Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: b4U5JxwytMXh9e0C5wbYo9jxGfBaDIc+moneJk2xkIk=
Subject key identifier: A1:BF:49:73:67:53:3E:F4:62:FB:77:43:53:24:84:03:0C:DD:CC:38
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019D281703E05D27F6CE0A12BBE36BD0573B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: XO0MK9glxVWqzDuFfTE0lfaArI0mvSNqVqGU3EnScZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:03:e0:5d:27:f6:ce:0a:12:bb:e3:6b:d0:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=a1bf497367533ef462fb7743532484030cddcc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:92:3f:b8:68:f5:06:82:4b:2c:76:b4:93:
8f:55:b3:7d:7d:68:b4:93:35:39:30:5d:72:20:ae:
a1:c6:67:a4:ff:13:cf:d2:11:e7:0a:ae:d7:72:24:
68:06:6c:fe:97:ea:32:71:3d:a0:3c:b4:d8:f4:82:
ed:7c:0f:37:c6:fb:5e:78:c2:8e:d8:9d:33:58:a7:
ce:5c:2f:04:6d:9a:58:d9:49:06:89:c2:63:6a:e1:
5a:b4:32:33:9e:63:8d:d1:75:b4:e2:e1:f1:9a:66:
ff:56:60:23:2a:0e:4a:b9:58:f9:6c:15:11:48:79:
8c:24:1c:72:77:c5:29:57:9c:b4:bd:6a:e4:d8:35:
d5:19:d9:95:b6:a2:a9:32:4b:82:9d:af:10:1d:b4:
69:5b:bd:b3:09:0b:6c:ed:87:10:e7:36:31:3e:3b:
9a:b3:8f:7d:fd:a6:55:74:72:c7:42:0c:82:9c:f4:
e9:1e:32:fb:3f:0f:8f:2e:5e:7f:46:66:40:f3:6d:
bf:c0:60:d5:07:ad:a9:f4:9b:eb:75:8d:20:0b:62:
db:9d:b8:92:51:8f:78:38:18:7d:ea:58:fa:03:ca:
a9:79:6d:c4:a7:e4:49:6e:2b:12:03:b5:4a:f1:fe:
7f:c3:d2:5e:41:d7:96:15:16:e9:45:8d:2b:b6:62:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:49:73:67:53:3E:F4:62:FB:77:43:53:24:84:03:0C:DD:CC:38
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b5:8f:33:40:4e:10:2d:2a:7d:26:5d:82:0f:b4:1d:00:36:
d2:09:7b:23:4a:6a:26:ec:10:2f:65:ad:63:e9:85:d3:00:23:
9f:1f:ed:5e:e0:8a:d5:3b:5f:49:a5:74:56:1a:6c:5e:99:b0:
4e:d5:40:b3:80:3c:04:99:05:2f:67:f0:af:6e:59:7d:f2:a3:
22:46:8d:d6:fd:49:1f:ce:9a:1a:da:c6:0a:bf:49:50:b1:3c:
fa:7a:9c:b1:f5:c4:12:e8:94:1a:c1:01:9e:49:dd:c0:a2:79:
b0:c9:89:b7:65:d1:aa:17:cd:58:19:e5:a4:90:ac:04:62:8e:
68:fa:1b:36:37:20:df:2a:2f:36:f6:9e:62:99:c3:d9:10:22:
43:d6:d8:ff:e6:f7:b0:e5:c2:bd:ec:5b:d2:65:08:48:be:0b:
93:7c:d2:14:ed:a0:e0:8e:c2:db:3c:4a:b4:07:1a:ce:c6:a6:
c8:de:bb:16:77:6a:0b:51:a8:1f:3e:dd:6c:8b:23:5c:de:87:
8f:9e:bb:6d:15:dc:ea:fb:48:52:65:43:e6:a1:cd:28:50:7d:
5d:7c:d3:8a:bf:e2:7b:3f:08:5f:24:15:8c:4f:d4:12:c7:37:
8c:c5:b8:0e:f6:5c:90:2a:2a:0e:f4:15:a6:d0:dd:c6:5d:b5:
12:6a:39:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFwPgXSf2zgoSu+Nr0Fc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjYwMzI2MDMwMTMwWhcNMjYwMzI3MDMwMTMwWjAzMTEwLwYDVQQD
EyhhMWJmNDk3MzY3NTMzZWY0NjJmYjc3NDM1MzI0ODQwMzBjZGRjYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjySP7ho9QaCSyx2tJOPVbN9fWi0
kzU5MF1yIK6hxmek/xPP0hHnCq7XciRoBmz+l+oycT2gPLTY9ILtfA83xvteeMKO
2J0zWKfOXC8EbZpY2UkGicJjauFatDIznmON0XW04uHxmmb/VmAjKg5KuVj5bBUR
SHmMJBxyd8UpV5y0vWrk2DXVGdmVtqKpMkuCna8QHbRpW72zCQts7YcQ5zYxPjua
s499/aZVdHLHQgyCnPTpHjL7Pw+PLl5/RmZA822/wGDVB62p9JvrdY0gC2LbnbiS
UY94OBh96lj6A8qpeW3Ep+RJbisSA7VK8f5/w9JeQdeWFRbpRY0rtmKeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG/SXNnUz70Yvt3Q1MkhAMM3cw4MB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrWPM0BO
EC0qfSZdgg+0HQA20gl7I0pqJuwQL2WtY+mF0wAjnx/tXuCK1TtfSaV0VhpsXpmw
TtVAs4A8BJkFL2fwr25ZffKjIkaN1v1JH86aGtrGCr9JULE8+nqcsfXEEuiUGsEB
nkndwKJ5sMmJt2XRqhfNWBnlpJCsBGKOaPobNjcg3yovNvaeYpnD2RAiQ9bY/+b3
sOXCvexb0mUISL4Lk3zSFO2g4I7C2zxKtAcazsamyN67FndqC1GoHz7dbIsjXN6H
j567bRXc6vtIUmVD5qHNKFB9XXzTir/iez8IXyQVjE/UEsc3jMW4DvZckCoqDvQV
ptDdxl21Emo50A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:51 2026 by rpki-client