Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: 6xkhXNM2/dCekDEupR8zsOt2ekbnv8rE0AWkRUld/8w=
Subject key identifier: 0E:81:1C:B1:70:C9:16:7F:4D:D3:16:FC:56:67:83:BE:8D:E9:B2:C5
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019D2884B3817AACB1BD8AAD21B09FE49F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: hHVyDtSMyppfpKcgXOGsz9McOleVQYVieUZTS8XxCR4=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b3:81:7a:ac:b1:bd:8a:ad:21:b0:9f:e4:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=0e811cb170c9167f4dd316fc566783be8de9b2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:80:0c:58:d5:71:9d:ff:36:ee:0b:0f:eb:
fa:15:3a:2d:9c:eb:03:b7:ab:1d:d5:c8:bb:9b:71:
59:a3:6b:66:d2:21:50:2c:a6:37:89:78:34:c7:2b:
6d:36:77:35:15:48:5f:4e:0e:34:96:c0:82:5d:d9:
c4:16:41:b4:90:b5:10:64:ef:bf:80:6e:d4:74:d5:
5c:c5:70:5a:cb:7f:da:35:68:74:67:71:bd:8c:34:
e6:df:7c:9d:03:86:12:f2:ab:ae:3e:2c:0c:d3:32:
fe:a1:92:27:95:29:95:01:00:6a:23:c5:98:9f:f3:
39:7b:cc:2d:46:de:50:dc:c3:a6:18:66:48:e9:88:
88:bd:cd:33:49:69:e3:c5:5e:be:38:ff:67:09:56:
2d:36:ad:73:bc:f4:1b:c3:e3:ff:50:bc:9b:5e:41:
4a:fa:cc:ca:74:2d:0e:39:c1:b6:eb:c4:88:5b:96:
f2:98:60:f6:c7:f6:a8:a2:7f:52:d3:d7:8a:11:57:
84:51:ed:a7:b8:9b:4f:b1:97:97:80:cf:b6:d1:01:
53:54:a4:7a:07:b6:a1:01:41:93:bf:9c:a6:2a:07:
5e:9e:91:cf:62:62:f9:d8:91:92:02:a1:9b:bd:38:
02:20:5a:32:5c:ff:16:ac:c5:3e:d2:c5:07:6a:41:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:1C:B1:70:C9:16:7F:4D:D3:16:FC:56:67:83:BE:8D:E9:B2:C5
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b6:2e:25:e8:fc:e6:ef:1f:2e:da:12:e1:b4:ad:41:e3:db:
99:fd:03:2c:18:16:41:5f:3b:43:af:db:ea:eb:bb:8c:b0:10:
0e:54:a5:bd:21:79:2a:0d:4b:a8:c2:95:64:f5:d0:30:66:90:
e7:c9:11:a1:f3:d2:d7:52:92:31:ac:1c:77:b7:8e:e3:2c:f1:
22:19:cb:14:db:fa:2d:95:58:c9:24:92:ba:0b:74:0f:82:66:
2c:e9:8a:53:28:d7:74:ee:24:f8:b8:d4:f9:b1:74:77:44:49:
52:ab:10:ac:79:9d:ad:ef:6a:cd:93:9f:d9:e3:75:9c:18:ec:
d1:93:f4:14:c4:66:59:39:df:fd:88:de:7c:ec:48:70:90:4e:
51:7c:cf:1f:d2:15:95:49:bf:95:d0:d2:41:c0:de:1b:69:f9:
1b:2b:c0:f5:31:77:dd:5c:9e:9a:09:36:a7:e9:8a:eb:d7:91:
ea:d9:da:57:01:d4:a6:ce:05:2a:f6:17:63:40:86:c2:93:03:
af:0e:86:63:94:8d:d9:17:7e:3c:51:59:59:f5:a4:14:4f:6b:
17:a3:52:63:e8:fc:1c:5e:57:fb:84:96:ba:23:90:ff:85:52:
c0:11:a9:28:91:4e:82:19:20:ce:ad:75:03:4b:52:8a:73:b5:
e3:5a:7a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohLOBeqyxvYqtIbCf5J8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjRmNDBmMzIxMTU2MWMyOWYxYmJjMzIwYmQ4N2NmYTJk
ZGQwMjkwHhcNMjYwMzI2MDUwMTE4WhcNMjYwMzI3MDUwMTE4WjAzMTEwLwYDVQQD
EygwZTgxMWNiMTcwYzkxNjdmNGRkMzE2ZmM1NjY3ODNiZThkZTliMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFeADFjVcZ3/Nu4LD+v6FTotnOsD
t6sd1ci7m3FZo2tm0iFQLKY3iXg0xyttNnc1FUhfTg40lsCCXdnEFkG0kLUQZO+/
gG7UdNVcxXBay3/aNWh0Z3G9jDTm33ydA4YS8quuPiwM0zL+oZInlSmVAQBqI8WY
n/M5e8wtRt5Q3MOmGGZI6YiIvc0zSWnjxV6+OP9nCVYtNq1zvPQbw+P/ULybXkFK
+szKdC0OOcG268SIW5bymGD2x/aoon9S09eKEVeEUe2nuJtPsZeXgM+20QFTVKR6
B7ahAUGTv5ymKgdenpHPYmL52JGSAqGbvTgCIFoyXP8WrMU+0sUHakF5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6BHLFwyRZ/TdMW/FZng76N6bLFMB8GA1UdIwQY
MBaAFP+09A8yEVYcKfG7wyC9h8+i3dApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGIt
ZDUzZjk0ZTIwN2E5LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNDhkODgtNjEzNi00Mzc0LTk5NGItZDUzZjk0ZTIwN2E5
LzEvXzdUMER6SVJWaHdwOGJ2RElMMkh6NkxkMENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrYuJej8
5u8fLtoS4bStQePbmf0DLBgWQV87Q6/b6uu7jLAQDlSlvSF5Kg1LqMKVZPXQMGaQ
58kRofPS11KSMawcd7eO4yzxIhnLFNv6LZVYySSSugt0D4JmLOmKUyjXdO4k+LjU
+bF0d0RJUqsQrHmdre9qzZOf2eN1nBjs0ZP0FMRmWTnf/YjefOxIcJBOUXzPH9IV
lUm/ldDSQcDeG2n5GyvA9TF33Vyemgk2p+mK69eR6tnaVwHUps4FKvYXY0CGwpMD
rw6GY5SN2Rd+PFFZWfWkFE9rF6NSY+j8HF5X+4SWuiOQ/4VSwBGpKJFOghkgzq11
A0tSinO141p6iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:19 2026 by rpki-client