Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: 4b67SiIRxYL3QQali9K/FGmYsXjRYZ+NLTONU++UQ8U=
Subject key identifier: 5C:B2:4D:2E:0B:12:48:68:3D:96:F0:AB:A7:4B:F9:D5:B4:1B:F8:13
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 019D2A3C4430DFABE966F0663BE5888CA94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 13:01:25 +0000
Manifest this update: Thu 26 Mar 2026 13:01:25 +0000
Manifest next update: Fri 27 Mar 2026 13:01:25 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: oBKZBS1C5H1gOjpfBql1aCY6qzYI1f0vz5TJ9b0Eht8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:44:30:df:ab:e9:66:f0:66:3b:e5:88:8c:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Mar 26 13:01:25 2026 GMT
Not After : Mar 27 13:01:25 2026 GMT
Subject: CN=5cb24d2e0b1248683d96f0aba74bf9d5b41bf813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:19:73:95:e5:fe:f3:87:5b:c4:77:cc:8b:
b5:6d:26:ef:34:63:5b:54:0c:a2:26:65:6c:b6:d9:
08:1a:cb:87:cf:3c:32:d8:3d:2b:e3:e0:8c:8f:74:
3f:e5:a1:5e:b4:30:a7:07:93:f2:ad:1e:a7:03:84:
3c:c2:96:a7:c8:6d:35:25:9c:d5:db:4e:d9:38:57:
d4:34:5e:52:62:d7:7e:9f:c6:f7:05:f0:bb:51:3d:
b5:0d:f2:05:cb:e8:fe:e9:57:29:88:ee:83:6b:1b:
84:b3:c7:96:1e:cd:31:a3:61:01:80:4a:da:ec:ce:
1a:f6:51:8f:c6:98:f9:cc:d4:55:12:35:36:0d:21:
6d:0c:5f:79:58:36:51:b3:b2:ac:24:92:34:95:45:
b4:1a:46:0d:e1:95:18:fa:ec:75:a7:68:f4:ea:79:
fe:f8:17:cc:55:9a:15:2b:25:44:fa:0f:cb:93:64:
0c:71:39:0f:ad:74:66:94:1c:fe:6b:32:cf:b3:e9:
5e:89:e9:52:8d:22:0e:f3:9b:73:55:d9:7d:7a:83:
4c:bc:c1:46:3f:f4:e2:12:e6:64:14:72:bd:65:4f:
ed:72:61:14:47:0f:0c:09:cf:4d:fd:00:22:2c:5a:
df:fb:b3:d2:7e:39:0b:99:11:04:e1:d0:39:4a:7b:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:4D:2E:0B:12:48:68:3D:96:F0:AB:A7:4B:F9:D5:B4:1B:F8:13
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4e:ec:81:cf:6d:b5:40:03:35:51:ba:c2:c8:36:58:04:79:
c9:6a:d6:34:72:0f:44:3b:79:8a:2e:74:e2:b2:3b:31:46:5d:
6b:5e:d7:6c:e8:9e:06:6a:a4:01:cd:06:a6:36:73:ec:f5:c2:
df:05:4f:72:ae:e6:26:f8:fa:bf:56:ed:03:2c:1c:cd:b8:01:
37:94:42:bb:da:2f:0d:60:28:2c:fc:42:a6:94:f5:72:a0:3e:
6e:c2:6c:b4:db:9d:fa:f9:91:5e:b2:b3:7d:5b:84:e9:b9:79:
72:9d:91:99:da:88:5d:5e:ca:c3:7e:33:2a:09:b4:ce:15:d1:
69:c2:b3:f1:49:01:bf:7b:12:88:74:32:8c:32:d6:b6:23:29:
3f:78:7d:95:0b:7b:38:59:ff:d8:51:a3:a8:93:83:a6:fb:78:
e8:b5:72:4f:d9:1b:ee:b7:26:94:06:98:f7:1e:1a:14:bd:c0:
b6:15:6e:cc:87:07:40:ad:67:b1:60:b6:87:93:75:74:0a:44:
6e:c0:09:fa:2e:fc:3f:15:1b:24:c0:01:47:30:fb:c6:f2:4d:
92:9f:3e:3a:db:fd:32:7d:d2:2f:91:ca:2a:2e:97:d3:0b:e6:
52:78:33:5c:7f:2b:24:30:1d:42:20:0f:46:20:9b:48:3f:a8:
66:6a:11:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPEQw36vpZvBmO+WIjKlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz
YzcxMWIwHhcNMjYwMzI2MTMwMTI1WhcNMjYwMzI3MTMwMTI1WjAzMTEwLwYDVQQD
Eyg1Y2IyNGQyZTBiMTI0ODY4M2Q5NmYwYWJhNzRiZjlkNWI0MWJmODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM0Zc5Xl/vOHW8R3zIu1bSbvNGNb
VAyiJmVsttkIGsuHzzwy2D0r4+CMj3Q/5aFetDCnB5PyrR6nA4Q8wpanyG01JZzV
207ZOFfUNF5SYtd+n8b3BfC7UT21DfIFy+j+6VcpiO6DaxuEs8eWHs0xo2EBgEra
7M4a9lGPxpj5zNRVEjU2DSFtDF95WDZRs7KsJJI0lUW0GkYN4ZUY+ux1p2j06nn+
+BfMVZoVKyVE+g/Lk2QMcTkPrXRmlBz+azLPs+leielSjSIO85tzVdl9eoNMvMFG
P/TiEuZkFHK9ZU/tcmEURw8MCc9N/QAiLFrf+7PSfjkLmREE4dA5Sns/cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyyTS4LEkhoPZbwq6dL+dW0G/gTMB8GA1UdIwQY
MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt
NTE4Y2QxNDcxM2ViLzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi
LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek7sgc9t
tUADNVG6wsg2WAR5yWrWNHIPRDt5ii504rI7MUZda17XbOieBmqkAc0GpjZz7PXC
3wVPcq7mJvj6v1btAywczbgBN5RCu9ovDWAoLPxCppT1cqA+bsJstNud+vmRXrKz
fVuE6bl5cp2RmdqIXV7Kw34zKgm0zhXRacKz8UkBv3sSiHQyjDLWtiMpP3h9lQt7
OFn/2FGjqJODpvt46LVyT9kb7rcmlAaY9x4aFL3AthVuzIcHQK1nsWC2h5N1dApE
bsAJ+i78PxUbJMABRzD7xvJNkp8+Otv9Mn3SL5HKKi6X0wvmUngzXH8rJDAdQiAP
RiCbSD+oZmoRLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:21 2026 by rpki-client