Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: g2odsJZwL1ZNXj5+HnxG2PmXdX3WL4gb4MeYyWANw84=
Subject key identifier: 1C:40:11:BC:A1:53:AE:B4:75:3A:CC:80:CE:0A:3E:F9:EA:ED:7A:D8
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019D273AEF718AB06C5A8799EB29C7BD30A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1276
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 6OKT7uSREzbAchg058g8TyBoXKNzgiTxBWFiWtjz0gs=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ef:71:8a:b0:6c:5a:87:99:eb:29:c7:bd:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=1c4011bca153aeb4753acc80ce0a3ef9eaed7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:bf:0e:d2:4f:09:db:83:69:15:29:c5:90:
98:b9:dd:62:b3:99:f7:ff:88:a3:7e:ca:cb:c0:44:
d2:7c:e1:1e:61:07:7d:ec:88:e8:03:b3:25:43:21:
99:d3:be:5f:46:ac:23:28:90:8a:7f:c5:03:d1:39:
c0:62:8a:92:b4:ae:24:a8:30:32:4e:75:c1:58:e8:
13:b3:5f:a7:2c:1b:c4:b5:19:eb:41:37:b8:0b:a4:
8d:ae:df:93:e0:e2:92:67:43:61:91:40:7f:73:a1:
d8:0b:ed:01:1f:ac:03:b9:28:03:f7:e5:da:14:de:
98:a2:a9:95:53:b2:a0:4d:fe:8c:db:54:bf:8d:b3:
05:4a:55:37:0d:d4:07:f4:1c:ab:a0:00:e7:0f:e7:
3b:50:0d:db:fd:2e:47:3d:7e:71:50:e4:94:ca:5b:
2b:80:dd:5e:68:16:5c:29:9b:dc:11:ab:c7:59:0c:
15:1b:02:67:b8:50:32:54:51:77:e8:c8:24:19:59:
00:5f:bc:6b:8b:04:bd:c4:07:e2:fb:6a:85:13:9a:
dd:5a:d1:02:c2:92:89:7a:a2:41:f9:ce:e0:17:c4:
67:79:27:cb:d6:4f:29:9d:15:c9:bd:7b:7f:ab:48:
03:6f:79:67:c2:c2:4d:d2:84:e7:4b:3c:46:74:57:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:11:BC:A1:53:AE:B4:75:3A:CC:80:CE:0A:3E:F9:EA:ED:7A:D8
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:96:6c:0b:30:0a:b7:9a:3d:40:aa:c4:d8:23:67:a1:77:
af:9c:3f:e0:b1:9f:fa:1a:9a:ce:25:ba:7c:c6:a5:7b:69:37:
4d:f5:4b:2a:56:1f:43:08:3c:86:cf:45:14:f0:18:97:ca:7a:
d7:c0:93:7f:b6:26:a6:6e:b4:77:8a:4a:74:fd:e5:a0:4a:86:
21:a5:74:d9:35:bc:3d:e2:4f:97:78:1b:17:b2:f5:2b:c7:9b:
8d:16:f4:f3:7d:bc:1e:78:5a:d3:e3:c7:1c:5e:ae:cb:ae:80:
33:d6:2b:29:76:01:38:7f:92:d6:c4:1c:60:93:cd:23:87:fb:
df:e6:71:2a:86:6a:ab:87:e2:c5:8a:9d:a0:2b:a4:3f:c4:3f:
49:42:67:25:ec:af:05:dc:1a:d2:3a:dd:71:7e:30:4b:f3:41:
bb:48:7b:2b:ef:01:ca:6f:1f:b6:83:ee:7c:4e:0f:6d:09:3c:
e4:3a:54:be:96:72:d7:27:04:ad:b9:eb:a5:45:ff:00:37:65:
b6:c5:3f:f4:e2:04:9e:f8:f0:37:30:51:0f:d1:c9:c1:16:7e:
f2:e8:ed:9a:b6:20:65:59:d9:57:10:48:2d:34:90:ef:93:e2:
ec:c7:03:49:79:e1:c3:d3:59:c3:e3:74:c5:ad:dd:30:36:c9:
4d:ae:99:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOu9xirBsWoeZ6ynHvTClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwMzI1MjMwMTA2WhcNMjYwMzI2MjMwMTA2WjAzMTEwLwYDVQQD
EygxYzQwMTFiY2ExNTNhZWI0NzUzYWNjODBjZTBhM2VmOWVhZWQ3YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKG/DtJPCduDaRUpxZCYud1is5n3
/4ijfsrLwETSfOEeYQd97IjoA7MlQyGZ075fRqwjKJCKf8UD0TnAYoqStK4kqDAy
TnXBWOgTs1+nLBvEtRnrQTe4C6SNrt+T4OKSZ0NhkUB/c6HYC+0BH6wDuSgD9+Xa
FN6YoqmVU7KgTf6M21S/jbMFSlU3DdQH9ByroADnD+c7UA3b/S5HPX5xUOSUylsr
gN1eaBZcKZvcEavHWQwVGwJnuFAyVFF36MgkGVkAX7xriwS9xAfi+2qFE5rdWtEC
wpKJeqJB+c7gF8RneSfL1k8pnRXJvXt/q0gDb3lnwsJN0oTnSzxGdFfOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxAEbyhU660dTrMgM4KPvnq7XrYMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOOWbAsw
CreaPUCqxNgjZ6F3r5w/4LGf+hqaziW6fMale2k3TfVLKlYfQwg8hs9FFPAYl8p6
18CTf7Ympm60d4pKdP3loEqGIaV02TW8PeJPl3gbF7L1K8ebjRb08328Hnha0+PH
HF6uy66AM9YrKXYBOH+S1sQcYJPNI4f73+ZxKoZqq4fixYqdoCukP8Q/SUJnJeyv
Bdwa0jrdcX4wS/NBu0h7K+8Bym8ftoPufE4PbQk85DpUvpZy1ycErbnrpUX/ADdl
tsU/9OIEnvjwNzBRD9HJwRZ+8ujtmrYgZVnZVxBILTSQ75Pi7McDSXnhw9NZw+N0
xa3dMDbJTa6ZNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:15:02 2026 by rpki-client