Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: 4Mgf3BRxKBkIKnGnD7QlT5x9Z9WGumIUxJr2otaI9ks=
Subject key identifier: 51:B3:BD:9E:5B:AB:9A:4A:FF:4D:29:1F:62:E7:D3:E7:B1:29:EE:38
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019D29CECD941B0915A218244A88432BDD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 11:01:52 +0000
Manifest this update: Thu 26 Mar 2026 11:01:52 +0000
Manifest next update: Fri 27 Mar 2026 11:01:52 +0000
Files and hashes: 1: CbbyPFwOxRt_djihEbyH4dswgkU.roa (hash: zzZiYXhJH80jdIaDpqCJXODjR57XtJuUcOZwLqkue/Y=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: B2sVEasSr6mQJGKyXl5zZ2H7tNGTXLmzdW4BQebb4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cd:94:1b:09:15:a2:18:24:4a:88:43:2b:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Mar 26 11:01:52 2026 GMT
Not After : Mar 27 11:01:52 2026 GMT
Subject: CN=51b3bd9e5bab9a4aff4d291f62e7d3e7b129ee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:de:36:71:1d:fd:2c:be:c2:c3:2f:a0:ad:
aa:a9:36:50:d2:df:df:ba:16:18:12:2b:43:31:25:
53:20:b3:27:83:be:67:68:7b:c6:4d:10:97:07:85:
06:8b:a4:33:99:d9:1f:9c:08:8e:cd:74:d7:da:58:
53:3a:b1:72:ed:2d:a5:58:0e:db:13:d8:3a:2e:da:
79:a9:95:ec:89:4b:24:cb:09:15:43:db:e5:a1:85:
a3:70:5c:8b:5b:58:df:60:1a:e9:11:78:64:e8:ed:
2a:bd:53:27:0e:9a:e8:fa:85:17:8b:a8:66:9c:9b:
61:aa:c5:6f:14:cc:39:cc:a2:52:26:22:99:ee:74:
db:36:d1:a8:48:36:79:44:48:b6:b2:0f:35:df:bf:
62:63:13:31:68:c4:c6:11:d7:c9:98:d6:d9:db:21:
60:96:bd:97:a3:2a:ac:df:26:b3:3d:b2:b0:17:f5:
21:74:48:4f:03:97:ce:cb:15:66:2c:aa:19:58:8f:
b1:2c:86:10:6d:ea:6c:00:9b:63:da:be:66:df:fe:
9e:d3:49:76:04:72:72:3e:92:95:b5:c9:0d:0a:1a:
01:fc:b7:b5:22:57:4c:f2:5a:98:cf:5b:06:93:85:
45:d3:97:8c:9c:d3:d0:d3:d2:ca:3c:09:c6:c3:07:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:BD:9E:5B:AB:9A:4A:FF:4D:29:1F:62:E7:D3:E7:B1:29:EE:38
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:33:20:6b:3a:7f:94:a3:50:d8:7f:c4:b6:64:94:40:c7:
74:49:5b:42:bb:fc:d1:07:e6:24:5a:4e:41:5d:8f:a3:3c:43:
a5:84:07:b6:6a:71:4f:05:50:df:20:32:db:52:fe:95:f6:51:
c1:01:60:74:60:e7:9e:fb:2b:02:51:b7:f0:62:ba:63:0b:99:
46:3d:93:6c:ee:38:11:77:bb:0a:e5:32:d4:48:29:79:4f:ca:
ae:03:ec:d2:eb:96:b2:e6:6b:75:b2:f5:61:e0:65:4f:b3:bd:
14:bb:19:71:53:cc:82:05:c4:f9:32:36:ca:0f:21:dd:26:79:
3e:91:01:38:d3:75:6b:4d:9a:9a:f6:f8:29:c4:f1:22:a1:ef:
8e:aa:cc:84:09:4e:8e:16:04:9e:47:28:7f:73:94:53:55:da:
6d:5a:49:15:12:d9:90:3c:30:86:1f:18:71:5b:03:80:a7:a5:
90:9a:e1:1e:76:2a:5f:42:ac:8a:96:64:59:18:c6:34:76:0a:
dc:7c:a4:41:ee:3c:d1:ec:34:91:37:8d:44:7c:9c:9e:d1:3a:
9e:7b:ca:60:2f:7a:9d:e8:a5:e2:79:1c:91:51:0a:f2:d3:ea:
3f:28:be:47:7b:3a:61:aa:d5:34:ce:bc:b8:3f:c9:79:c0:6d:
ba:5f:c3:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzs2UGwkVohgkSohDK90mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjYwMzI2MTEwMTUyWhcNMjYwMzI3MTEwMTUyWjAzMTEwLwYDVQQD
Eyg1MWIzYmQ5ZTViYWI5YTRhZmY0ZDI5MWY2MmU3ZDNlN2IxMjllZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPeNnEd/Sy+wsMvoK2qqTZQ0t/f
uhYYEitDMSVTILMng75naHvGTRCXB4UGi6QzmdkfnAiOzXTX2lhTOrFy7S2lWA7b
E9g6Ltp5qZXsiUskywkVQ9vloYWjcFyLW1jfYBrpEXhk6O0qvVMnDpro+oUXi6hm
nJthqsVvFMw5zKJSJiKZ7nTbNtGoSDZ5REi2sg81379iYxMxaMTGEdfJmNbZ2yFg
lr2Xoyqs3yazPbKwF/UhdEhPA5fOyxVmLKoZWI+xLIYQbepsAJtj2r5m3/6e00l2
BHJyPpKVtckNChoB/Le1IldM8lqYz1sGk4VF05eMnNPQ09LKPAnGwwch1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGzvZ5bq5pK/00pH2Ln0+exKe44MB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj
LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUQzIGs6
f5SjUNh/xLZklEDHdElbQrv80QfmJFpOQV2PozxDpYQHtmpxTwVQ3yAy21L+lfZR
wQFgdGDnnvsrAlG38GK6YwuZRj2TbO44EXe7CuUy1EgpeU/KrgPs0uuWsuZrdbL1
YeBlT7O9FLsZcVPMggXE+TI2yg8h3SZ5PpEBONN1a02amvb4KcTxIqHvjqrMhAlO
jhYEnkcof3OUU1XabVpJFRLZkDwwhh8YcVsDgKelkJrhHnYqX0KsipZkWRjGNHYK
3HykQe480ew0kTeNRHycntE6nnvKYC96neil4nkckVEK8tPqPyi+R3s6YarVNM68
uD/JecBtul/Drg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:05 2026 by rpki-client