:8e:e6:ec:9b:65:ad:20:fe:cb:18:f4:3f:b2:83:a1:
15:36:14:f3:f0:ab:e9:c7:ee:64:01:21:96:2b:8d:c2:1b:10:
10:3a:8d:a0:93:41:f5:ba:b0:34:db:d4:da:06:d0:02:74:59:
9d:a6:4b:7e:5a:3f:0d:50:ca:98:b0:14:c3:c7:a6:d5:11:d5:
65:55:a1:44:c4:71:50:7b:b2:1e:4c:fd:28:2d:ec:76:21:73:
fd:f7:3d:df:dd:04:18:21:0b:56:69:3c:ca:7b:77:8c:2c:95:
f7:24:e2:fb:6a:38:d8:9a:fe:57:87:18:63:41:f1:d6:87:68:
c9:cf:cf:c8:60:70:df:9d:12:2b:f1:82:bb:fa:c5:66:b5:bc:
8a:77:7e:be:48:fe:4c:66:b8:b1:c5:44:27:0b:3f:f6:93:af:
4e:91:02:df:07:bb:aa:a8:6c:f2:50:2e:8e:3e:99:87:3b:1b:
3f:78:e2:68:ba:c8:16:04:06:43:4b:a1:93:39:04:b6:db:2b:
62:93:25:f9:57:d4:9f:90:96:c1:b1:71:32:82:fe:8f:f5:70:
20:3f:0e:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJWwTMvpedUycUp2qWY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2NkYjZjOThkNzIyYjMyZGM5MDBlZTFkZDY2ZTUxYzRm
NDI4ZGIwHhcNMjYwMzAxMTcwMDU4WhcNMjYwMzAyMTcwMDU4WjAzMTEwLwYDVQQD
Eyg0ZTc0MTllNjA1YmMwYzQwNmViMWUwZWYzYmFhOTgzYTBhY2MxZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwEE51JSpFpuuAZGMzAfhFy/hsU0
etpn8PS5toy7sOY1EsrJ6WPrgK/ptbL0jiuv0FlVrog9iaR/pJC0k2pGQacNtGoL
aWYDsyVwASR/BvKpiqNA+L4ifsoBEOQtlNtwxJuSy+sc0OHNQAQvHMPKiI75LSr3
gQi/J2CKRVeRoO5EnQkqwGlTEys2TZ0CkO46CV28pBfSuWjXkVUSspHd48kurEN1
VfoH0hUyiY6f/6qZai5AP0dQluxwVTsAwAtSOfpNnrW/cjVga5BFNJOToEcn4IT5
ZHpQFfFYw5Ys6W8s698RUmXYsGAQaz6Lk8c3j89H+MJaHazkK/oiy+X1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE50GeYFvAxAbrHg7zuqmDoKzB0AMB8GA1UdIwQY
MBaAFGrM22yY1yKzLckA7h3WblHE9CjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4Yjgt
MmZlOTMyZTdhYjQ0LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYjIzMDctNjA1OS00MTVmLWI4YjgtMmZlOTMyZTdhYjQ0
LzEvYXN6YmJKalhJck10eVFEdUhkWnVVY1QwS05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+1SXQiy
L71d5tPbUuQNv0PM5JwWITMaM+HvjRod9fT/EBot9Qggjubsm2WtIP7LGPQ/soOh
FTYU8/Cr6cfuZAEhliuNwhsQEDqNoJNB9bqwNNvU2gbQAnRZnaZLflo/DVDKmLAU
w8em1RHVZVWhRMRxUHuyHkz9KC3sdiFz/fc9390EGCELVmk8ynt3jCyV9yTi+2o4
2Jr+V4cYY0Hx1odoyc/PyGBw350SK/GCu/rFZrW8ind+vkj+TGa4scVEJws/9pOv
TpEC3we7qqhs8lAujj6ZhzsbP3jiaLrIFgQGQ0uhkzkEttsrYpMl+VfUn5CWwbFx
MoL+j/VwID8OYw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client