Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: uBQIahL+ZIgxfGQQ88ItPd38J7Sz6Z4vb3ubb3XZ8QA=
Subject key identifier: 0F:49:2B:8B:03:95:1B:FC:9E:7D:62:2B:D4:A3:86:33:06:CD:CA:54
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 019CAA58A0822A4AE7B059741A7A8747F9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: Hh4oawFMPhlZWHiv9oVznjVHldw.roa (hash: ZkANeMjzmI2+4mD6XiyteCRytMwKnaF4f4SfTl1h+1g=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 5BAs7N4GXY0Vxoj07eujwNBX3IAGeTRiyj8wuV/ZoAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a0:82:2a:4a:e7:b0:59:74:1a:7a:87:47:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=0f492b8b03951bfc9e7d622bd4a3863306cdca54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:28:0e:49:8b:2e:65:85:f5:f6:a3:98:75:
a9:1d:a2:97:11:08:ee:f9:05:4f:4d:79:39:8a:5f:
bc:3d:08:4e:a1:a5:ea:6b:2b:16:b3:20:15:b8:ed:
74:b6:35:b6:5c:67:4d:7b:24:bb:13:1e:ed:bb:6d:
ab:a4:c8:7e:0f:a1:18:de:4e:fe:74:5e:86:58:05:
b0:04:7a:ad:bc:61:f1:33:87:83:1f:28:d0:79:69:
22:93:00:ba:04:59:26:b9:ce:0b:89:c7:49:19:fa:
3f:ac:21:2e:c4:7b:26:6a:60:74:ca:65:c9:95:ff:
21:f4:78:32:85:e5:07:9d:e4:93:5d:9e:78:e4:43:
e1:51:3f:94:e9:75:33:5b:b0:48:52:10:a9:00:73:
91:d2:da:9a:f6:d8:94:45:11:3a:3a:93:a7:b2:90:
9f:f6:aa:a0:a8:a6:53:18:8c:68:b2:55:c5:c3:e6:
84:88:db:99:3e:7e:c3:de:28:7b:a6:9e:93:2a:8f:
98:2c:48:eb:07:8c:70:3c:43:0b:75:2e:5f:ff:cd:
c3:f3:22:7c:74:a0:ac:a9:79:24:ad:dc:52:e3:d3:
44:98:b2:b9:1e:ee:b1:24:3f:de:61:23:50:8e:3c:
e3:57:eb:58:b3:3e:bf:72:21:12:e1:92:18:8b:c5:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:2B:8B:03:95:1B:FC:9E:7D:62:2B:D4:A3:86:33:06:CD:CA:54
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:2d:ec:8f:03:6a:60:a2:25:e8:68:09:35:2b:72:5f:02:
35:9f:9f:77:f0:03:c1:82:86:16:12:a3:24:2b:c6:7a:a1:ad:
51:01:82:98:10:03:ab:95:97:3a:0e:af:2a:a2:ca:6c:78:86:
82:ec:ab:14:7d:70:e9:f5:c3:39:df:e2:d6:2a:4c:11:0f:c0:
1d:a2:90:6a:3c:49:b1:cc:5a:16:ac:20:f6:0c:d0:46:5e:5e:
f9:10:de:ec:67:2c:72:c3:6e:4f:92:8b:43:5d:a0:2c:64:45:
5e:0f:37:f4:c7:10:19:f2:e7:e0:7e:2a:23:f5:a6:91:c4:2f:
24:0c:61:46:92:de:99:14:7a:7a:df:ec:f0:cb:b7:f5:76:21:
ce:6a:36:71:8e:00:dc:ad:84:d1:d4:07:6b:0f:94:2d:c0:41:
49:b6:79:23:c3:d1:4f:21:ef:64:34:10:0b:81:be:c2:74:75:
3f:f5:49:b2:4a:fa:ca:d8:cb:c8:97:94:5c:b0:68:4d:be:99:
73:4b:e8:c5:2f:39:49:5d:58:e5:53:72:3c:77:61:57:2c:15:
57:28:43:08:96:fe:40:c3:4d:66:d3:38:8c:c5:da:35:d1:15:
8b:b6:d6:7c:c4:bb:22:24:bc:a4:6a:9b:56:e5:29:74:9a:f8:
52:b7:1c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKCCKkrnsFl0GnqHR/nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjYwMzAxMTcwMTAwWhcNMjYwMzAyMTcwMTAwWjAzMTEwLwYDVQQD
EygwZjQ5MmI4YjAzOTUxYmZjOWU3ZDYyMmJkNGEzODYzMzA2Y2RjYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX0oDkmLLmWF9fajmHWpHaKXEQju
+QVPTXk5il+8PQhOoaXqaysWsyAVuO10tjW2XGdNeyS7Ex7tu22rpMh+D6EY3k7+
dF6GWAWwBHqtvGHxM4eDHyjQeWkikwC6BFkmuc4LicdJGfo/rCEuxHsmamB0ymXJ
lf8h9HgyheUHneSTXZ545EPhUT+U6XUzW7BIUhCpAHOR0tqa9tiURRE6OpOnspCf
9qqgqKZTGIxoslXFw+aEiNuZPn7D3ih7pp6TKo+YLEjrB4xwPEMLdS5f/83D8yJ8
dKCsqXkkrdxS49NEmLK5Hu6xJD/eYSNQjjzjV+tYsz6/ciES4ZIYi8UQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9JK4sDlRv8nn1iK9SjhjMGzcpUMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTEt7I8D
amCiJehoCTUrcl8CNZ+fd/ADwYKGFhKjJCvGeqGtUQGCmBADq5WXOg6vKqLKbHiG
guyrFH1w6fXDOd/i1ipMEQ/AHaKQajxJscxaFqwg9gzQRl5e+RDe7GcscsNuT5KL
Q12gLGRFXg839McQGfLn4H4qI/WmkcQvJAxhRpLemRR6et/s8Mu39XYhzmo2cY4A
3K2E0dQHaw+ULcBBSbZ5I8PRTyHvZDQQC4G+wnR1P/VJskr6ytjLyJeUXLBoTb6Z
c0voxS85SV1Y5VNyPHdhVywVVyhDCJb+QMNNZtM4jMXaNdEVi7bWfMS7IiS8pGqb
VuUpdJr4Urccfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:27 2026 by rpki-client