Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: MUOx8iypOj//zDuR0HJEjBF0ZN1lTlD9fgR4RKQQ4eI=
Subject key identifier: CD:0E:79:1C:DE:1A:9D:14:D0:A8:71:C7:B3:FF:21:6C:9F:DF:B9:0B
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 019D265FAEEB1D183F58D61DD72B7F2D18C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: DsE2Pr9IN7rJIvUK10gbOEMiDww.roa (hash: 3j8bdASeJ0zHcaqofBlBljdvHSO6WNTIHFBrgkx01dA=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: 2CyKTehfQlqzyhS1qEGGrg19upiuVssplJnLetjfxgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ae:eb:1d:18:3f:58:d6:1d:d7:2b:7f:2d:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=cd0e791cde1a9d14d0a871c7b3ff216c9fdfb90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:fb:f8:d3:ad:26:07:46:0d:41:b1:7c:72:
fe:0b:3f:70:02:d6:2c:0d:b7:09:85:52:ed:ca:20:
ac:87:40:ec:ee:5a:fa:7a:01:c2:a8:56:0c:43:3c:
12:79:58:c4:ac:69:6b:32:fe:2a:b4:4a:b0:1d:4e:
3f:48:a3:31:b7:1c:04:34:f5:5e:18:3e:1f:22:11:
f7:2d:3a:a1:57:19:87:a4:18:18:ba:20:0c:93:d2:
79:49:4e:27:51:30:91:35:9a:c8:a9:d6:9b:54:3f:
d1:62:6c:8e:9b:42:77:4e:a0:df:bc:da:ff:d4:c0:
8c:b5:ea:eb:29:cd:9b:db:9a:7d:f3:e4:96:76:21:
f4:aa:a3:fe:0e:0c:d7:2c:ef:37:7c:63:de:8f:98:
4d:0a:6b:6e:8b:9e:e4:71:47:4e:59:0f:e3:88:6f:
51:8b:ec:18:7a:17:85:6b:98:25:87:44:2f:cd:2b:
47:29:9a:68:a6:f3:f9:55:44:2e:f1:3d:9d:6f:fb:
88:83:ab:42:08:0d:35:23:dd:e2:16:be:da:10:34:
36:c3:5b:4e:c0:a8:04:74:14:58:2c:a5:95:db:80:
15:92:6e:79:d0:a9:97:b4:be:b7:82:24:f2:1e:07:
28:21:1b:be:29:33:cb:65:a1:27:5b:2c:14:50:b4:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:79:1C:DE:1A:9D:14:D0:A8:71:C7:B3:FF:21:6C:9F:DF:B9:0B
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e5:e4:02:89:11:71:87:b5:02:30:07:38:6d:71:1b:8c:ab:
21:9a:b6:d9:46:a0:ed:82:dd:2a:6c:df:df:90:89:f0:56:cd:
b2:77:41:87:84:92:42:95:bd:a3:04:98:0e:b1:cc:9c:35:ae:
a7:d2:3f:28:a5:ca:8b:d4:ec:2d:14:2a:bb:24:53:75:4d:c8:
ed:42:fb:a1:27:b7:5d:88:54:72:7c:37:b3:a8:37:d1:38:5b:
b6:b2:5c:c8:c0:4d:b8:d2:41:db:2d:2b:79:38:9d:73:96:08:
c5:f3:54:85:1d:d8:30:c8:7a:ef:c6:d1:20:62:ef:fe:ff:10:
e9:47:11:95:3e:4d:60:39:d7:06:98:1f:8d:ef:f1:86:27:01:
67:f7:a0:7e:45:c4:88:cd:15:fe:4e:1e:08:6c:40:a2:f9:e9:
55:2e:41:ed:79:26:c7:cb:ed:bd:36:ea:13:c7:1e:74:e5:6d:
45:5b:2e:8a:b0:d5:3f:a9:e7:a0:55:55:ee:88:df:28:11:8f:
73:c3:bd:6d:1f:f2:55:0c:bf:fd:69:31:25:99:5a:f7:65:b4:
fd:51:08:cf:16:0d:11:a6:38:f2:45:53:af:9b:8f:a7:79:be:
63:b8:ea:9f:07:7c:14:57:14:47:a5:cb:3f:6e:9e:45:05:b3:
54:25:ba:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX67rHRg/WNYd1yt/LRjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWViMjgwZDE3MjI4NDZhNDQxMjRjNGM2MmQwMDU5ZjYx
YWYyNDIwHhcNMjYwMzI1MTkwMTM4WhcNMjYwMzI2MTkwMTM4WjAzMTEwLwYDVQQD
EyhjZDBlNzkxY2RlMWE5ZDE0ZDBhODcxYzdiM2ZmMjE2YzlmZGZiOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56v7+NOtJgdGDUGxfHL+Cz9wAtYs
DbcJhVLtyiCsh0Ds7lr6egHCqFYMQzwSeVjErGlrMv4qtEqwHU4/SKMxtxwENPVe
GD4fIhH3LTqhVxmHpBgYuiAMk9J5SU4nUTCRNZrIqdabVD/RYmyOm0J3TqDfvNr/
1MCMterrKc2b25p98+SWdiH0qqP+DgzXLO83fGPej5hNCmtui57kcUdOWQ/jiG9R
i+wYeheFa5glh0QvzStHKZpopvP5VUQu8T2db/uIg6tCCA01I93iFr7aEDQ2w1tO
wKgEdBRYLKWV24AVkm550KmXtL63giTyHgcoIRu+KTPLZaEnWywUULRaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0OeRzeGp0U0Khxx7P/IWyf37kLMB8GA1UdIwQY
MBaAFK4esoDRcihGpEEkxMYtAFn2GvJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUt
Nzc5M2I5ZWZiMWJkLzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xZmRmMDQtOGI0ZS00MzMyLWE0ZGUtNzc5M2I5ZWZiMWJk
LzEvcmg2eWdORnlLRWFrUVNURXhpMEFXZllhOGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+XkAokR
cYe1AjAHOG1xG4yrIZq22Uag7YLdKmzf35CJ8FbNsndBh4SSQpW9owSYDrHMnDWu
p9I/KKXKi9TsLRQquyRTdU3I7UL7oSe3XYhUcnw3s6g30ThbtrJcyMBNuNJB2y0r
eTidc5YIxfNUhR3YMMh678bRIGLv/v8Q6UcRlT5NYDnXBpgfje/xhicBZ/egfkXE
iM0V/k4eCGxAovnpVS5B7Xkmx8vtvTbqE8cedOVtRVsuirDVP6nnoFVV7ojfKBGP
c8O9bR/yVQy//WkxJZla92W0/VEIzxYNEaY48kVTr5uPp3m+Y7jqnwd8FFcUR6XL
P26eRQWzVCW6Ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:53 2026 by rpki-client