Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: 93oJhPgxQI8c+SFtzEU0g/sI2tZwQyLwUaDtpTLBQiA=
Subject key identifier: DE:82:6D:97:24:C9:56:02:7D:A7:76:84:C2:2D:0B:58:8B:79:21:C0
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 019D3865A6AF073D2120EB75F52F5295AA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 0836
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: 0H6DHWgUAtXOivju56hFgL-nhGw.roa (hash: I9m54I/Z01Nh505kPQQ4RFFg0741LI/tIETTjmBrhnA=)
2: 1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa (hash: /WLcLqxm8e7HJSestWXx0nHEBjwh3y9r5DzebbE7Z0Q=)
3: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: Ca8p69Wf3NiRgtg5/kawMAzIktigDnvVR5vWz0UOoNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a6:af:07:3d:21:20:eb:75:f5:2f:52:95:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=de826d9724c956027da77684c22d0b588b7921c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:35:51:13:a0:8f:ba:c0:80:a8:25:75:7e:
72:70:fe:49:18:d4:28:a0:a2:39:5b:e5:96:17:b9:
ae:27:cc:57:d4:8b:d2:91:e5:5f:7b:16:a4:b2:e1:
be:f4:e7:2a:9b:4e:0e:89:da:a8:61:fe:18:b0:ee:
17:c7:05:41:e9:61:f2:81:e7:cc:8d:f5:db:43:31:
ea:0b:9b:db:ac:56:aa:bd:34:eb:ab:b6:41:48:6a:
f5:82:e5:5d:dd:b1:2a:6f:a7:ae:6c:b1:9a:d4:c9:
a5:03:ab:a5:6c:14:8e:d0:de:4d:87:1e:2f:ba:34:
65:70:1a:7c:02:32:bf:62:ba:4c:41:f7:77:1f:4e:
70:3b:5e:d4:0a:0e:b9:14:92:5c:01:93:23:79:14:
4f:50:eb:5a:a6:6b:8e:3d:22:13:94:94:6f:d1:32:
d1:7a:93:6f:bc:6f:64:93:20:cb:21:3b:52:da:d2:
18:61:7e:bd:3d:98:45:e5:b3:c7:49:5e:08:db:4c:
57:a5:ea:42:2b:eb:0a:19:17:be:84:1c:d7:c8:cd:
ed:c7:05:19:d5:a0:f9:b3:30:c9:f6:1e:00:29:76:
85:29:98:bb:1f:17:6d:59:5b:b3:e8:24:94:de:b6:
68:b6:61:19:d9:78:24:4b:37:c8:90:79:d7:19:e9:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:6D:97:24:C9:56:02:7D:A7:76:84:C2:2D:0B:58:8B:79:21:C0
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:8b:5c:e0:b3:da:91:64:72:04:d5:b1:98:c0:39:a3:35:
c1:72:c8:1b:a8:69:b3:cb:51:01:89:f3:86:8e:08:e4:0e:53:
cc:71:0c:d3:dd:91:ac:74:59:ab:b0:3e:6e:a4:c5:21:35:4a:
f2:03:08:b2:dd:5c:3b:50:b6:16:9c:6b:b6:7c:66:de:f4:a1:
ef:d7:d5:c2:ce:47:e6:ae:4d:c8:7a:81:9f:ed:98:31:8c:10:
a1:3d:49:bb:3f:7f:ea:a2:c8:3d:b1:c2:1e:ed:2e:7e:c5:46:
c0:b5:0c:0f:33:16:cc:59:b6:5e:9e:4d:06:e2:60:17:b1:07:
e2:52:f2:33:18:36:c4:87:fb:fc:9a:f2:7b:21:b4:fc:72:e6:
79:87:43:c2:59:c3:2e:82:53:f9:33:69:9e:e5:0d:ff:38:84:
f7:3d:ec:27:d7:fc:ea:80:62:e2:bf:e2:64:1c:cf:f7:19:0a:
9b:6a:d5:c0:b5:65:0b:6d:df:f4:ed:07:2f:3d:b0:62:17:81:
3b:92:f0:13:9d:58:11:fc:1f:f7:55:cd:a9:66:6c:74:8a:0e:
cf:17:f0:a5:aa:1b:20:d3:4a:e9:ba:ce:00:32:c6:6c:fe:fe:
a7:c5:2e:13:4d:9a:03:dc:b5:95:cc:87:65:aa:60:39:d6:e3:
96:8b:0c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaavBz0hIOt19S9Slao/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzIyZjE2YTg3Y2ZmZDc4ZmQ3OTA1MDU2OGExYjRjOTU5
YjEyMjQwHhcNMjYwMzI5MDcwMTE5WhcNMjYwMzMwMDcwMTE5WjAzMTEwLwYDVQQD
EyhkZTgyNmQ5NzI0Yzk1NjAyN2RhNzc2ODRjMjJkMGI1ODhiNzkyMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lg1UROgj7rAgKgldX5ycP5JGNQo
oKI5W+WWF7muJ8xX1IvSkeVfexaksuG+9Ocqm04OidqoYf4YsO4XxwVB6WHygefM
jfXbQzHqC5vbrFaqvTTrq7ZBSGr1guVd3bEqb6eubLGa1MmlA6ulbBSO0N5Nhx4v
ujRlcBp8AjK/YrpMQfd3H05wO17UCg65FJJcAZMjeRRPUOtapmuOPSITlJRv0TLR
epNvvG9kkyDLITtS2tIYYX69PZhF5bPHSV4I20xXpepCK+sKGRe+hBzXyM3txwUZ
1aD5szDJ9h4AKXaFKZi7HxdtWVuz6CSU3rZotmEZ2XgkSzfIkHnXGemuFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6CbZckyVYCfad2hMItC1iLeSHAMB8GA1UdIwQY
MBaAFHRyLxaofP/Xj9eQUFaKG0yVmxIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQt
MzNmNzNkOWZkZGI1LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQtMzNmNzNkOWZkZGI1
LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu+LXOCz
2pFkcgTVsZjAOaM1wXLIG6hps8tRAYnzho4I5A5TzHEM092RrHRZq7A+bqTFITVK
8gMIst1cO1C2Fpxrtnxm3vSh79fVws5H5q5NyHqBn+2YMYwQoT1Juz9/6qLIPbHC
Hu0ufsVGwLUMDzMWzFm2Xp5NBuJgF7EH4lLyMxg2xIf7/JryeyG0/HLmeYdDwlnD
LoJT+TNpnuUN/ziE9z3sJ9f86oBi4r/iZBzP9xkKm2rVwLVlC23f9O0HLz2wYheB
O5LwE51YEfwf91XNqWZsdIoOzxfwpaobINNK6brOADLGbP7+p8UuE02aA9y1lcyH
ZapgOdbjlosM0w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:39 2026 by rpki-client