Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: ULcveRDotiN519dkTtlhrcb81J6ElxNDowmyp8jGt5I=
Subject key identifier: 24:C2:66:56:99:C0:87:58:66:EC:BD:89:4B:89:88:06:75:08:79:8B
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019D26286DC42EDD057092708BF36EB7377E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: 67JbtkLl_lydrJEUs03-aJCfJu8.roa (hash: 7jfLLjxy8JsvhI7ber+RL+ELuddGL4nRXFUSNScrgW0=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: Cn8GHpzTvqvRcwhB7mpJ8AlZvWG5VSYS88fTIZdtJXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6d:c4:2e:dd:05:70:92:70:8b:f3:6e:b7:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=24c2665699c0875866ecbd894b8988067508798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:91:b2:67:6c:d8:03:52:1b:01:ab:2f:c1:
6a:e8:a8:f9:e5:a0:d4:68:3d:0a:61:16:bb:6f:e7:
a1:a5:23:f5:75:f2:aa:c9:7b:44:62:8c:78:cc:5f:
c8:45:13:39:1b:aa:e4:cd:94:19:27:6e:3f:e5:ee:
b7:43:0b:93:dc:74:11:be:f2:9b:d5:24:f7:f0:65:
e9:3c:45:10:fc:f2:28:e6:42:d5:05:ef:df:05:58:
78:b3:08:e6:d4:47:a8:2f:b6:3e:41:2a:19:d6:aa:
61:c8:3b:4a:ca:9f:52:cb:f9:98:cc:cd:98:48:f6:
74:5d:e3:52:d3:ed:52:ac:5a:a4:69:1b:bf:56:0d:
7b:9f:9d:f0:83:0c:b3:2e:a3:3e:f0:41:89:a9:3b:
b6:84:18:28:88:5d:33:95:66:19:da:9d:b4:b2:19:
d3:c9:01:65:59:1d:70:9e:e2:e4:df:04:2b:a8:31:
3b:06:c9:72:f8:fe:a1:d6:32:d0:0f:29:83:34:30:
ba:df:9c:25:a1:b6:56:cc:13:19:1d:00:c9:97:57:
9e:f4:ce:18:92:86:1c:d5:8d:11:9f:6a:31:35:de:
00:84:7f:ff:b4:9b:50:32:95:66:73:42:4d:03:e7:
5e:4b:4e:d3:53:d1:66:51:31:62:fe:ab:7b:39:f2:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:66:56:99:C0:87:58:66:EC:BD:89:4B:89:88:06:75:08:79:8B
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:77:56:12:08:c9:8e:5e:18:02:2a:86:6d:8a:c4:79:9a:
a4:ed:db:7b:51:22:cc:6c:71:12:60:2f:0c:87:87:e9:3c:51:
e1:ee:0e:d6:d6:d4:8b:3a:b4:d8:ce:4c:14:3c:69:3a:1e:13:
9a:6c:0a:39:57:07:7e:72:1c:41:4a:12:a8:6d:de:bd:9d:73:
0e:01:60:4a:1e:57:c0:8d:38:57:d7:ee:81:73:f2:bf:2d:67:
43:a8:93:11:73:05:e7:1b:b6:1a:1b:f9:5e:db:36:63:76:bb:
8d:c9:69:73:df:79:e7:de:84:97:29:d9:9a:ee:1b:1a:99:a8:
69:0a:03:10:8b:b1:d8:ae:e0:df:a8:62:71:8f:90:0d:57:04:
d8:87:23:5c:fb:3c:0c:03:cb:e2:0f:14:80:30:f7:d8:e9:64:
45:0b:68:53:18:32:c9:e9:f8:e6:38:de:e8:fc:ea:46:a6:d6:
6c:68:8b:cd:32:d7:cf:f1:6b:02:88:1a:4a:37:2b:ab:e5:8c:
8e:1f:1b:a7:d1:d5:8c:6a:0b:f7:e3:a3:29:0a:8a:13:ae:00:
b5:4d:f4:0d:a5:6d:00:4b:74:e9:7f:28:aa:69:45:f0:e5:c9:
a4:89:e9:0d:b0:cd:2c:0d:87:47:88:ff:4d:9f:98:e6:b2:bc:
da:91:8c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKG3ELt0FcJJwi/Nutzd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh
ZmUzYTMwHhcNMjYwMzI1MTgwMTE2WhcNMjYwMzI2MTgwMTE2WjAzMTEwLwYDVQQD
EygyNGMyNjY1Njk5YzA4NzU4NjZlY2JkODk0Yjg5ODgwNjc1MDg3OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkSRsmds2ANSGwGrL8Fq6Kj55aDU
aD0KYRa7b+ehpSP1dfKqyXtEYox4zF/IRRM5G6rkzZQZJ24/5e63QwuT3HQRvvKb
1ST38GXpPEUQ/PIo5kLVBe/fBVh4swjm1EeoL7Y+QSoZ1qphyDtKyp9Sy/mYzM2Y
SPZ0XeNS0+1SrFqkaRu/Vg17n53wgwyzLqM+8EGJqTu2hBgoiF0zlWYZ2p20shnT
yQFlWR1wnuLk3wQrqDE7Bsly+P6h1jLQDymDNDC635wlobZWzBMZHQDJl1ee9M4Y
koYc1Y0Rn2oxNd4AhH//tJtQMpVmc0JNA+deS07TU9FmUTFi/qt7OfKNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTCZlaZwIdYZuy9iUuJiAZ1CHmLMB8GA1UdIwQY
MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt
NWZiYzIzMGFiZGMyLzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy
LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9d3VhII
yY5eGAIqhm2KxHmapO3be1EizGxxEmAvDIeH6TxR4e4O1tbUizq02M5MFDxpOh4T
mmwKOVcHfnIcQUoSqG3evZ1zDgFgSh5XwI04V9fugXPyvy1nQ6iTEXMF5xu2Ghv5
Xts2Y3a7jclpc995596ElynZmu4bGpmoaQoDEIux2K7g36hicY+QDVcE2IcjXPs8
DAPL4g8UgDD32OlkRQtoUxgyyen45jje6PzqRqbWbGiLzTLXz/FrAogaSjcrq+WM
jh8bp9HVjGoL9+OjKQqKE64AtU30DaVtAEt06X8oqmlF8OXJpInpDbDNLA2HR4j/
TZ+Y5rK82pGMeA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:37 2026 by rpki-client