Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: 0aLs9Ct5Ez44gAQLLoQ3EI7EAMW+MH+xB++jYlBTGxE=
Subject key identifier: 8E:4A:61:45:7D:E1:54:BB:5B:AE:09:7D:C2:FD:26:87:2E:66:4B:E6
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 019CAEA2C11F4401824738A63FC6B4A7D784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 13:00:27 +0000
Manifest this update: Mon 02 Mar 2026 13:00:27 +0000
Manifest next update: Tue 03 Mar 2026 13:00:27 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: 4B6LwuKlQiFk4xPyPYHUajHoqo3vpTJBPr9qZYKK9uM=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:c1:1f:44:01:82:47:38:a6:3f:c6:b4:a7:d7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Mar 2 13:00:27 2026 GMT
Not After : Mar 3 13:00:27 2026 GMT
Subject: CN=8e4a61457de154bb5bae097dc2fd26872e664be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:3a:d3:8e:8b:a4:80:89:92:0f:cc:a4:a0:
b0:00:60:01:fe:4e:24:44:8b:93:ff:19:11:09:ad:
fa:9d:3d:07:55:7d:c6:bd:bd:db:4a:9a:d7:df:a6:
27:d2:bd:eb:71:4d:65:f9:3c:06:79:6f:87:d4:e2:
d8:22:6a:de:57:8f:87:b6:0f:75:2f:5b:a0:b3:fd:
e6:2d:86:23:8e:39:1c:a1:eb:9c:6d:b0:92:d7:ac:
40:98:fb:82:4d:6c:9b:9c:1d:fc:83:f9:92:78:4b:
30:62:64:e1:d0:04:db:58:8f:da:2f:4c:21:c2:cd:
f4:5b:6b:d3:91:37:d5:58:6c:55:7d:10:36:04:13:
b4:c8:bb:a8:4c:53:52:99:0e:06:25:91:c8:cd:bd:
1e:02:96:f8:71:cc:9b:93:9f:71:ed:94:51:96:f9:
07:f5:a1:a7:4c:9c:59:03:5f:68:27:82:f2:aa:31:
ef:9f:78:ac:61:71:85:bf:85:91:dc:a2:e3:ea:3a:
40:75:ff:92:3a:7a:19:01:17:71:a1:df:37:92:3c:
5b:88:20:65:7d:b3:97:b9:36:34:66:13:00:35:03:
fd:56:50:45:d2:76:fd:c2:aa:9e:45:68:09:fa:84:
05:cd:93:61:ed:44:f3:c8:e1:47:87:e4:5f:a9:3a:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:61:45:7D:E1:54:BB:5B:AE:09:7D:C2:FD:26:87:2E:66:4B:E6
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:d3:a2:78:a5:af:b6:f9:09:f6:3a:ba:9f:0a:42:6d:46:
b7:4a:5c:78:51:9a:e6:df:22:02:17:d1:65:53:90:55:53:f8:
cf:ee:42:b8:06:ff:c1:5f:96:66:75:18:8c:35:58:b2:96:88:
e3:89:e6:e9:01:4b:f3:73:b3:9b:b9:18:30:60:9d:3c:13:30:
9d:ed:d4:be:d4:be:24:3d:45:2a:c5:0a:7f:0d:40:e6:83:e1:
f7:b0:bc:d0:da:d1:13:13:a4:5d:77:a9:e5:3c:6e:46:1d:df:
1b:15:e9:29:d7:9f:cf:a0:99:d7:96:b7:2a:c6:fb:3f:43:23:
5a:fc:69:02:ba:23:60:77:91:74:1f:e1:99:60:23:06:63:96:
23:ca:fb:2a:21:1a:18:a7:da:d2:6d:9d:2e:2c:f8:86:2d:55:
9d:07:92:b8:8d:a9:34:c3:c1:4a:93:51:d7:9c:8d:90:2c:e4:
91:d1:14:30:48:01:9c:7b:ce:e0:d1:08:b7:46:8d:72:37:11:
84:ba:89:e4:f9:81:d5:6f:1f:49:8e:e9:d2:56:fc:59:7e:4b:
28:57:15:af:13:99:a3:fd:d3:77:0f:28:6c:72:67:f0:20:42:
94:00:b4:27:67:19:b2:ef:7e:d6:6e:a6:a1:1a:ee:eb:2f:34:
c3:89:c3:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuosEfRAGCRzimP8a0p9eEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0
YTQ5MGQwHhcNMjYwMzAyMTMwMDI3WhcNMjYwMzAzMTMwMDI3WjAzMTEwLwYDVQQD
Eyg4ZTRhNjE0NTdkZTE1NGJiNWJhZTA5N2RjMmZkMjY4NzJlNjY0YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwos6046LpICJkg/MpKCwAGAB/k4k
RIuT/xkRCa36nT0HVX3Gvb3bSprX36Yn0r3rcU1l+TwGeW+H1OLYImreV4+Htg91
L1ugs/3mLYYjjjkcoeucbbCS16xAmPuCTWybnB38g/mSeEswYmTh0ATbWI/aL0wh
ws30W2vTkTfVWGxVfRA2BBO0yLuoTFNSmQ4GJZHIzb0eApb4ccybk59x7ZRRlvkH
9aGnTJxZA19oJ4LyqjHvn3isYXGFv4WR3KLj6jpAdf+SOnoZARdxod83kjxbiCBl
fbOXuTY0ZhMANQP9VlBF0nb9wqqeRWgJ+oQFzZNh7UTzyOFHh+RfqTrtuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5KYUV94VS7W64JfcL9JocuZkvmMB8GA1UdIwQY
MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt
Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh
LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5rTonil
r7b5CfY6up8KQm1Gt0pceFGa5t8iAhfRZVOQVVP4z+5CuAb/wV+WZnUYjDVYspaI
44nm6QFL83Ozm7kYMGCdPBMwne3UvtS+JD1FKsUKfw1A5oPh97C80NrRExOkXXep
5TxuRh3fGxXpKdefz6CZ15a3Ksb7P0MjWvxpArojYHeRdB/hmWAjBmOWI8r7KiEa
GKfa0m2dLiz4hi1VnQeSuI2pNMPBSpNR15yNkCzkkdEUMEgBnHvO4NEIt0aNcjcR
hLqJ5PmB1W8fSY7p0lb8WX5LKFcVrxOZo/3Tdw8obHJn8CBClAC0J2cZsu9+1m6m
oRru6y80w4nDKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:16 2026 by rpki-client