Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: vmnrgU1NbizaP4pVLaARU8nFcEGvziWNodDG72HcUHw=
Subject key identifier: 71:80:36:D8:B0:9A:41:24:60:F0:0B:3E:68:1A:7A:61:4A:10:87:94
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 019D28BB8776A645025671D4BBA9B443B959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0E8B
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 7CUwK1UYwqayiiojTeY6DuJ4PuE.roa (hash: 0KwqbQB6sudYAbA+sSqdOrA5B6tIA7G2Tl98Yz+oNVs=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: iyoxs8OCfWYDC0PumkanlrUcs+5iZbBYcmKm9ilE/3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:87:76:a6:45:02:56:71:d4:bb:a9:b4:43:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=718036d8b09a412460f00b3e681a7a614a108794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:01:e9:cd:f5:9b:9a:71:a3:d5:cc:32:3b:
89:14:74:c2:83:72:65:1e:5c:b6:17:56:28:04:f6:
66:35:f7:85:af:42:4f:6b:96:08:f5:83:36:6e:ae:
0b:66:3c:8a:58:4e:9d:54:0f:f8:56:ef:bf:01:e0:
44:d5:e7:0b:8a:29:4f:b0:c8:45:48:e3:04:a7:6f:
99:8c:2b:9d:6b:e2:02:dd:cb:a3:10:99:d1:b3:11:
0c:8c:d3:46:b6:3e:ab:7b:03:de:0c:85:15:0f:ab:
a6:66:d4:33:ac:8b:21:e7:bb:e6:ec:99:c9:63:55:
2c:b6:39:4d:63:4f:53:2d:63:95:bb:f4:be:94:c0:
25:32:4e:63:81:31:48:7c:1a:13:bb:4b:9f:db:3e:
ed:d4:cc:0d:90:22:b6:aa:06:8f:df:a8:6f:5f:9e:
41:76:b8:2e:74:18:e8:a0:88:99:ed:18:c5:e9:2b:
d4:99:94:86:51:cd:0b:7b:03:57:ce:2c:ec:a7:08:
7a:6d:cb:ac:41:e8:90:33:a6:a1:a2:50:4f:3c:b0:
b7:4b:ae:a8:ed:8e:c3:71:86:d4:4a:53:02:e4:8c:
0c:f8:55:cc:6e:9c:17:04:ef:19:1d:3b:87:57:58:
2c:86:63:65:7b:82:98:01:cd:b0:94:87:0f:d2:cb:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:80:36:D8:B0:9A:41:24:60:F0:0B:3E:68:1A:7A:61:4A:10:87:94
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:7a:2d:23:ec:f2:3c:1d:86:03:df:8c:da:6b:8f:d6:16:
ac:03:16:f3:52:10:91:05:d7:0c:87:ef:02:fb:14:24:dc:42:
ab:51:d7:76:fe:ec:5b:54:2d:bf:31:10:3f:a7:7a:c1:07:fb:
82:79:08:19:c1:90:ab:6b:0f:a9:6a:64:e2:21:d7:4d:ed:5a:
73:aa:1f:49:16:93:df:0b:b3:53:05:87:63:05:1b:19:1f:b0:
f7:4c:8f:23:a2:31:26:30:94:d2:99:84:fa:5c:44:e3:71:e3:
81:89:50:78:d7:9e:c6:6d:c1:71:36:9f:11:b3:ca:69:42:1a:
e0:34:29:8f:b8:8b:71:54:5d:64:72:01:f2:44:a3:ea:c2:d8:
f8:48:07:c9:08:3d:32:ee:b7:d1:2b:76:e6:fe:29:ba:9c:e6:
5a:08:4c:12:e1:c9:1b:60:ab:b0:a2:e6:54:df:75:9d:5d:5a:
84:33:b7:dd:22:6a:03:60:82:9a:59:69:10:66:1e:22:09:2d:
83:4b:c1:54:b3:5a:09:cb:ef:dd:f2:fa:99:25:0c:60:99:0e:
05:a7:06:69:57:d2:22:b7:ff:ce:9a:42:02:94:70:9b:c2:1a:
b3:8b:48:b6:b3:f0:46:95:62:22:8b:6c:29:ae:e8:b9:f4:df:
55:a4:dd:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou4d2pkUCVnHUu6m0Q7lZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0
N2U1ZGUwHhcNMjYwMzI2MDYwMTExWhcNMjYwMzI3MDYwMTExWjAzMTEwLwYDVQQD
Eyg3MTgwMzZkOGIwOWE0MTI0NjBmMDBiM2U2ODFhN2E2MTRhMTA4Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZUB6c31m5pxo9XMMjuJFHTCg3Jl
Hly2F1YoBPZmNfeFr0JPa5YI9YM2bq4LZjyKWE6dVA/4Vu+/AeBE1ecLiilPsMhF
SOMEp2+ZjCuda+IC3cujEJnRsxEMjNNGtj6rewPeDIUVD6umZtQzrIsh57vm7JnJ
Y1UstjlNY09TLWOVu/S+lMAlMk5jgTFIfBoTu0uf2z7t1MwNkCK2qgaP36hvX55B
drgudBjooIiZ7RjF6SvUmZSGUc0LewNXzizspwh6bcusQeiQM6aholBPPLC3S66o
7Y7DcYbUSlMC5IwM+FXMbpwXBO8ZHTuHV1gshmNle4KYAc2wlIcP0ssf0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGANtiwmkEkYPALPmgaemFKEIeUMB8GA1UdIwQY
MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt
NmE4MzU2M2I2NTViLzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi
LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS16LSPs
8jwdhgPfjNprj9YWrAMW81IQkQXXDIfvAvsUJNxCq1HXdv7sW1QtvzEQP6d6wQf7
gnkIGcGQq2sPqWpk4iHXTe1ac6ofSRaT3wuzUwWHYwUbGR+w90yPI6IxJjCU0pmE
+lxE43HjgYlQeNeexm3BcTafEbPKaUIa4DQpj7iLcVRdZHIB8kSj6sLY+EgHyQg9
Mu630St25v4pupzmWghMEuHJG2CrsKLmVN91nV1ahDO33SJqA2CCmllpEGYeIgkt
g0vBVLNaCcvv3fL6mSUMYJkOBacGaVfSIrf/zppCApRwm8Ias4tItrPwRpViIots
Ka7oufTfVaTdaw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:56 2026 by rpki-client