Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json)
Hash identifier: oI4qZ/VkEWpuh5hmNCwaZjn3CMKLO4QD562/oXXHbs4=
Subject key identifier: 90:7C:1C:E5:BE:B7:B7:9B:68:B0:97:6D:2A:22:3F:54:32:18:76:D2
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 019D29977AA2EA63301C85E89B7A27F4D786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
Manifest number: 0187
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: UD9iF_R6L0ElBhP-UEdIcwVMsf0.roa (hash: gpzn1rcAvQwpd3pJlORD2TbtHm+k7RVVJwafWKS8Tz8=)
2: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: C8JdRnK8hu5cgT6Le0g6TbmaRrG/J3iAu/kjsZQEGWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7a:a2:ea:63:30:1c:85:e8:9b:7a:27:f4:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=907c1ce5beb7b79b68b0976d2a223f54321876d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:08:08:c7:e2:cf:d0:48:b4:10:f4:0f:27:
73:3e:b4:ce:cb:71:59:97:f8:f6:11:a7:61:50:47:
ba:99:d2:5d:51:c1:f3:1b:d3:b4:b5:6b:33:93:cd:
63:92:31:e5:17:62:99:01:60:ce:88:0d:e0:3d:09:
51:d8:1e:9f:35:d3:16:65:b2:17:99:39:84:1a:86:
03:8e:9e:dd:a9:80:6f:f2:d2:a6:0b:11:d6:8a:6b:
13:e8:d8:52:8a:b3:1c:49:33:cc:56:ac:57:e7:a3:
84:1d:a3:0b:6d:3b:ca:bc:f2:3b:c6:6e:92:9e:ac:
16:49:39:5e:ba:07:53:7a:a8:d5:f0:43:b3:4a:96:
b2:97:67:4d:67:06:07:da:a3:51:78:81:36:83:7b:
5d:f2:46:8b:93:07:3f:34:f9:31:cb:0c:41:e8:7d:
a7:59:a9:bd:76:4b:3e:a7:4b:3a:a1:b8:58:80:fa:
99:69:98:48:21:46:78:b5:3c:cd:7d:c9:86:14:31:
e4:fc:e4:aa:c8:80:e0:04:c7:cc:c3:46:f2:c6:d1:
0f:0d:6c:c1:f2:86:10:b6:0c:56:18:fb:de:18:56:
52:8e:0e:43:4c:fa:05:0e:e8:60:91:82:82:19:f4:
0b:cf:26:67:84:78:2b:bf:d1:38:22:57:c7:22:b5:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:1C:E5:BE:B7:B7:9B:68:B0:97:6D:2A:22:3F:54:32:18:76:D2
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:54:e4:46:4d:f2:d5:46:84:7b:e1:a3:d0:46:3d:13:85:81:
51:22:49:a7:d8:4d:17:10:25:19:96:be:e1:ec:44:c0:bd:69:
8f:14:43:8f:b2:91:57:2d:66:33:95:1b:66:6a:b6:cb:b0:42:
4d:14:49:31:1f:85:dd:00:f8:71:d5:f6:fb:c3:9a:73:64:05:
60:d0:e0:f3:c6:d7:e3:c3:2e:4d:92:54:ca:eb:b6:43:2c:aa:
31:06:97:5c:ff:15:c8:29:46:3b:cf:98:c5:a1:e9:5d:ef:12:
f8:99:d3:f1:ec:4d:c6:34:fa:bb:8b:35:ab:52:20:c9:46:01:
03:1f:48:f3:82:ae:4d:7e:02:18:ab:e1:ae:9a:3a:48:b0:1d:
25:4a:80:b7:b9:fa:22:b6:28:91:a8:36:fa:de:ca:26:30:c6:
33:c3:14:4d:e6:24:a1:e2:17:e2:09:44:cf:09:ef:31:93:7e:
70:a3:d9:96:41:11:e7:a0:ee:8d:52:0b:41:b6:d8:55:99:8e:
94:73:e3:76:bc:c3:bb:9d:d8:e6:77:c5:30:28:77:eb:f4:c8:
56:24:fa:e5:84:a5:a2:3f:46:37:c4:5d:1d:12:10:31:3b:a5:
37:0f:86:4c:cc:19:f3:84:93:8b:ee:34:da:92:ac:f6:6e:50:
26:3b:c4:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3qi6mMwHIXom3on9NeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzZkNTM1YjBmMjc1YTI2MTg1ZjhmNGRjYTU4MGQyNmQ3
YTk3NDYwHhcNMjYwMzI2MTAwMTI2WhcNMjYwMzI3MTAwMTI2WjAzMTEwLwYDVQQD
Eyg5MDdjMWNlNWJlYjdiNzliNjhiMDk3NmQyYTIyM2Y1NDMyMTg3NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxwICMfiz9BItBD0DydzPrTOy3FZ
l/j2EadhUEe6mdJdUcHzG9O0tWszk81jkjHlF2KZAWDOiA3gPQlR2B6fNdMWZbIX
mTmEGoYDjp7dqYBv8tKmCxHWimsT6NhSirMcSTPMVqxX56OEHaMLbTvKvPI7xm6S
nqwWSTleugdTeqjV8EOzSpayl2dNZwYH2qNReIE2g3td8kaLkwc/NPkxywxB6H2n
Wam9dks+p0s6obhYgPqZaZhIIUZ4tTzNfcmGFDHk/OSqyIDgBMfMw0byxtEPDWzB
8oYQtgxWGPveGFZSjg5DTPoFDuhgkYKCGfQLzyZnhHgrv9E4IlfHIrUbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB8HOW+t7ebaLCXbSoiP1QyGHbSMB8GA1UdIwQY
MBaAFHDG1TWw8nWiYYX49NylgNJtepdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zNTMzZDAtMTM2Ny00NGIyLTkwNDgt
MDAyODFhNWJhNmM3LzEvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zNTMzZDAtMTM2Ny00NGIyLTkwNDgtMDAyODFhNWJhNmM3
LzEvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVTkRk3y
1UaEe+Gj0EY9E4WBUSJJp9hNFxAlGZa+4exEwL1pjxRDj7KRVy1mM5UbZmq2y7BC
TRRJMR+F3QD4cdX2+8Oac2QFYNDg88bX48MuTZJUyuu2QyyqMQaXXP8VyClGO8+Y
xaHpXe8S+JnT8exNxjT6u4s1q1IgyUYBAx9I84KuTX4CGKvhrpo6SLAdJUqAt7n6
IrYokag2+t7KJjDGM8MUTeYkoeIX4glEzwnvMZN+cKPZlkER56DujVILQbbYVZmO
lHPjdrzDu53Y5nfFMCh36/TIViT65YSloj9GN8RdHRIQMTulNw+GTMwZ84STi+40
2pKs9m5QJjvEaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:31 2026 by rpki-client