Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: J466/lnKuvOB3eI/97M2LvHnz5/HfKBBvocQg+IMuak=
Subject key identifier: FC:A4:8D:D5:94:E9:20:95:B4:F1:FA:96:76:98:C0:C1:37:3A:C4:CF
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019D2695F2D607D9A0E8CAA7BDFBF39CA0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: KvIS73WAHcI+sapbkAVfrdEiQnFAXUrbvgueDLa1UNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f2:d6:07:d9:a0:e8:ca:a7:bd:fb:f3:9c:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=fca48dd594e92095b4f1fa967698c0c1373ac4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:13:a0:38:fb:eb:03:db:f4:2f:9a:fd:6e:
04:ef:2d:44:66:f5:a2:47:ea:10:c0:5b:be:23:35:
06:ed:f6:7c:5f:ef:7f:0f:a3:eb:10:d0:db:ec:8a:
91:91:3b:93:ff:92:c7:07:56:59:d7:d4:ba:b9:1b:
e6:6f:91:4e:aa:4d:2f:ba:48:49:b5:13:da:bc:16:
00:9e:46:09:f4:bc:97:2f:3a:04:b8:57:5e:4e:83:
fa:18:2e:64:02:95:b0:a7:23:26:de:4c:0e:18:bc:
01:67:92:a1:30:26:3d:d3:5b:d5:67:c0:e8:f0:42:
4f:2b:44:8b:97:0e:71:0b:51:aa:02:e4:bb:d0:01:
a9:b5:3c:7e:a1:10:59:e4:1b:e6:62:ab:32:11:94:
8f:9d:60:ea:57:41:f5:0f:1b:82:e8:05:20:c8:38:
c3:ba:84:cf:d3:aa:98:d4:02:a5:29:78:5d:87:94:
38:da:05:f1:c1:59:33:f0:fb:c4:f5:e7:86:61:99:
e8:ef:51:df:4b:12:c3:cd:b5:19:cc:cb:c2:2b:e6:
f7:49:bd:db:c0:08:82:23:47:5a:b8:e0:ba:be:83:
d0:9b:a7:76:a1:31:d2:a2:00:4f:f2:4f:2b:99:bd:
8b:11:5c:ed:36:de:73:6e:dd:6b:28:b1:4e:84:8d:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:8D:D5:94:E9:20:95:B4:F1:FA:96:76:98:C0:C1:37:3A:C4:CF
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:a6:8c:fa:71:7f:9e:a9:49:bd:0c:1b:14:df:e4:4a:b9:
d8:21:09:3c:7c:52:7e:e6:97:06:8b:27:e3:18:28:96:b9:ff:
30:b9:28:ab:5b:f8:56:93:29:f3:fa:e6:01:7b:b6:10:4a:5a:
c9:92:27:55:3d:cb:07:fa:91:65:35:df:f6:2b:ed:cc:c2:bb:
55:00:95:df:3d:db:b1:a9:bb:c0:b2:78:3c:59:f1:47:54:fc:
cb:72:38:66:08:9d:98:d8:8d:90:c4:84:18:6d:58:45:aa:db:
75:58:67:6d:aa:6e:55:48:52:d2:9d:3a:1a:f8:54:29:73:67:
08:22:28:59:dc:a9:52:86:b2:6a:51:47:77:1b:65:a8:51:84:
81:6c:66:eb:0c:cd:47:e0:79:77:58:2e:af:6b:95:24:5e:dd:
f6:06:92:20:28:72:81:8d:0e:29:d3:68:6e:7f:33:cb:9e:cc:
93:88:73:7d:e1:4f:28:6f:6d:24:89:4d:bb:a4:93:c7:ee:03:
40:e4:d7:43:32:8d:c7:22:47:1f:ea:8a:40:ad:5c:f1:ef:bb:
da:19:b4:70:a8:a0:92:d4:d6:1c:a8:75:4a:70:12:f1:2c:1e:
f7:d1:af:a2:77:3e:6b:8b:28:d0:fe:27:ba:99:01:d7:91:46:
48:57:5b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfLWB9mg6MqnvfvznKDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjYwMzI1MjAwMDU0WhcNMjYwMzI2MjAwMDU0WjAzMTEwLwYDVQQD
EyhmY2E0OGRkNTk0ZTkyMDk1YjRmMWZhOTY3Njk4YzBjMTM3M2FjNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ekToDj76wPb9C+a/W4E7y1EZvWi
R+oQwFu+IzUG7fZ8X+9/D6PrENDb7IqRkTuT/5LHB1ZZ19S6uRvmb5FOqk0vukhJ
tRPavBYAnkYJ9LyXLzoEuFdeToP6GC5kApWwpyMm3kwOGLwBZ5KhMCY901vVZ8Do
8EJPK0SLlw5xC1GqAuS70AGptTx+oRBZ5BvmYqsyEZSPnWDqV0H1DxuC6AUgyDjD
uoTP06qY1AKlKXhdh5Q42gXxwVkz8PvE9eeGYZno71HfSxLDzbUZzMvCK+b3Sb3b
wAiCI0dauOC6voPQm6d2oTHSogBP8k8rmb2LEVztNt5zbt1rKLFOhI0x5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPykjdWU6SCVtPH6lnaYwME3OsTPMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXemjPpx
f56pSb0MGxTf5Eq52CEJPHxSfuaXBosn4xgolrn/MLkoq1v4VpMp8/rmAXu2EEpa
yZInVT3LB/qRZTXf9ivtzMK7VQCV3z3bsam7wLJ4PFnxR1T8y3I4ZgidmNiNkMSE
GG1YRarbdVhnbapuVUhS0p06GvhUKXNnCCIoWdypUoayalFHdxtlqFGEgWxm6wzN
R+B5d1gur2uVJF7d9gaSIChygY0OKdNobn8zy57Mk4hzfeFPKG9tJIlNu6STx+4D
QOTXQzKNxyJHH+qKQK1c8e+72hm0cKigktTWHKh1SnAS8Swe99Gvonc+a4so0P4n
upkB15FGSFdb6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:59 2026 by rpki-client