Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: vGHU37ZFWQqJ/BeZxWTSYo052sPL20ahV4oeeen1vSs=
Subject key identifier: 1A:26:3C:60:96:B4:30:64:AB:2D:86:69:35:49:2B:B6:1D:35:1B:10
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 019D2A729BC9D4353EF15A6EA7DCE470D7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:47 +0000
Manifest this update: Thu 26 Mar 2026 14:00:47 +0000
Manifest next update: Fri 27 Mar 2026 14:00:47 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: UZ+WmXh1THfMQVJijDpGb5tm04tDgaEEmALYVUq4mhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:9b:c9:d4:35:3e:f1:5a:6e:a7:dc:e4:70:d7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Mar 26 14:00:47 2026 GMT
Not After : Mar 27 14:00:47 2026 GMT
Subject: CN=1a263c6096b43064ab2d866935492bb61d351b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:94:02:65:a0:35:7f:ed:cf:90:7e:69:9b:
cf:52:1a:86:82:7a:36:9f:6a:02:64:ce:1a:65:d8:
e2:4b:28:d5:0a:92:13:fb:43:93:d4:5a:b2:2e:44:
4f:62:47:e0:e2:03:10:1e:f3:2e:e1:8f:c7:33:fa:
d1:c6:05:44:a1:3d:69:2b:30:8c:43:ff:d5:9a:27:
0d:80:ed:9f:52:55:52:61:52:0c:8c:b7:44:b4:87:
9b:50:77:07:67:e8:80:fb:74:d4:79:88:52:31:1d:
80:99:c2:45:79:9a:e0:5b:f9:a4:1d:71:7a:4e:95:
00:11:02:33:81:85:0e:81:23:ac:0e:b7:3e:22:38:
f3:b3:7a:4e:37:e2:df:fb:81:f7:df:3c:57:4c:e2:
8d:0b:aa:c2:cb:e8:c9:64:c5:14:73:96:01:09:63:
73:35:ff:1c:28:67:f7:22:0c:e1:3f:cf:6a:39:04:
c2:79:35:21:59:ab:00:7d:37:82:28:1e:20:db:b4:
6a:13:40:66:aa:52:ba:19:13:ac:18:3e:45:8b:57:
08:07:9e:cf:8c:10:d7:84:f3:a3:27:f0:e8:8d:d0:
3c:8d:85:52:d7:05:d1:ab:3e:72:85:ab:cc:f8:ff:
05:04:3b:38:15:46:a5:5a:b6:3d:fb:72:72:8c:22:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:3C:60:96:B4:30:64:AB:2D:86:69:35:49:2B:B6:1D:35:1B:10
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:a4:dc:af:da:df:b8:ac:4d:6a:a9:18:db:4e:a5:5a:02:
ff:c8:91:7e:0c:2c:19:2e:6f:6d:98:d4:9c:43:b0:74:b1:94:
ed:0e:e9:4b:70:64:4f:0d:ff:26:34:3b:b4:dd:24:8c:e1:83:
56:2e:d7:c1:bd:66:99:89:5b:31:f4:c7:c3:c2:98:eb:e5:ba:
dc:e8:cc:8d:89:1e:ad:9b:b8:ac:e6:46:a5:42:17:4a:2b:bb:
2e:a0:69:81:de:bc:fa:61:f6:d1:a3:2e:d7:b7:67:a1:2e:1b:
bd:5e:63:3c:8b:93:b8:d4:d1:5c:0e:4c:fa:10:65:d7:7c:aa:
6d:8f:c6:2d:5c:fb:c2:73:dd:1a:ab:4b:56:6e:05:e9:26:1b:
d9:ac:ba:de:40:41:6f:eb:f4:6d:42:59:75:ec:2a:41:73:3f:
d2:a9:3d:02:8c:f5:4b:5d:83:cb:a0:10:c3:d5:68:8a:ad:c4:
60:11:7f:75:a4:6d:b4:6f:d3:42:bd:10:e7:43:eb:a5:34:8a:
b4:2e:9c:77:58:e9:ea:ff:44:bf:6b:b1:1a:a2:67:e9:a5:88:
e2:1e:6a:56:1b:2b:83:bf:b2:96:00:0e:77:e4:4d:50:e5:53:
cc:1f:1e:af:8e:85:02:5d:dc:38:94:ee:95:68:18:84:1a:b7:
11:e4:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcpvJ1DU+8Vpup9zkcNfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi
ZDFiYWMwHhcNMjYwMzI2MTQwMDQ3WhcNMjYwMzI3MTQwMDQ3WjAzMTEwLwYDVQQD
EygxYTI2M2M2MDk2YjQzMDY0YWIyZDg2NjkzNTQ5MmJiNjFkMzUxYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp92UAmWgNX/tz5B+aZvPUhqGgno2
n2oCZM4aZdjiSyjVCpIT+0OT1FqyLkRPYkfg4gMQHvMu4Y/HM/rRxgVEoT1pKzCM
Q//VmicNgO2fUlVSYVIMjLdEtIebUHcHZ+iA+3TUeYhSMR2AmcJFeZrgW/mkHXF6
TpUAEQIzgYUOgSOsDrc+Ijjzs3pON+Lf+4H33zxXTOKNC6rCy+jJZMUUc5YBCWNz
Nf8cKGf3IgzhP89qOQTCeTUhWasAfTeCKB4g27RqE0BmqlK6GROsGD5Fi1cIB57P
jBDXhPOjJ/DojdA8jYVS1wXRqz5yhavM+P8FBDs4FUalWrY9+3JyjCIR6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBomPGCWtDBkqy2GaTVJK7YdNRsQMB8GA1UdIwQY
MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt
NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4
LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHyk3K/a
37isTWqpGNtOpVoC/8iRfgwsGS5vbZjUnEOwdLGU7Q7pS3BkTw3/JjQ7tN0kjOGD
Vi7Xwb1mmYlbMfTHw8KY6+W63OjMjYkerZu4rOZGpUIXSiu7LqBpgd68+mH20aMu
17dnoS4bvV5jPIuTuNTRXA5M+hBl13yqbY/GLVz7wnPdGqtLVm4F6SYb2ay63kBB
b+v0bUJZdewqQXM/0qk9Aoz1S12Dy6AQw9Voiq3EYBF/daRttG/TQr0Q50PrpTSK
tC6cd1jp6v9Ev2uxGqJn6aWI4h5qVhsrg7+ylgAOd+RNUOVTzB8er46FAl3cOJTu
lWgYhBq3EeRzbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:00 2026 by rpki-client