Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: M4vx+fZCLqblFqWge55+XJ6slfK2CQKgTJX3ArK65Wk=
Subject key identifier: E3:E2:4C:AA:FD:A9:B1:FD:E4:9E:74:60:F7:D8:DC:A2:C6:65:41:6E
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019D29293C6E05A5DB8130A43ACACD586068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0F24
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: 8i5rfY48+OrrfXW237HdfMERmumNvB0cQQ6pwMUbris=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3c:6e:05:a5:db:81:30:a4:3a:ca:cd:58:60:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=e3e24caafda9b1fde49e7460f7d8dca2c665416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:a4:84:af:1f:8f:29:21:f5:ce:c2:ab:7f:
18:90:53:a8:da:dd:96:27:68:96:b5:d8:03:5d:20:
ad:f6:b8:de:d3:c2:9a:24:67:5f:87:cf:93:a1:71:
79:9c:c5:07:5c:71:fd:58:e2:54:7d:c4:30:0e:ca:
fa:ee:5d:09:e6:a3:f9:d4:4e:f6:38:69:8e:41:71:
f6:24:62:f2:3a:94:44:53:ce:2e:7b:f1:c1:bc:fc:
8a:b4:5f:62:20:4a:bc:78:8d:83:48:47:c8:ac:e8:
23:6a:a8:d4:23:80:21:dc:45:72:05:06:37:c2:e6:
ab:a0:cf:7e:a2:8d:dd:e1:f4:41:92:2c:89:2d:c7:
0b:d4:56:d8:8c:46:51:56:1a:4d:bf:7b:81:d1:55:
6c:2b:62:0d:49:8d:ac:03:92:da:ad:27:d2:0d:51:
b6:fc:85:e3:6a:ae:93:9a:c0:7b:8c:0f:62:bf:8e:
b4:e1:48:0a:7a:28:1e:0f:52:e1:23:1b:66:e2:59:
19:f7:5d:2d:f9:4a:06:49:fd:a4:3a:c1:0d:18:d9:
73:8e:b7:6e:4d:c3:0e:91:eb:d4:7b:d8:19:f5:6a:
6f:b2:a9:eb:c3:c5:70:58:3f:3e:38:1f:38:de:b2:
bc:8b:10:39:5c:50:7e:14:61:3a:11:9c:95:2c:df:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:4C:AA:FD:A9:B1:FD:E4:9E:74:60:F7:D8:DC:A2:C6:65:41:6E
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dc:9c:c3:9f:88:19:38:82:97:63:42:30:3c:45:8f:20:de:
c5:68:d6:af:04:fa:2b:90:f0:78:04:a3:33:36:74:20:86:75:
35:b0:a1:9b:90:42:7c:6a:2a:c3:12:a1:07:1f:7f:85:26:96:
93:2c:12:b4:cb:97:42:75:a4:d4:9e:0c:f4:74:3e:3a:1f:4a:
f1:09:6d:b3:0d:46:64:9a:d0:42:72:f1:2c:e4:a7:0d:7c:6e:
42:c7:16:50:92:a8:a6:26:c1:1b:db:5b:57:49:77:6d:fb:fd:
51:a1:0c:f1:f6:1e:84:87:b2:5f:f7:c0:ba:79:0f:50:ff:d8:
5b:02:97:dd:55:be:f3:6b:75:93:a9:d9:5f:15:c1:b9:64:79:
7b:02:30:43:ec:86:98:58:81:7e:a1:b5:ce:07:18:f1:82:8f:
6c:b8:01:94:71:1c:41:a1:3b:4e:46:ce:b2:46:b3:14:82:87:
9b:6f:b1:41:f5:c0:97:fc:e1:60:25:a2:4e:a1:dd:d9:c7:16:
7b:48:f5:bb:2e:10:ad:42:76:8d:3f:b9:77:2f:a6:20:c6:d2:
da:6b:f2:71:b0:ab:80:4d:9a:48:e2:cb:9d:2f:c5:8f:ac:41:
4c:58:7e:fd:16:1d:4e:7f:c4:0c:e5:cc:f2:13:ba:f1:5d:93:
fa:b2:7a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKTxuBaXbgTCkOsrNWGBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjYwMzI2MDgwMTAxWhcNMjYwMzI3MDgwMTAxWjAzMTEwLwYDVQQD
EyhlM2UyNGNhYWZkYTliMWZkZTQ5ZTc0NjBmN2Q4ZGNhMmM2NjU0MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz2khK8fjykh9c7Cq38YkFOo2t2W
J2iWtdgDXSCt9rje08KaJGdfh8+ToXF5nMUHXHH9WOJUfcQwDsr67l0J5qP51E72
OGmOQXH2JGLyOpREU84ue/HBvPyKtF9iIEq8eI2DSEfIrOgjaqjUI4Ah3EVyBQY3
wuaroM9+oo3d4fRBkiyJLccL1FbYjEZRVhpNv3uB0VVsK2INSY2sA5LarSfSDVG2
/IXjaq6TmsB7jA9iv4604UgKeigeD1LhIxtm4lkZ910t+UoGSf2kOsENGNlzjrdu
TcMOkevUe9gZ9Wpvsqnrw8VwWD8+OB843rK8ixA5XFB+FGE6EZyVLN+oQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPiTKr9qbH95J50YPfY3KLGZUFuMB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdycw5+I
GTiCl2NCMDxFjyDexWjWrwT6K5DweASjMzZ0IIZ1NbChm5BCfGoqwxKhBx9/hSaW
kywStMuXQnWk1J4M9HQ+Oh9K8Qltsw1GZJrQQnLxLOSnDXxuQscWUJKopibBG9tb
V0l3bfv9UaEM8fYehIeyX/fAunkPUP/YWwKX3VW+82t1k6nZXxXBuWR5ewIwQ+yG
mFiBfqG1zgcY8YKPbLgBlHEcQaE7TkbOskazFIKHm2+xQfXAl/zhYCWiTqHd2ccW
e0j1uy4QrUJ2jT+5dy+mIMbS2mvycbCrgE2aSOLLnS/Fj6xBTFh+/RYdTn/EDOXM
8hO68V2T+rJ6fg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:16 2026 by rpki-client