Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: kgp9+02Wprqr5d9f+kvH19YEkgu1TJ3o3ay3F9AsfJs=
Subject key identifier: DC:CE:D1:9A:24:C7:BD:32:5D:D0:95:E0:FE:20:2E:53:4D:B2:CA:7A
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019C981BF987E730FCD3ED7B58FA555B79C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 0432
Signing time: Thu 26 Feb 2026 04:01:35 +0000
Manifest this update: Thu 26 Feb 2026 04:01:35 +0000
Manifest next update: Fri 27 Feb 2026 04:01:35 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: r/oQef6u1+RxEcObHeWEZMW4Ux1FgUCM3S3+VPa/eOY=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:1b:f9:87:e7:30:fc:d3:ed:7b:58:fa:55:5b:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Feb 26 04:01:35 2026 GMT
Not After : Feb 27 04:01:35 2026 GMT
Subject: CN=dcced19a24c7bd325dd095e0fe202e534db2ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:83:59:ea:47:26:99:7f:aa:63:75:f6:ce:
18:37:28:4a:6c:8b:b7:9f:5f:cc:f9:36:25:69:27:
35:f7:3c:99:f0:05:8b:72:8b:ca:0c:f4:e4:3a:33:
b7:61:52:39:bd:9d:1b:f5:e7:06:11:90:a7:dc:28:
ea:8e:2e:89:21:7e:2a:ac:38:2d:f3:22:37:80:d2:
fd:c9:12:1e:96:71:e2:cd:9d:70:ce:aa:42:33:74:
7b:b9:7b:46:a6:21:b6:cd:7a:39:4e:56:3f:29:74:
15:84:51:e8:89:f8:d0:b5:40:55:07:6b:09:64:36:
03:04:85:eb:60:97:8f:e1:a8:d4:8c:41:79:fe:80:
af:9a:5f:6a:a6:f4:06:00:41:e3:2b:c0:dc:bf:e1:
58:f0:20:d8:9f:da:fa:7c:f9:28:e2:60:d8:44:ab:
0e:09:af:17:f6:d4:de:3c:05:33:f7:60:32:2f:f1:
e5:ec:d9:cb:f3:a8:23:1d:78:a6:ab:18:d5:5c:80:
96:58:fe:38:f3:ba:b0:e2:0c:e9:5c:9e:95:c4:df:
b2:61:4f:4f:1b:36:4a:60:4d:4f:41:ba:78:7c:00:
3e:52:bd:3e:ca:47:d1:ee:c7:45:59:ba:97:fd:3c:
33:20:10:21:33:0d:bc:05:b3:62:54:9b:ee:34:04:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:D1:9A:24:C7:BD:32:5D:D0:95:E0:FE:20:2E:53:4D:B2:CA:7A
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:64:1b:dd:ab:96:f0:bd:50:f7:d3:0e:93:54:cc:6f:ee:
5f:7a:76:e5:b9:46:97:eb:03:75:d1:ab:79:64:06:e2:b6:96:
d5:6b:03:f3:d5:f2:84:9e:a9:51:56:12:dd:57:34:00:fb:7b:
db:9b:1d:78:69:18:5c:e8:3c:e0:86:f3:e1:58:59:73:a8:b3:
99:2b:88:01:b0:19:63:72:1f:b1:99:a4:83:b6:5e:c8:4c:c4:
98:6c:69:b3:7e:50:cc:ff:2b:f3:8a:0f:35:3d:c3:39:0e:92:
36:63:e5:b2:79:56:30:ed:67:e2:61:11:8b:53:a5:83:86:81:
39:96:c6:3b:ed:be:b9:d6:b1:e8:4e:75:1f:7e:db:b2:59:4c:
bb:ed:ec:8a:88:8e:30:d5:82:e4:cd:dd:a1:3a:22:30:28:c5:
aa:66:92:88:89:e0:53:23:68:6a:0a:eb:8a:4d:65:ce:55:58:
fc:37:f9:a0:27:9a:f9:83:7a:41:e3:9a:7e:7f:bf:d1:57:c0:
a4:6c:98:05:fd:cd:16:0b:4d:67:31:de:85:b9:93:e0:e4:d9:
88:ac:93:16:62:2a:91:4b:d9:25:73:5b:43:cb:c8:14:fe:57:
92:86:38:51:bb:98:37:78:4d:99:12:2c:cf:fa:88:a5:ba:0f:
d2:c6:29:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyYG/mH5zD80+17WPpVW3nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODQzY2Q2MWQ4ZmZmMWY2Y2ZiMzgwYWUyNDNiZTBiMWQ5
NDM1YWIwHhcNMjYwMjI2MDQwMTM1WhcNMjYwMjI3MDQwMTM1WjAzMTEwLwYDVQQD
EyhkY2NlZDE5YTI0YzdiZDMyNWRkMDk1ZTBmZTIwMmU1MzRkYjJjYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6KDWepHJpl/qmN19s4YNyhKbIu3
n1/M+TYlaSc19zyZ8AWLcovKDPTkOjO3YVI5vZ0b9ecGEZCn3Cjqji6JIX4qrDgt
8yI3gNL9yRIelnHizZ1wzqpCM3R7uXtGpiG2zXo5TlY/KXQVhFHoifjQtUBVB2sJ
ZDYDBIXrYJeP4ajUjEF5/oCvml9qpvQGAEHjK8Dcv+FY8CDYn9r6fPko4mDYRKsO
Ca8X9tTePAUz92AyL/Hl7NnL86gjHXimqxjVXICWWP4487qw4gzpXJ6VxN+yYU9P
GzZKYE1PQbp4fAA+Ur0+ykfR7sdFWbqX/TwzIBAhMw28BbNiVJvuNATQHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzO0Zokx70yXdCV4P4gLlNNssp6MB8GA1UdIwQY
MBaAFNaEPNYdj/8fbPs4CuJDvgsdlDWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUt
ZWVjZDA5ZDkwYzY1LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80NGNjN2MtYTZiNS00ZGE2LWFmOGUtZWVjZDA5ZDkwYzY1
LzEvMW9RODFoMlBfeDlzLXpnSzRrTy1DeDJVTmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzRkG92r
lvC9UPfTDpNUzG/uX3p25blGl+sDddGreWQG4raW1WsD89XyhJ6pUVYS3Vc0APt7
25sdeGkYXOg84Ibz4VhZc6izmSuIAbAZY3IfsZmkg7ZeyEzEmGxps35QzP8r84oP
NT3DOQ6SNmPlsnlWMO1n4mERi1Olg4aBOZbGO+2+udax6E51H37bsllMu+3sioiO
MNWC5M3doToiMCjFqmaSiIngUyNoagrrik1lzlVY/Df5oCea+YN6QeOafn+/0VfA
pGyYBf3NFgtNZzHehbmT4OTZiKyTFmIqkUvZJXNbQ8vIFP5XkoY4UbuYN3hNmRIs
z/qIpboP0sYpZA==
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:38:28 2026 by rpki-client