Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: zWa+1pBm/w7fbUtAlPp6Fc2PgCD1SGSFctQR0lFNZnw=
Subject key identifier: 28:00:FA:C5:8D:07:AC:EF:24:92:08:67:69:49:70:EB:6F:50:5A:C3
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019D28BBDCE1207773FAC72E121C9E6D4017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: x0R0Pj8/XFhKNy4kH7ImHvMRE//n4dGZ1HKbf/1DWDs=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dc:e1:20:77:73:fa:c7:2e:12:1c:9e:6d:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=2800fac58d07acef24920867694970eb6f505ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:21:c9:6e:48:1e:56:de:52:72:47:76:91:
50:49:22:4a:e7:a7:ad:b8:e4:f8:bc:4b:5b:00:64:
5b:e0:cd:c4:77:8b:00:9a:22:f4:b0:8a:d8:fe:0c:
38:5f:fc:c7:87:80:9d:0e:0d:52:24:c9:75:bf:11:
1d:b9:41:e2:90:99:c5:3f:c9:24:4d:89:3f:49:b0:
42:48:1d:be:aa:38:3e:22:13:f9:9b:4a:8c:e7:69:
44:5c:ed:40:6f:dc:14:e9:e1:66:86:08:68:6e:87:
0c:22:85:80:13:07:ae:49:8e:75:73:f7:b2:2f:0e:
6a:86:1d:9a:d5:b5:96:4d:d0:c2:68:8d:b2:49:75:
d2:f3:c0:10:3e:99:1f:c9:64:9c:62:01:75:22:80:
d9:53:47:f8:40:1a:d9:10:99:d7:f1:f8:ca:4e:97:
24:67:c0:e5:89:81:1b:f1:de:ef:89:c6:82:d6:da:
9a:97:47:78:5c:e2:14:6e:c1:ba:93:c1:b0:1b:93:
8d:11:df:eb:2b:f3:c8:97:c9:08:ef:26:99:02:c6:
86:b7:3e:cb:27:43:61:25:9a:03:43:d2:f9:86:ef:
17:0f:01:1c:19:14:0b:04:24:e0:c8:23:3b:25:27:
bf:8b:c5:d2:d2:b4:fd:a4:af:d4:59:5e:53:26:e6:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:FA:C5:8D:07:AC:EF:24:92:08:67:69:49:70:EB:6F:50:5A:C3
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:94:c6:bf:d0:a3:db:26:47:21:58:6e:12:51:00:98:79:bf:
16:c6:70:e0:37:56:46:5b:1c:0a:bb:ab:69:a9:09:76:ef:58:
d4:18:d5:cf:61:ec:02:a2:11:f2:ac:16:4a:5f:e3:c5:ce:7d:
8f:28:79:7e:26:aa:69:88:4b:ee:0e:d1:da:99:5e:01:85:f6:
2a:0c:e1:e4:3c:06:cd:d1:0c:ae:e3:a5:9f:e1:27:56:d9:ed:
1d:cb:a0:09:c3:bf:fc:e2:3c:b1:48:7b:72:d7:eb:85:1d:5e:
74:52:ec:67:f9:19:89:8a:d2:f0:ef:c9:22:11:39:72:24:24:
c2:e8:f4:98:35:3f:0f:d8:a6:85:dc:07:90:46:93:f2:5b:cd:
f4:ab:eb:10:a0:20:13:fc:ea:b4:92:90:c1:b4:0f:50:f9:34:
c8:cb:9d:35:99:85:ef:0d:6a:08:1f:5b:31:25:3f:02:c3:72:
cd:ed:03:e1:c1:90:57:f8:22:81:d6:ce:7a:0a:55:e7:a2:29:
38:12:70:f7:40:af:00:7c:15:22:67:63:be:e1:37:6e:9f:fe:
cd:1b:cc:70:e9:6f:9c:ec:5e:6e:c1:e8:ed:95:8d:4c:64:7c:
f3:c4:a4:45:1a:dc:bf:f4:8a:61:11:9c:b0:9e:6c:40:7e:50:
82:fa:13:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou9zhIHdz+scuEhyebUAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjYwMzI2MDYwMTMzWhcNMjYwMzI3MDYwMTMzWjAzMTEwLwYDVQQD
EygyODAwZmFjNThkMDdhY2VmMjQ5MjA4Njc2OTQ5NzBlYjZmNTA1YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWshyW5IHlbeUnJHdpFQSSJK56et
uOT4vEtbAGRb4M3Ed4sAmiL0sIrY/gw4X/zHh4CdDg1SJMl1vxEduUHikJnFP8kk
TYk/SbBCSB2+qjg+IhP5m0qM52lEXO1Ab9wU6eFmhghobocMIoWAEweuSY51c/ey
Lw5qhh2a1bWWTdDCaI2ySXXS88AQPpkfyWScYgF1IoDZU0f4QBrZEJnX8fjKTpck
Z8DliYEb8d7vicaC1tqal0d4XOIUbsG6k8GwG5ONEd/rK/PIl8kI7yaZAsaGtz7L
J0NhJZoDQ9L5hu8XDwEcGRQLBCTgyCM7JSe/i8XS0rT9pK/UWV5TJuYSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgA+sWNB6zvJJIIZ2lJcOtvUFrDMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5TGv9Cj
2yZHIVhuElEAmHm/FsZw4DdWRlscCruraakJdu9Y1BjVz2HsAqIR8qwWSl/jxc59
jyh5fiaqaYhL7g7R2pleAYX2Kgzh5DwGzdEMruOln+EnVtntHcugCcO//OI8sUh7
ctfrhR1edFLsZ/kZiYrS8O/JIhE5ciQkwuj0mDU/D9imhdwHkEaT8lvN9KvrEKAg
E/zqtJKQwbQPUPk0yMudNZmF7w1qCB9bMSU/AsNyze0D4cGQV/gigdbOegpV56Ip
OBJw90CvAHwVImdjvuE3bp/+zRvMcOlvnOxebsHo7ZWNTGR888SkRRrcv/SKYRGc
sJ5sQH5QgvoTWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:19 2026 by rpki-client