Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: 8ZhGZ8s54U2VUYT5ecg+O38f+5vgU5tYkoIM4FeAxNQ=
Subject key identifier: B3:07:31:45:64:84:50:25:4C:0D:EA:A7:E5:EC:A0:B5:F1:1D:56:F6
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 019D2704077BF6AB47753ECBDD5E55D60444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0E31
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 4xk1v6MnS+ltXX40AMd14XKI9tUzi5ZhUQdV2LqS4Vg=)
2: fo0lrdRlefUeF4nkReob4pKTJIc.roa (hash: i3MhDgEPbBKNozohRpkOstSN7+oppEOt3HEvpIjhaCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:07:7b:f6:ab:47:75:3e:cb:dd:5e:55:d6:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=b3073145648450254c0deaa7e5eca0b5f11d56f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:f7:b4:a9:7e:12:f4:1e:75:65:23:57:ed:
3e:dc:04:b3:86:6b:3b:89:48:43:fb:ab:37:f6:23:
53:33:6d:ba:4a:81:31:3a:91:d1:56:ac:24:46:f0:
11:fc:44:a7:a6:65:3e:be:14:a3:0e:37:ca:c2:8b:
33:e4:e0:c2:33:89:fa:96:d9:6f:e0:df:e5:55:4a:
e5:f5:e5:59:28:fc:d0:01:de:1c:b2:28:95:40:5b:
11:55:ef:00:44:c0:50:03:7a:7c:83:a9:94:60:da:
51:0f:1e:1e:98:f2:b0:a2:76:d4:ca:f3:a3:81:6d:
42:2a:87:b4:4f:30:a7:6b:f5:7c:11:bd:f8:b3:c2:
b8:6a:7b:40:ba:3a:71:9f:26:ab:86:f9:2a:43:21:
ff:e8:e6:84:ee:50:c1:fd:94:31:50:23:7a:59:60:
90:36:ee:0b:ca:35:05:f7:b8:e3:55:47:3b:49:f8:
2b:19:b8:68:8a:a3:d2:30:9b:d7:65:81:87:ac:0a:
59:0a:39:4c:66:ca:f1:c3:48:af:20:1e:b4:6b:db:
c1:11:7b:0d:46:84:bf:79:90:1b:62:f4:bb:11:88:
ba:cb:5a:c6:82:dc:46:47:eb:76:1d:45:03:33:f0:
10:1f:36:dc:e8:87:90:43:a0:7e:f7:2f:95:ba:21:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:31:45:64:84:50:25:4C:0D:EA:A7:E5:EC:A0:B5:F1:1D:56:F6
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f4:d3:ca:2b:ff:e8:3f:0b:ef:5a:17:96:aa:0a:a2:2c:62:
97:57:1b:98:87:47:62:c3:19:d2:bb:65:6a:5a:1e:db:02:27:
b5:3a:cc:e5:65:9a:4d:bb:70:e4:03:33:88:42:d9:92:65:8c:
85:36:1b:a9:0f:3a:7c:f8:3b:1d:aa:9a:df:c2:0c:fd:64:27:
b1:16:7b:45:0e:3e:13:6e:a7:44:36:86:19:c9:2d:4c:0d:60:
ce:d5:d5:1a:ca:6e:67:bd:db:c0:c5:dd:13:b3:6b:e3:3d:67:
eb:b9:4b:97:49:b7:8f:e1:c1:6c:6c:c6:3f:c6:9f:32:5a:d8:
f6:f6:eb:71:a8:63:91:5a:af:81:fd:99:3f:7a:7e:06:b7:61:
62:d3:12:8b:a6:da:b4:de:73:2a:5a:2b:1f:bb:d4:a8:80:c9:
08:5e:45:cd:4d:91:80:3b:93:e8:1b:f4:98:ac:d5:ff:82:14:
38:4a:7f:74:ec:1f:e0:9f:2e:b4:9f:aa:f5:ff:05:e6:74:00:
d2:71:d7:ba:0f:20:dd:81:f1:a1:6b:40:89:af:08:b9:99:0e:
01:5e:83:28:27:fd:85:92:9c:67:34:cc:e8:e5:6b:ab:b9:9f:
3b:9e:94:cd:8c:10:92:81:85:5a:aa:80:b2:df:d1:ce:d2:f7:
70:8f:66:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAd79qtHdT7L3V5V1gREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWY2Y2EzMzUzNGI4NTMwYjlmMjE0ZWM4ZWE5M2RkMjVi
ZDFmY2YwHhcNMjYwMzI1MjIwMTA4WhcNMjYwMzI2MjIwMTA4WjAzMTEwLwYDVQQD
EyhiMzA3MzE0NTY0ODQ1MDI1NGMwZGVhYTdlNWVjYTBiNWYxMWQ1NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ/3tKl+EvQedWUjV+0+3ASzhms7
iUhD+6s39iNTM226SoExOpHRVqwkRvAR/ESnpmU+vhSjDjfKwosz5ODCM4n6ltlv
4N/lVUrl9eVZKPzQAd4csiiVQFsRVe8ARMBQA3p8g6mUYNpRDx4emPKwonbUyvOj
gW1CKoe0TzCna/V8Eb34s8K4antAujpxnyarhvkqQyH/6OaE7lDB/ZQxUCN6WWCQ
Nu4LyjUF97jjVUc7SfgrGbhoiqPSMJvXZYGHrApZCjlMZsrxw0ivIB60a9vBEXsN
RoS/eZAbYvS7EYi6y1rGgtxGR+t2HUUDM/AQHzbc6IeQQ6B+9y+VuiEN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMHMUVkhFAlTA3qp+XsoLXxHVb2MB8GA1UdIwQY
MBaAFEavbKM1NLhTC58hTsjqk90lvR/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUt
YzVjZWZkOThmNjIxLzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUtYzVjZWZkOThmNjIx
LzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfTTyiv/
6D8L71oXlqoKoixil1cbmIdHYsMZ0rtlaloe2wIntTrM5WWaTbtw5AMziELZkmWM
hTYbqQ86fPg7Haqa38IM/WQnsRZ7RQ4+E26nRDaGGcktTA1gztXVGspuZ73bwMXd
E7Nr4z1n67lLl0m3j+HBbGzGP8afMlrY9vbrcahjkVqvgf2ZP3p+BrdhYtMSi6ba
tN5zKlorH7vUqIDJCF5FzU2RgDuT6Bv0mKzV/4IUOEp/dOwf4J8utJ+q9f8F5nQA
0nHXug8g3YHxoWtAia8IuZkOAV6DKCf9hZKcZzTM6OVrq7mfO56UzYwQkoGFWqqA
st/RztL3cI9mmw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:21 2026 by rpki-client