Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
File: mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft (raw, json)
Hash identifier: qqubtC3da9W1CUDNOzXIATICXPkb6nN/jYkTcGZvMuU=
Subject key identifier: AC:B0:7C:F7:93:4D:BB:77:B1:F3:82:1F:BB:61:11:C2:28:EF:CF:41
Authority key identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF
Certificate issuer: /CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef
Certificate serial: 019D32D10385145868874299C14D1F433588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
Manifest number: BF
Signing time: Sat 28 Mar 2026 05:00:51 +0000
Manifest this update: Sat 28 Mar 2026 05:00:51 +0000
Manifest next update: Sun 29 Mar 2026 05:00:51 +0000
Files and hashes: 1: AaT-fL5JWKGrOL8GvEvZO5K_kg8.roa (hash: jfOg1jyji1rFCzF9opIEWmOgvVGmxRn37HA911nURHY=)
2: mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl (hash: oP+MEBo7XErQcaQt0s34NvvEivgvyR+ih+6yWcAutrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:03:85:14:58:68:87:42:99:c1:4d:1f:43:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef
Validity
Not Before: Mar 28 05:00:51 2026 GMT
Not After : Mar 29 05:00:51 2026 GMT
Subject: CN=acb07cf7934dbb77b1f3821fbb6111c228efcf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:b1:3f:d3:5f:fa:39:a4:32:3a:16:f7:10:
c1:78:41:3c:ff:46:ef:b7:fb:25:3b:a9:19:6d:37:
b9:43:35:a2:d0:d2:a4:fc:dd:32:fd:41:9b:7c:11:
90:03:5c:00:ef:d7:93:b7:c2:0e:bd:a3:c1:a5:6e:
2a:df:35:d9:94:3f:54:9f:7d:ec:5e:e3:d7:c2:ce:
55:15:9e:c3:71:c4:2f:eb:52:57:c7:36:94:79:47:
24:50:00:ed:3d:31:79:16:9c:a6:aa:dc:50:30:a4:
15:a4:25:ab:65:06:1d:ed:c6:fd:d7:f5:6e:c0:81:
90:86:7e:e8:6a:d3:f7:a2:85:7f:10:4e:62:48:95:
a5:e0:29:a2:9c:05:a4:2c:ed:e5:e0:0e:75:97:a4:
b0:38:a7:3d:91:12:48:46:fc:1c:5e:79:9b:21:e5:
e6:0c:23:29:49:9c:f2:2e:23:75:f2:a4:f8:af:7a:
b7:66:8d:94:1c:cf:f2:1f:45:49:9d:d7:9d:76:a8:
b8:40:6d:c1:ba:9d:1b:5b:65:87:57:39:60:80:2e:
64:60:c4:c5:a7:38:f5:c0:ba:b0:ce:0d:1e:5b:eb:
47:2c:75:02:dc:d5:87:62:91:92:bb:04:6b:d1:18:
bd:20:c3:8b:9a:f9:f7:98:bc:0b:6a:95:07:89:4c:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:7C:F7:93:4D:BB:77:B1:F3:82:1F:BB:61:11:C2:28:EF:CF:41
X509v3 Authority Key Identifier:
keyid:99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:ea:1e:62:b8:47:16:3a:31:99:67:98:f7:45:1f:50:d9:
2c:c6:f7:6d:68:da:2b:cd:df:13:c3:db:8d:f6:61:66:1f:77:
c1:c8:99:56:06:54:30:a8:32:48:9d:ae:80:ac:3e:60:92:ca:
d3:90:a9:d7:d3:3a:89:2a:2b:4b:96:ba:60:c8:cb:c7:70:b2:
33:86:44:4c:7f:45:43:53:5c:30:33:89:a5:a6:34:c1:0d:93:
5a:4b:95:81:39:6f:85:78:1b:3d:d8:88:11:1d:75:53:cf:95:
51:a5:96:d2:97:69:be:9a:63:fc:7c:34:73:6a:9c:09:69:c9:
8a:96:3c:de:4c:b1:3c:ec:58:37:47:48:5e:1b:ff:62:2a:71:
bf:1f:5b:9b:d5:82:1f:c6:45:63:f9:4d:01:04:c6:80:23:94:
ee:83:d7:d7:a4:bd:c4:fe:9a:05:7e:16:d0:d8:e7:e8:f6:8e:
3d:73:76:02:c5:80:ba:6f:83:3d:34:e5:fb:40:66:1b:1c:d4:
38:f9:d9:d4:96:e7:d8:2c:af:bf:1e:87:b4:bf:2b:52:a7:83:
ab:fc:52:78:06:11:0d:00:c9:1d:3f:84:fd:35:80:f2:25:12:
53:b0:c3:0a:49:4b:90:61:c8:b2:a2:f3:95:8b:03:63:cd:17:
5b:22:b6:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0y0QOFFFhoh0KZwU0fQzWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NWVkMTI5YWIyZjUxMGY2OGJiYzhiM2ZjZjFjOWExZWU3
ZWRkZWYwHhcNMjYwMzI4MDUwMDUxWhcNMjYwMzI5MDUwMDUxWjAzMTEwLwYDVQQD
EyhhY2IwN2NmNzkzNGRiYjc3YjFmMzgyMWZiYjYxMTFjMjI4ZWZjZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzSxP9Nf+jmkMjoW9xDBeEE8/0bv
t/slO6kZbTe5QzWi0NKk/N0y/UGbfBGQA1wA79eTt8IOvaPBpW4q3zXZlD9Un33s
XuPXws5VFZ7DccQv61JXxzaUeUckUADtPTF5FpymqtxQMKQVpCWrZQYd7cb91/Vu
wIGQhn7oatP3ooV/EE5iSJWl4CminAWkLO3l4A51l6SwOKc9kRJIRvwcXnmbIeXm
DCMpSZzyLiN18qT4r3q3Zo2UHM/yH0VJndeddqi4QG3Bup0bW2WHVzlggC5kYMTF
pzj1wLqwzg0eW+tHLHUC3NWHYpGSuwRr0Ri9IMOLmvn3mLwLapUHiUw4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKywfPeTTbt3sfOCH7thEcIo789BMB8GA1UdIwQY
MBaAFJle0SmrL1EPaLvIs/zxyaHuft3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2Et
YjIyODM0NWMzYjZkLzEvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mM2M3YmEtMDFjZC00ZGY0LWI4N2EtYjIyODM0NWMzYjZk
LzEvbVY3Ukthc3ZVUTlvdThpel9QSEpvZTUtM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM/qHmK4
RxY6MZlnmPdFH1DZLMb3bWjaK83fE8PbjfZhZh93wciZVgZUMKgySJ2ugKw+YJLK
05Cp19M6iSorS5a6YMjLx3CyM4ZETH9FQ1NcMDOJpaY0wQ2TWkuVgTlvhXgbPdiI
ER11U8+VUaWW0pdpvppj/Hw0c2qcCWnJipY83kyxPOxYN0dIXhv/Yipxvx9bm9WC
H8ZFY/lNAQTGgCOU7oPX16S9xP6aBX4W0Njn6PaOPXN2AsWAum+DPTTl+0BmGxzU
OPnZ1Jbn2Cyvvx6HtL8rUqeDq/xSeAYRDQDJHT+E/TWA8iUSU7DDCklLkGHIsqLz
lYsDY80XWyK2cA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:54 2026 by rpki-client