Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: 4OmVXAImdVAYxlz7zg9uSkE7ijxmaEsJkJNvd1sTBfI=
Subject key identifier: C1:BB:1D:94:11:BA:8F:60:F9:CC:41:F6:AB:02:BB:AB:91:EB:68:D1
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019D2695BF7A366037C873179C3F816EDCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: u542WX7eWBoxWBs3kQesx/Bosh4Z/6nhcXna2b/V+IE=)
4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bf:7a:36:60:37:c8:73:17:9c:3f:81:6e:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=c1bb1d9411ba8f60f9cc41f6ab02bbab91eb68d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:96:25:4f:0d:4b:ee:29:30:58:76:e0:1a:
7c:53:11:2b:ec:a7:f9:02:0e:61:44:f4:b5:15:04:
f0:e2:70:9f:16:23:0d:5a:79:1f:bb:f8:30:05:4b:
72:04:d3:82:b3:2d:68:b7:52:14:76:73:56:55:7b:
95:77:3a:dd:96:17:76:65:b7:8f:af:cf:a4:d4:83:
6d:99:c2:b4:be:3e:ac:41:3c:11:a4:33:95:f3:af:
84:38:d6:52:e1:d7:ca:4d:dc:34:aa:85:19:1f:f3:
30:c5:0e:17:f1:8f:09:bf:21:a4:d9:68:82:86:3d:
a9:3e:b1:b4:4d:dc:ab:26:b3:23:25:64:df:2f:68:
30:51:5e:31:c5:4e:5b:ee:e4:3c:d2:b5:ff:34:a4:
28:e5:ae:65:34:2e:94:91:94:3e:9c:dd:58:d5:cf:
6a:a4:c1:f7:26:df:f6:b7:73:4a:9e:2a:f0:3e:cf:
27:d6:2b:7f:69:e9:99:4c:f4:51:28:34:60:3a:1a:
fe:26:42:bf:56:ec:32:83:5b:45:2e:13:3c:4f:cc:
2a:e3:d0:e2:34:1e:72:b6:04:29:33:41:66:18:e8:
05:86:f0:b0:61:59:05:80:9c:5a:94:52:f8:24:f7:
e1:0d:7a:97:21:5f:1e:35:7e:bb:da:4e:8b:a5:62:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:1D:94:11:BA:8F:60:F9:CC:41:F6:AB:02:BB:AB:91:EB:68:D1
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:12:3b:54:0e:47:4c:8a:bc:4d:e4:f5:04:63:8d:b3:d3:51:
45:e2:0a:09:85:4b:2c:7f:54:48:89:8b:41:c5:9b:bd:82:29:
fe:c6:fe:d0:73:ba:fb:0c:3d:96:23:45:d4:9c:b5:c5:fd:f2:
da:2e:ee:02:f0:11:ea:9e:15:0c:06:5c:48:7a:08:af:cc:fd:
d6:9d:00:d4:43:ec:58:a1:b5:46:ee:15:46:c2:ca:3e:50:f4:
12:c5:66:40:40:60:9a:86:72:89:f4:d2:be:fd:67:b1:24:c2:
ab:cf:6f:70:a1:db:38:f7:88:e2:a1:e7:a7:c6:4a:d7:43:1e:
40:2c:1f:28:bd:39:ae:c9:32:85:af:5e:79:96:e5:b7:96:33:
e9:33:f9:ff:86:4d:ba:2e:55:6a:5d:68:9b:db:72:19:7a:39:
66:df:32:2d:85:b1:65:f1:36:fb:6d:26:3a:6a:c1:2a:5d:48:
aa:2a:50:6c:98:c5:eb:10:ba:7a:06:42:20:dc:1c:dc:f7:db:
56:91:b1:55:06:9b:77:5e:81:7c:b3:a6:8b:00:6f:0a:6c:fc:
f0:1a:5f:87:c5:b7:21:8b:c1:c3:f5:03:f8:c1:79:63:52:e8:
be:e8:26:41:d8:b3:fd:f5:2a:b8:c6:df:cf:29:a6:48:2c:2a:
cd:30:48:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlb96NmA3yHMXnD+BbtziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwMzI1MjAwMDQxWhcNMjYwMzI2MjAwMDQxWjAzMTEwLwYDVQQD
EyhjMWJiMWQ5NDExYmE4ZjYwZjljYzQxZjZhYjAyYmJhYjkxZWI2OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmGWJU8NS+4pMFh24Bp8UxEr7Kf5
Ag5hRPS1FQTw4nCfFiMNWnkfu/gwBUtyBNOCsy1ot1IUdnNWVXuVdzrdlhd2ZbeP
r8+k1INtmcK0vj6sQTwRpDOV86+EONZS4dfKTdw0qoUZH/MwxQ4X8Y8JvyGk2WiC
hj2pPrG0TdyrJrMjJWTfL2gwUV4xxU5b7uQ80rX/NKQo5a5lNC6UkZQ+nN1Y1c9q
pMH3Jt/2t3NKnirwPs8n1it/aemZTPRRKDRgOhr+JkK/Vuwyg1tFLhM8T8wq49Di
NB5ytgQpM0FmGOgFhvCwYVkFgJxalFL4JPfhDXqXIV8eNX672k6LpWI9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG7HZQRuo9g+cxB9qsCu6uR62jRMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxI7VA5H
TIq8TeT1BGONs9NRReIKCYVLLH9USImLQcWbvYIp/sb+0HO6+ww9liNF1Jy1xf3y
2i7uAvAR6p4VDAZcSHoIr8z91p0A1EPsWKG1Ru4VRsLKPlD0EsVmQEBgmoZyifTS
vv1nsSTCq89vcKHbOPeI4qHnp8ZK10MeQCwfKL05rskyha9eeZblt5Yz6TP5/4ZN
ui5Val1om9tyGXo5Zt8yLYWxZfE2+20mOmrBKl1IqipQbJjF6xC6egZCINwc3Pfb
VpGxVQabd16BfLOmiwBvCmz88Bpfh8W3IYvBw/UD+MF5Y1LovugmQdiz/fUquMbf
zymmSCwqzTBINg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:43 2026 by rpki-client