Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
File: M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json)
Hash identifier: ytt862aXwT3mvs37PTuZpNPWGXSZL3nphvv5PGcio2Q=
Subject key identifier: 36:23:E8:E9:8E:3A:E6:41:B4:75:90:34:1E:28:F1:B1:53:BB:EF:70
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Certificate issuer: /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial: 019D28BB19AB13F502614D807A5053E2F73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
Manifest number: 02A8
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: 9g6EUKydfW+ctWIuxrq7eORLvmZPzHeRs02YJgW0SO8=)
2: Z_OPvHfWF8socYEtUmBjgKSXUQM.roa (hash: c2FzX4VntHlUiCiWN/7rahyeWHvhR6mDon/hVfFkBVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:19:ab:13:f5:02:61:4d:80:7a:50:53:e2:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=3623e8e98e3ae641b47590341e28f1b153bbef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:10:c0:21:95:e8:8c:7f:dc:30:4a:11:82:
e5:d6:79:65:db:de:0a:4e:7a:ed:10:89:33:86:2e:
4b:17:2b:3c:3e:4d:f1:0c:cd:09:ac:81:70:23:a1:
bb:e4:71:d6:d7:be:11:9c:1c:df:98:47:35:c4:0a:
df:63:dd:5b:41:94:12:71:02:7d:77:37:8d:dc:6a:
d4:a3:7a:7e:87:55:23:66:e0:01:ab:a9:ef:f3:03:
e1:a1:05:fa:2d:35:e6:6b:4b:68:7b:49:37:17:2b:
37:0b:76:b5:b0:13:82:a6:ef:60:a9:09:5f:61:9f:
97:da:70:ff:1b:47:32:82:46:74:51:b2:b6:99:ea:
68:c4:86:b4:2a:f4:98:93:9b:20:2f:ec:a2:48:fe:
af:a6:31:20:fe:8b:75:65:5b:25:8a:16:62:d3:44:
d8:73:7a:76:d8:06:9a:ed:45:ea:77:6b:99:83:c6:
a9:a9:b2:9f:76:cf:b9:64:ca:76:3b:4a:b1:50:a7:
40:48:55:e3:32:69:20:d6:de:0f:aa:c2:ab:7e:bb:
2b:3a:82:d4:8a:0f:91:65:ff:5c:b2:4e:3f:ac:47:
79:31:b6:1f:db:ea:29:b8:a6:12:38:2c:8d:37:b9:
25:63:47:7f:3a:81:ad:0d:8f:f2:c3:d1:90:aa:96:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:E8:E9:8E:3A:E6:41:B4:75:90:34:1E:28:F1:B1:53:BB:EF:70
X509v3 Authority Key Identifier:
keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:4a:d3:4d:81:55:73:40:56:1a:c5:5d:de:78:78:cb:2a:
1a:17:69:f3:38:74:a4:b5:76:10:d1:ab:28:81:cf:77:ec:52:
0e:8d:59:23:1f:1c:31:43:c8:8c:5c:cd:ad:15:24:97:cb:4a:
d9:8c:be:5a:7d:7b:51:d5:03:7c:a2:99:c3:4b:88:f9:d2:95:
22:d2:01:4f:74:de:ed:3e:a3:e6:58:82:66:53:85:ce:00:8f:
f1:4a:59:1b:84:0c:82:e9:eb:24:0e:f9:99:6e:eb:eb:2c:ea:
ba:37:a7:cd:c0:cd:08:8f:a8:59:7d:5c:84:a1:e3:23:8d:78:
8d:fa:7c:cb:22:e1:33:72:ef:af:7a:06:83:5d:26:c0:03:2a:
7a:de:08:fb:2c:6b:ba:87:2a:4c:b1:76:80:0e:61:41:b3:14:
82:e9:65:d1:a4:7c:21:4d:a7:87:65:33:37:d3:74:7d:63:f8:
31:81:84:c6:58:62:4b:14:a2:f0:62:50:16:a3:e7:7c:bf:f5:
6f:c7:d1:a0:a8:b8:3f:3b:b8:1d:cb:48:86:e2:bf:70:1f:bc:
ed:84:b5:a5:66:a9:ab:e1:8e:3d:0d:a2:35:69:e3:e6:69:92:
a7:8e:38:00:2a:44:bd:d8:e9:51:4d:67:36:21:99:64:e7:36:
a5:00:c6:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxmrE/UCYU2AelBT4vc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjQ2YWIxN2FlZjIzOWE5NmJkZTdiNmNjYjcwNmY3ZTBi
NjJiNmUwHhcNMjYwMzI2MDYwMDQzWhcNMjYwMzI3MDYwMDQzWjAzMTEwLwYDVQQD
EygzNjIzZThlOThlM2FlNjQxYjQ3NTkwMzQxZTI4ZjFiMTUzYmJlZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3cQwCGV6Ix/3DBKEYLl1nll294K
TnrtEIkzhi5LFys8Pk3xDM0JrIFwI6G75HHW174RnBzfmEc1xArfY91bQZQScQJ9
dzeN3GrUo3p+h1UjZuABq6nv8wPhoQX6LTXma0toe0k3Fys3C3a1sBOCpu9gqQlf
YZ+X2nD/G0cygkZ0UbK2mepoxIa0KvSYk5sgL+yiSP6vpjEg/ot1ZVslihZi00TY
c3p22Aaa7UXqd2uZg8apqbKfds+5ZMp2O0qxUKdASFXjMmkg1t4PqsKrfrsrOoLU
ig+RZf9csk4/rEd5MbYf2+opuKYSOCyNN7klY0d/OoGtDY/yw9GQqpbWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYj6OmOOuZBtHWQNB4o8bFTu+9wMB8GA1UdIwQY
MBaAFDP0arF67yOalr3ntsy3BvfgtituMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYt
NmYwN2EwN2QyNzY5LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMTZiY2MtZWE1Yi00ZTI5LTgxYzYtNmYwN2EwN2QyNzY5
LzEvTV9ScXNYcnZJNXFXdmVlMnpMY0c5LUMySzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/9K002B
VXNAVhrFXd54eMsqGhdp8zh0pLV2ENGrKIHPd+xSDo1ZIx8cMUPIjFzNrRUkl8tK
2Yy+Wn17UdUDfKKZw0uI+dKVItIBT3Te7T6j5liCZlOFzgCP8UpZG4QMgunrJA75
mW7r6yzqujenzcDNCI+oWX1chKHjI414jfp8yyLhM3Lvr3oGg10mwAMqet4I+yxr
uocqTLF2gA5hQbMUgull0aR8IU2nh2UzN9N0fWP4MYGExlhiSxSi8GJQFqPnfL/1
b8fRoKi4Pzu4HctIhuK/cB+87YS1pWapq+GOPQ2iNWnj5mmSp444ACpEvdjpUU1n
NiGZZOc2pQDGTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:47 2026 by rpki-client