Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: u6jXlG28lyQ/n6iaisgOHB9b26uG+z69mKcSi2BGF3w=
Subject key identifier: F1:E0:46:9A:D4:64:81:98:D2:C5:E4:D3:DF:59:F6:D1:2A:BC:84:9B
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 019D26CD3D01FC878875242742DA36F7E269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0789
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: PZBnPdfbJCdgsdJ-b0ZM7yGRxxc.roa (hash: lKGeR/3YCO+JxIhtID6zbVNMC2uzyz/+F4TUSGRB+zg=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: OPlOD9Jg4p6wS2XHLzpvFYeIKiv+qlKWvBkV2vcbb5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3d:01:fc:87:88:75:24:27:42:da:36:f7:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=f1e0469ad4648198d2c5e4d3df59f6d12abc849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:25:28:87:61:4f:7a:95:4d:da:31:d5:3b:
9f:d5:2f:e4:66:46:a1:8d:65:ac:23:3f:d4:9a:c2:
96:5c:e5:93:0b:3f:b2:ae:c8:94:84:e3:ac:b7:a9:
3f:a5:cb:a2:8e:25:0d:48:44:37:96:9a:5c:53:c9:
a2:8b:b8:f1:ee:65:90:35:be:93:d8:66:39:2a:54:
ca:d4:4f:ec:e2:a1:3a:4c:6b:0e:a4:f4:cb:c9:f4:
f9:1f:37:49:64:4d:8f:69:b8:38:96:cf:94:00:8c:
d3:d6:60:f2:da:d2:c4:78:9b:78:2d:ed:c4:1b:4e:
49:c6:95:ab:6b:de:e6:03:3f:97:68:14:58:88:33:
08:84:05:f7:67:fa:b0:0e:a2:47:8e:9e:61:9f:fa:
4c:24:a7:9c:67:a2:db:be:18:a4:a1:f3:f4:bc:d9:
51:55:92:84:09:9a:78:b5:8f:d1:52:de:8d:4c:f9:
53:80:cf:12:8c:03:cd:ca:a0:8e:dc:9e:8f:35:da:
c5:01:af:92:bf:15:cf:a9:58:9d:e1:19:52:33:62:
6a:e8:66:6f:da:0b:de:60:2e:8c:5c:be:c0:93:cd:
de:2f:cb:2f:0f:94:f5:37:27:75:fe:c2:c9:37:6c:
36:ad:e7:0c:3a:a9:4d:fd:2c:c3:36:21:6e:12:e5:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:46:9A:D4:64:81:98:D2:C5:E4:D3:DF:59:F6:D1:2A:BC:84:9B
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:ed:8b:f7:53:0c:13:e9:7a:0a:a7:a2:d1:fd:86:bf:ef:
a0:f1:9a:2d:5a:3d:f2:c1:ce:e4:9b:30:6d:28:db:91:69:14:
b1:26:bc:9b:2f:66:95:ea:51:ac:a3:96:a3:c1:e1:80:13:75:
c0:81:a0:59:0b:ad:f4:9d:2b:19:4a:82:e2:10:fc:4e:fb:9c:
b0:d2:a6:f0:39:71:b9:8d:3d:0c:ac:33:7f:b3:1a:f2:73:57:
0d:ab:36:63:63:53:ae:d6:d9:2c:64:df:d9:90:90:4f:0e:9c:
f8:29:95:b1:e1:98:f4:de:7e:01:36:1a:62:12:21:56:2f:4b:
12:ff:85:8d:f4:2d:76:45:f6:3b:51:13:c6:51:a9:51:2a:62:
8e:22:58:32:7f:50:89:d0:79:3c:21:d9:18:7d:41:a8:4f:e3:
db:15:df:05:83:c8:a5:34:18:6e:a3:d0:d4:2d:9c:65:bf:79:
4f:11:4d:96:06:d5:ce:ab:b2:a3:f0:2f:63:96:fc:b9:1e:e8:
ae:1b:24:a9:05:d4:45:ae:e4:a8:81:e8:67:54:bf:e3:f2:6d:
05:47:e1:dc:1a:d0:fe:92:81:33:73:8c:d5:a0:8b:6e:a7:76:
87:a8:de:e3:25:cf:47:fb:70:ee:77:34:3b:c5:63:57:e1:c2:
d5:e7:d8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzT0B/IeIdSQnQto29+JpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4
NWU5ZjcwHhcNMjYwMzI1MjEwMTE3WhcNMjYwMzI2MjEwMTE3WjAzMTEwLwYDVQQD
EyhmMWUwNDY5YWQ0NjQ4MTk4ZDJjNWU0ZDNkZjU5ZjZkMTJhYmM4NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMclKIdhT3qVTdox1Tuf1S/kZkah
jWWsIz/UmsKWXOWTCz+yrsiUhOOst6k/pcuijiUNSEQ3lppcU8mii7jx7mWQNb6T
2GY5KlTK1E/s4qE6TGsOpPTLyfT5HzdJZE2Pabg4ls+UAIzT1mDy2tLEeJt4Le3E
G05JxpWra97mAz+XaBRYiDMIhAX3Z/qwDqJHjp5hn/pMJKecZ6LbvhikofP0vNlR
VZKECZp4tY/RUt6NTPlTgM8SjAPNyqCO3J6PNdrFAa+SvxXPqVid4RlSM2Jq6GZv
2gveYC6MXL7Ak83eL8svD5T1Nyd1/sLJN2w2recMOqlN/SzDNiFuEuWD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHgRprUZIGY0sXk099Z9tEqvISbMB8GA1UdIwQY
MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt
MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0
LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBTti/dT
DBPpegqnotH9hr/voPGaLVo98sHO5JswbSjbkWkUsSa8my9mlepRrKOWo8HhgBN1
wIGgWQut9J0rGUqC4hD8TvucsNKm8DlxuY09DKwzf7Ma8nNXDas2Y2NTrtbZLGTf
2ZCQTw6c+CmVseGY9N5+ATYaYhIhVi9LEv+FjfQtdkX2O1ETxlGpUSpijiJYMn9Q
idB5PCHZGH1BqE/j2xXfBYPIpTQYbqPQ1C2cZb95TxFNlgbVzquyo/AvY5b8uR7o
rhskqQXURa7kqIHoZ1S/4/JtBUfh3BrQ/pKBM3OM1aCLbqd2h6je4yXPR/tw7nc0
O8VjV+HC1efYkA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:39 2026 by rpki-client