Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: 3YSg35BIxashIWbyshrs5HtzHOfsE03gWy/i20Mq6PE=
Subject key identifier: 5C:A3:7F:2B:81:22:1C:FB:20:88:75:0D:53:45:F5:56:30:96:BA:88
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019D270416F2201885E8C793566AD93347C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: vdK/ouSJmB+wSM2DpqbWb050zMEKgCqOjhR+CKUir1o=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:16:f2:20:18:85:e8:c7:93:56:6a:d9:33:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=5ca37f2b81221cfb2088750d5345f5563096ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:48:73:c9:9c:fa:92:e0:01:94:a8:b3:c3:
92:cd:8b:fc:b0:ba:e6:16:24:05:6c:67:16:10:4a:
ff:57:1d:fd:99:9d:7d:32:db:a7:8d:a4:fc:2a:6f:
94:78:4a:00:20:2f:21:e4:d1:84:4a:2a:21:6e:5e:
1d:a3:77:04:c7:75:f8:fc:b8:08:72:cc:1e:5b:8c:
1e:fd:c6:38:29:a7:2c:e9:e3:1b:2a:c0:94:14:13:
e8:d7:38:07:b8:cc:e0:5d:9a:43:03:60:77:2d:95:
2e:ce:e0:8d:08:76:f5:fc:70:a5:56:29:12:64:2f:
0f:87:d1:55:e4:db:23:a4:b7:3b:64:19:ef:f8:72:
ef:1d:f4:c6:e4:0f:60:4a:df:48:62:ec:dc:7a:19:
70:ec:92:31:ba:8b:9f:fe:4d:41:66:e6:4f:67:1a:
0e:4d:98:7c:b6:68:df:ce:c4:5c:4c:d0:b8:3e:6d:
33:de:47:43:7e:92:92:9a:4e:b6:8e:44:d0:d8:db:
d1:cc:68:2a:7c:1e:c8:37:af:24:15:14:0b:5d:02:
bc:40:35:a5:9f:5d:6b:17:53:83:78:a0:ff:2b:47:
0a:6a:23:fc:39:ed:7b:e1:e5:1e:2d:f4:f5:e6:d9:
21:00:3d:a7:e6:8c:19:eb:17:db:56:35:58:2c:71:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A3:7F:2B:81:22:1C:FB:20:88:75:0D:53:45:F5:56:30:96:BA:88
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:e7:3c:1a:0c:3f:6f:0f:85:05:de:36:b5:a8:ea:28:60:
54:8f:17:ca:10:46:4a:ef:ee:ab:1c:81:96:11:eb:fa:10:c1:
6c:8d:51:55:66:cb:5a:f4:af:10:97:c5:59:a6:3b:ec:2f:f6:
10:6d:33:8f:fb:62:7a:8b:9b:10:b8:a0:2a:e6:db:35:f9:33:
db:b4:da:a7:34:76:bc:d4:63:cd:06:f9:71:ba:2a:77:dd:0d:
85:ed:51:35:f5:d6:ab:1f:b1:9b:32:9b:3a:a5:de:bb:6f:e2:
ef:f4:d7:0d:f0:60:f7:8e:0c:60:bd:89:54:f2:2e:58:95:94:
9f:b0:b1:74:69:6c:18:cd:69:bd:d5:17:98:9e:b9:e2:7c:03:
f2:0e:12:72:bc:03:c5:70:06:63:ad:e5:ce:05:e6:80:48:fb:
c3:e4:2e:51:75:40:df:37:67:61:7b:5d:db:54:73:90:21:ed:
a2:da:f8:e3:07:a2:57:b7:d1:5b:65:a6:3f:f8:13:ab:55:61:
f0:5f:3e:e7:e6:c7:f1:aa:f4:b3:a2:8a:34:aa:77:ec:2a:8a:
48:76:20:6d:94:a5:e8:a4:88:e6:ac:af:ec:60:62:81:d6:ec:
15:27:66:22:4e:68:19:09:c2:46:3c:cc:81:5d:ba:b6:4b:88:
b0:56:ba:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBbyIBiF6MeTVmrZM0fCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3
NmRhOTUwHhcNMjYwMzI1MjIwMTEyWhcNMjYwMzI2MjIwMTEyWjAzMTEwLwYDVQQD
Eyg1Y2EzN2YyYjgxMjIxY2ZiMjA4ODc1MGQ1MzQ1ZjU1NjMwOTZiYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19hIc8mc+pLgAZSos8OSzYv8sLrm
FiQFbGcWEEr/Vx39mZ19MtunjaT8Km+UeEoAIC8h5NGESiohbl4do3cEx3X4/LgI
csweW4we/cY4Kacs6eMbKsCUFBPo1zgHuMzgXZpDA2B3LZUuzuCNCHb1/HClVikS
ZC8Ph9FV5NsjpLc7ZBnv+HLvHfTG5A9gSt9IYuzcehlw7JIxuouf/k1BZuZPZxoO
TZh8tmjfzsRcTNC4Pm0z3kdDfpKSmk62jkTQ2NvRzGgqfB7IN68kFRQLXQK8QDWl
n11rF1ODeKD/K0cKaiP8Oe174eUeLfT15tkhAD2n5owZ6xfbVjVYLHHngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyjfyuBIhz7IIh1DVNF9VYwlrqIMB8GA1UdIwQY
MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt
NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh
LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+TnPBoM
P28PhQXeNrWo6ihgVI8XyhBGSu/uqxyBlhHr+hDBbI1RVWbLWvSvEJfFWaY77C/2
EG0zj/tieoubELigKubbNfkz27TapzR2vNRjzQb5cboqd90Nhe1RNfXWqx+xmzKb
OqXeu2/i7/TXDfBg944MYL2JVPIuWJWUn7CxdGlsGM1pvdUXmJ654nwD8g4ScrwD
xXAGY63lzgXmgEj7w+QuUXVA3zdnYXtd21RzkCHtotr44weiV7fRW2WmP/gTq1Vh
8F8+5+bH8ar0s6KKNKp37CqKSHYgbZSl6KSI5qyv7GBigdbsFSdmIk5oGQnCRjzM
gV26tkuIsFa6tA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:44 2026 by rpki-client