Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: YZcvbYC5johfX+2cy/S9/qv1g3eFmJImVAqMtioA8Kg=
Subject key identifier: 5B:15:AC:81:48:8A:7C:49:47:5E:78:B3:73:E1:F0:9D:5D:D1:84:53
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D27DFAEF5C1685D9F52C3E7F10779C08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 18D0
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: QZ_9dSDQYledA3mZvzzU2XsR2W0.roa (hash: nZN1cE74YklriGKMRngm1fgmd4ilU9K/u2p2JG2cQ20=)
2: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
3: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: mZebujSse6GGEeseF3QhViyuCKme0zwFLQUnFheBxZA=)
4: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ae:f5:c1:68:5d:9f:52:c3:e7:f1:07:79:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=5b15ac81488a7c49475e78b373e1f09d5dd18453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:80:41:af:fb:a4:1f:6c:3a:a7:c3:51:7b:
8d:ea:fb:cc:72:9e:0b:e2:57:78:93:57:fe:9f:5c:
57:77:77:06:b6:54:a5:7b:1f:3f:06:70:79:ba:57:
5f:bf:af:10:b6:de:2f:2f:e6:ea:99:73:ac:c3:96:
01:63:d3:fe:7a:ac:f2:d8:e4:14:b6:3c:6a:56:2a:
af:a1:bc:b3:db:85:7b:9e:2c:92:b4:05:2a:82:7c:
a7:4a:f7:e8:20:1b:21:87:e5:ee:c6:1a:77:a0:3f:
9a:fb:dd:67:27:38:eb:b2:2e:ba:0c:bb:f4:10:18:
dc:65:73:c3:ea:15:7e:b2:bc:1f:c9:57:11:3c:d0:
77:15:ca:14:e0:b3:86:65:54:40:21:0b:fe:45:9e:
29:f0:84:c5:79:09:cc:d4:09:63:cc:e0:2d:08:7c:
e3:d6:e7:a4:58:53:ae:bc:de:46:0c:eb:a5:9a:81:
70:6e:18:ff:cd:72:32:1d:91:fe:de:c8:c7:67:dd:
38:13:d3:f6:ce:b7:56:45:d8:6d:a2:ca:4f:0f:71:
94:14:ed:65:84:e6:b8:9d:91:39:ef:b4:4e:00:36:
ce:66:e9:65:42:7c:00:3f:69:aa:c9:a5:79:2d:43:
c0:4a:48:0e:09:d7:da:44:b0:53:38:60:06:fe:f9:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:15:AC:81:48:8A:7C:49:47:5E:78:B3:73:E1:F0:9D:5D:D1:84:53
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:aa:70:60:07:9c:01:be:ab:4a:4a:43:8c:60:1c:5d:a2:
31:c0:61:20:d6:f2:57:69:0f:df:12:ea:45:60:f2:6e:b4:58:
20:92:b1:fd:d8:51:a4:4d:32:2c:76:b7:bc:be:da:ae:ca:e9:
03:9e:41:45:67:b1:44:5b:15:c9:ab:21:5a:e1:44:15:88:f3:
1d:40:0e:48:4f:c7:63:22:ae:20:b9:33:7a:61:7a:e9:e0:4e:
d2:f9:7a:6e:23:03:12:73:86:e3:e9:69:dd:76:cf:a9:7e:de:
ed:8f:16:62:13:8f:c2:74:bc:c8:ff:eb:4b:12:5c:be:a5:0c:
e5:d6:00:8b:0a:1d:b3:d0:21:5c:aa:ac:53:95:14:31:51:81:
72:1d:b7:f0:79:2b:33:bd:62:0c:d9:fe:87:3b:21:61:19:91:
8c:dc:cd:08:d8:8d:e7:a3:8a:8b:47:65:44:e2:87:c1:fd:d9:
52:3b:7b:d4:73:3f:f3:b4:43:be:1e:af:15:16:9e:90:23:b0:
78:16:bf:ef:4c:c5:98:94:b3:f3:52:e5:ee:65:37:ff:f3:a1:
74:a6:5c:fc:f4:8e:26:cc:00:c6:4d:da:55:0b:60:c2:9e:14:
8a:56:83:75:90:c4:75:34:8f:d7:83:b9:a0:40:0b:95:87:47:
82:5c:9f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3671wWhdn1LD5/EHecCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwMzI2MDIwMTAzWhcNMjYwMzI3MDIwMTAzWjAzMTEwLwYDVQQD
Eyg1YjE1YWM4MTQ4OGE3YzQ5NDc1ZTc4YjM3M2UxZjA5ZDVkZDE4NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA642AQa/7pB9sOqfDUXuN6vvMcp4L
4ld4k1f+n1xXd3cGtlSlex8/BnB5uldfv68Qtt4vL+bqmXOsw5YBY9P+eqzy2OQU
tjxqViqvobyz24V7niyStAUqgnynSvfoIBshh+Xuxhp3oD+a+91nJzjrsi66DLv0
EBjcZXPD6hV+srwfyVcRPNB3FcoU4LOGZVRAIQv+RZ4p8ITFeQnM1AljzOAtCHzj
1uekWFOuvN5GDOulmoFwbhj/zXIyHZH+3sjHZ904E9P2zrdWRdhtospPD3GUFO1l
hOa4nZE577ROADbOZullQnwAP2mqyaV5LUPASkgOCdfaRLBTOGAG/vmgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsVrIFIinxJR154s3Ph8J1d0YRTMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUqqcGAH
nAG+q0pKQ4xgHF2iMcBhINbyV2kP3xLqRWDybrRYIJKx/dhRpE0yLHa3vL7arsrp
A55BRWexRFsVyashWuFEFYjzHUAOSE/HYyKuILkzemF66eBO0vl6biMDEnOG4+lp
3XbPqX7e7Y8WYhOPwnS8yP/rSxJcvqUM5dYAiwods9AhXKqsU5UUMVGBch238Hkr
M71iDNn+hzshYRmRjNzNCNiN56OKi0dlROKHwf3ZUjt71HM/87RDvh6vFRaekCOw
eBa/70zFmJSz81Ll7mU3//OhdKZc/PSOJswAxk3aVQtgwp4UilaDdZDEdTSP14O5
oEALlYdHglyfUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:18 2026 by rpki-client