Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: zqS/Jqu9FRU6HHtKQjUHCTf726A9WhR+M3o6fXvJa7I=
Subject key identifier: 65:A5:00:E2:C0:07:42:B7:25:D3:47:BB:BF:59:16:22:A0:FC:AF:E4
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019D28F258B1DC54A68ED6FAF96FB5F67AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1897
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: QUEjbRrX4bQXCF2/GpYUQYI15G09mlm+3lnlLFlvyto=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:58:b1:dc:54:a6:8e:d6:fa:f9:6f:b5:f6:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=65a500e2c00742b725d347bbbf591622a0fcafe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:5b:57:93:50:46:ac:ae:94:1b:b6:64:e0:
43:57:38:31:f3:58:3f:13:d8:e9:1d:ec:83:f9:c2:
0f:15:72:e2:dd:52:56:01:5f:0b:05:7d:8b:74:9a:
0c:79:26:f7:8f:d8:32:7a:b4:3b:53:b9:d7:4f:d0:
93:c9:bf:00:bd:21:72:29:eb:fd:fa:33:00:52:61:
a9:bc:5a:9f:c6:57:3e:ad:02:2a:89:4a:3b:3c:33:
cf:05:46:0b:d8:eb:86:13:4b:cc:b6:c5:b4:0a:e7:
6d:4a:ea:67:2d:9c:56:21:a2:27:93:94:3b:7e:0d:
c6:29:e6:4c:7b:64:7b:37:8d:29:04:c7:1c:8c:5b:
4c:3b:2b:7c:17:ba:60:06:cb:72:a7:89:f7:fe:b2:
ae:6c:0d:da:1e:f3:06:2a:60:c1:de:99:6c:92:8b:
b3:c2:f3:8d:dc:69:c2:73:e9:61:ad:03:52:bd:4c:
04:b2:ca:fc:dc:81:8b:96:e0:19:cd:84:28:ef:db:
14:e6:90:9c:09:fb:82:6f:cc:72:de:08:f8:0a:d0:
a6:8a:a3:63:bb:52:02:1f:46:1a:90:e7:43:5f:7d:
74:4f:11:cf:e3:10:90:6a:26:a1:77:c2:dd:7f:5f:
27:ee:0b:f0:05:dd:d8:b5:2b:01:8a:26:75:fb:11:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:00:E2:C0:07:42:B7:25:D3:47:BB:BF:59:16:22:A0:FC:AF:E4
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:21:ca:75:db:8a:9c:41:78:9d:9c:18:f2:6f:80:4b:2b:45:
1b:1f:82:97:a2:02:ef:ba:9c:1d:75:7e:d0:eb:00:3d:89:c2:
29:f0:d1:cf:a1:c8:b6:76:99:5b:19:36:1d:ce:dd:cf:0f:1f:
29:42:05:d2:6e:29:66:52:92:97:5c:ce:d0:d3:a1:9e:26:94:
7c:71:3d:59:69:a3:88:fa:10:2c:a7:e6:ce:32:27:c2:57:76:
72:33:d9:e9:ac:d1:14:58:c0:7e:32:d6:d8:92:67:cc:5f:1b:
c3:f5:c3:4e:50:ed:f4:8f:8d:aa:eb:2a:e8:1a:ca:bb:5a:17:
12:e1:55:76:79:a5:16:5d:d2:09:ff:55:f9:2c:c3:29:09:3c:
52:b8:5c:cd:9c:48:c2:a1:ec:b9:55:14:ec:28:a3:4e:06:1d:
f1:e2:17:72:b8:e7:f1:69:f9:73:a9:91:a1:63:24:70:25:10:
49:9c:10:5c:ca:68:b2:3f:27:81:a9:a4:da:48:82:3b:8c:dd:
d9:b7:69:43:df:e0:41:3c:bf:20:24:7f:55:26:c7:77:d6:84:
6d:18:6d:0f:e2:e3:38:0e:4c:bb:fd:86:7c:98:b8:57:c1:44:
99:c4:56:78:a0:49:23:8c:f8:0e:3d:98:2e:d4:cc:1d:fd:2c:
eb:d6:42:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lix3FSmjtb6+W+19nrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjYwMzI2MDcwMTA0WhcNMjYwMzI3MDcwMTA0WjAzMTEwLwYDVQQD
Eyg2NWE1MDBlMmMwMDc0MmI3MjVkMzQ3YmJiZjU5MTYyMmEwZmNhZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k1bV5NQRqyulBu2ZOBDVzgx81g/
E9jpHeyD+cIPFXLi3VJWAV8LBX2LdJoMeSb3j9gyerQ7U7nXT9CTyb8AvSFyKev9
+jMAUmGpvFqfxlc+rQIqiUo7PDPPBUYL2OuGE0vMtsW0CudtSupnLZxWIaInk5Q7
fg3GKeZMe2R7N40pBMccjFtMOyt8F7pgBstyp4n3/rKubA3aHvMGKmDB3plskouz
wvON3GnCc+lhrQNSvUwEssr83IGLluAZzYQo79sU5pCcCfuCb8xy3gj4CtCmiqNj
u1ICH0YakOdDX310TxHP4xCQaiahd8Ldf18n7gvwBd3YtSsBiiZ1+xErkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWlAOLAB0K3JdNHu79ZFiKg/K/kMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSHKdduK
nEF4nZwY8m+ASytFGx+Cl6IC77qcHXV+0OsAPYnCKfDRz6HItnaZWxk2Hc7dzw8f
KUIF0m4pZlKSl1zO0NOhniaUfHE9WWmjiPoQLKfmzjInwld2cjPZ6azRFFjAfjLW
2JJnzF8bw/XDTlDt9I+Nqusq6BrKu1oXEuFVdnmlFl3SCf9V+SzDKQk8UrhczZxI
wqHsuVUU7CijTgYd8eIXcrjn8Wn5c6mRoWMkcCUQSZwQXMposj8ngamk2kiCO4zd
2bdpQ9/gQTy/ICR/VSbHd9aEbRhtD+LjOA5Mu/2GfJi4V8FEmcRWeKBJI4z4Dj2Y
LtTMHf0s69ZC9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:27 2026 by rpki-client