Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: ByGDJbE6U/YQulWfa/ZVF2YQRxJjJS5FEGxry3cmwLc=
Subject key identifier: CF:D9:94:D6:E2:86:C8:78:F3:40:99:85:CF:2B:87:FC:22:6E:0A:EA
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019D28BBD9BACC121791CEC87E91961BA32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:32 +0000
Manifest this update: Thu 26 Mar 2026 06:01:32 +0000
Manifest next update: Fri 27 Mar 2026 06:01:32 +0000
Files and hashes: 1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: Domzlc01udKVbr5rup0xFS6vttqMsbOrhyPJSLiSrbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d9:ba:cc:12:17:91:ce:c8:7e:91:96:1b:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Mar 26 06:01:32 2026 GMT
Not After : Mar 27 06:01:32 2026 GMT
Subject: CN=cfd994d6e286c878f3409985cf2b87fc226e0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ef:d5:26:ef:b6:67:fb:3b:59:28:59:88:91:
59:f7:62:3a:2f:7f:f5:f8:97:43:33:29:0f:31:b5:
28:d3:06:f9:ff:78:87:b3:93:9e:f9:f5:c6:d1:eb:
9c:aa:6d:01:1f:13:70:69:bb:7a:16:55:1c:6a:a9:
eb:b7:5a:a9:1b:73:c7:e0:6d:e9:4e:2b:95:f3:e5:
fd:2d:50:fa:8d:e5:16:eb:3b:00:0d:87:03:a1:c2:
ea:30:51:39:8d:0d:35:01:ce:13:f2:e1:55:7b:15:
d7:c8:b3:38:c7:be:e0:6a:d6:c7:42:0f:2d:10:2f:
5c:bf:f4:28:95:8f:b5:e8:86:5b:24:dc:e3:92:9f:
24:3d:cb:6e:cb:13:6c:31:d6:44:dc:fd:85:27:1c:
7f:91:16:ba:ac:87:13:e5:ba:7e:cb:f2:c3:91:76:
f8:35:79:d5:51:3f:71:8f:19:65:a9:44:4f:68:52:
58:56:60:5f:74:78:44:3e:a9:c3:6f:e8:09:f7:4a:
75:82:2d:c9:90:f1:05:98:43:08:e0:6c:30:7b:9c:
a1:f2:f0:49:4b:cd:1d:42:df:9d:c7:2f:9c:72:0f:
3b:53:bd:be:34:67:ba:b1:e7:24:4a:ad:57:3d:ca:
02:ae:a5:df:29:f0:de:ab:ca:bb:d7:a1:e3:a9:7f:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:94:D6:E2:86:C8:78:F3:40:99:85:CF:2B:87:FC:22:6E:0A:EA
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:79:08:f5:54:1b:0b:ae:b4:25:e1:b9:25:c5:db:e5:e8:
72:0e:b1:f4:ac:ab:53:57:bc:97:cd:f4:99:53:87:f5:63:a5:
ff:17:63:13:ee:da:80:dd:58:3e:a1:66:4a:ba:eb:74:d6:ac:
8b:38:90:11:6f:b2:63:17:2e:6a:6c:66:7b:b3:4c:a8:a2:8a:
dc:5e:fa:53:db:8d:e0:88:cf:8a:92:5d:bd:dc:bc:7c:84:59:
5e:3e:9c:5e:e7:e6:0a:11:9c:82:54:2d:fe:b5:be:56:0a:5b:
79:c3:41:11:a6:1a:4e:87:2f:05:bf:62:dd:d0:ef:84:ce:53:
53:33:35:a5:df:82:38:64:41:8c:89:62:16:f7:2f:9a:ef:d1:
26:4e:6b:67:fd:bd:ee:84:c2:7d:11:da:3d:5f:c4:82:19:97:
91:c4:15:30:f7:ac:10:91:88:ca:78:fb:a1:df:ab:b1:c7:62:
ec:38:27:cb:cd:89:b3:fe:67:25:d5:62:0e:d0:a3:e8:2a:e9:
bd:7b:ef:95:da:d1:2e:bb:c3:a4:0e:97:db:ea:99:d4:37:cd:
b6:9c:80:03:45:fc:96:dc:77:8c:d6:07:39:6e:e6:fa:2d:f9:
15:dc:ef:ac:02:4e:fd:bb:2d:c9:76:99:46:d5:24:32:d7:41:
48:cd:b1:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9m6zBIXkc7IfpGWG6MvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0
YjUyNDgwHhcNMjYwMzI2MDYwMTMyWhcNMjYwMzI3MDYwMTMyWjAzMTEwLwYDVQQD
EyhjZmQ5OTRkNmUyODZjODc4ZjM0MDk5ODVjZjJiODdmYzIyNmUwYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u/VJu+2Z/s7WShZiJFZ92I6L3/1
+JdDMykPMbUo0wb5/3iHs5Oe+fXG0eucqm0BHxNwabt6FlUcaqnrt1qpG3PH4G3p
TiuV8+X9LVD6jeUW6zsADYcDocLqMFE5jQ01Ac4T8uFVexXXyLM4x77gatbHQg8t
EC9cv/QolY+16IZbJNzjkp8kPctuyxNsMdZE3P2FJxx/kRa6rIcT5bp+y/LDkXb4
NXnVUT9xjxllqURPaFJYVmBfdHhEPqnDb+gJ90p1gi3JkPEFmEMI4Gwwe5yh8vBJ
S80dQt+dxy+ccg87U72+NGe6seckSq1XPcoCrqXfKfDeq8q716HjqX/iSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/ZlNbihsh480CZhc8rh/wibgrqMB8GA1UdIwQY
MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et
N2QyNThiNjIwMTY5LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5
LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQh5CPVU
GwuutCXhuSXF2+Xocg6x9KyrU1e8l830mVOH9WOl/xdjE+7agN1YPqFmSrrrdNas
iziQEW+yYxcuamxme7NMqKKK3F76U9uN4IjPipJdvdy8fIRZXj6cXufmChGcglQt
/rW+VgpbecNBEaYaTocvBb9i3dDvhM5TUzM1pd+COGRBjIliFvcvmu/RJk5rZ/29
7oTCfRHaPV/EghmXkcQVMPesEJGIynj7od+rscdi7Dgny82Js/5nJdViDtCj6Crp
vXvvldrRLrvDpA6X2+qZ1DfNtpyAA0X8ltx3jNYHOW7m+i35FdzvrAJO/bstyXaZ
RtUkMtdBSM2xFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:50 2026 by rpki-client