Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
File: f_G4HP5quxGOl-AyW2Yur5hPL2o.mft (raw, json)
Hash identifier: XPKIjkp3qcZLqXg9GAhXtT84cMQKSNILS1JrUD9XJeY=
Subject key identifier: CE:42:5E:CE:F1:BC:91:EF:26:97:D8:18:8F:06:32:88:56:17:D3:8D
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 019D28BB69B801B2BD6139476BF8A9AFA460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
Manifest number: 0EF3
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: cU3iO3FpJ3ThfSxvIxD6lKSlohQ.roa (hash: aQdNHFOqbEm1roloWNrBXbpYkaOudhwbtiAta4ngMDQ=)
2: f_G4HP5quxGOl-AyW2Yur5hPL2o.crl (hash: eRMWKkBr+CroUUKsSxhx3H+d+xUwQxbfuLlwPUyyz+M=)
3: gT51eBmH7VwiQiKc39LDpmUrWZk.roa (hash: FAXWHOz3lVHci6J7wLN3Cpw/RKiWjTYfUoTshVCcZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:69:b8:01:b2:bd:61:39:47:6b:f8:a9:af:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=ce425ecef1bc91ef2697d8188f0632885617d38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:ba:74:92:55:ee:38:65:b8:c5:21:76:44:
71:3d:52:d3:8c:ad:bf:8e:2e:e9:1d:a9:d8:39:5a:
13:90:76:0e:49:d7:46:e4:2e:47:fa:7f:81:7d:6e:
df:9e:6f:00:c3:b2:39:97:24:70:d6:0b:86:c6:89:
f8:d5:f4:6b:ac:2b:fa:7c:9f:a2:2c:bb:e1:ea:0b:
12:39:66:c0:c3:1f:73:a5:c3:1b:01:85:6e:2d:7a:
48:10:80:51:09:22:3d:e5:b3:e3:b1:eb:59:6a:92:
04:23:a3:db:ae:52:72:0d:da:d7:ec:b2:9f:77:67:
6a:57:01:14:3b:ac:bc:23:da:d6:7e:4d:f1:2c:ba:
36:02:2a:47:3f:ff:17:82:13:68:72:bf:54:20:b6:
cc:81:83:eb:d6:d7:c2:27:81:c2:df:43:ff:1c:8b:
e1:de:e2:29:f0:9f:01:2e:54:c5:f9:d7:33:29:04:
d5:74:c6:ea:fc:0b:34:f4:12:75:86:d2:0e:1f:51:
1f:5c:72:c0:19:c5:d7:67:30:97:78:23:44:ef:b7:
c2:f2:87:a6:53:d1:79:99:e0:79:7b:a7:f7:ec:0f:
41:64:0c:69:5c:f5:ab:c5:27:67:06:d5:63:cb:cf:
fb:41:1a:66:cb:d7:a2:f2:2d:2f:56:4b:33:8f:20:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:5E:CE:F1:BC:91:EF:26:97:D8:18:8F:06:32:88:56:17:D3:8D
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3f:14:d9:64:60:0e:7c:40:5e:d5:72:6d:e2:dc:42:58:66:
7b:2c:cd:93:e6:a1:1c:a5:12:db:42:d8:68:ac:a1:ca:56:01:
b0:f6:3f:4e:e4:53:d5:76:90:8c:9a:2e:e6:b1:45:ce:3c:87:
3d:4e:1a:c9:c1:45:1c:51:25:74:fa:ca:0f:77:df:0c:9f:8e:
45:1d:f8:da:33:e8:7a:40:31:d1:05:7d:ec:d5:bb:36:ad:c4:
5b:12:f2:3d:98:d4:7d:31:fa:b7:a9:c4:d1:c6:2c:9e:1b:b7:
c5:50:6d:a0:37:a1:20:d0:b1:e6:e4:cf:3d:a5:92:e2:ec:fb:
3f:67:e7:8b:4f:9b:19:c5:27:81:44:cf:ce:c7:8d:96:cb:01:
0f:d6:7a:df:1a:77:63:5b:37:22:23:83:53:7c:45:04:3c:37:
8c:e0:45:b3:bc:01:4e:dc:72:93:7d:cb:e4:ed:e8:85:ec:2c:
ba:d3:97:c0:3d:78:99:72:e5:a7:c8:a6:2b:c3:f1:ed:f8:34:
07:58:98:94:8c:6c:69:02:8e:9f:d8:35:df:f8:4e:9b:65:02:
ae:b9:f4:34:a8:8e:3f:64:eb:3d:e4:66:d0:a6:4d:15:97:ec:
87:be:15:e9:66:67:a9:dd:80:e9:6b:c9:4c:81:8a:c8:ce:cb:
33:17:05:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2m4AbK9YTlHa/ipr6RgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZjFiODFjZmU2YWJiMTE4ZTk3ZTAzMjViNjYyZWFmOTg0
ZjJmNmEwHhcNMjYwMzI2MDYwMTAzWhcNMjYwMzI3MDYwMTAzWjAzMTEwLwYDVQQD
EyhjZTQyNWVjZWYxYmM5MWVmMjY5N2Q4MTg4ZjA2MzI4ODU2MTdkMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL26dJJV7jhluMUhdkRxPVLTjK2/
ji7pHanYOVoTkHYOSddG5C5H+n+BfW7fnm8Aw7I5lyRw1guGxon41fRrrCv6fJ+i
LLvh6gsSOWbAwx9zpcMbAYVuLXpIEIBRCSI95bPjsetZapIEI6PbrlJyDdrX7LKf
d2dqVwEUO6y8I9rWfk3xLLo2AipHP/8XghNocr9UILbMgYPr1tfCJ4HC30P/HIvh
3uIp8J8BLlTF+dczKQTVdMbq/As09BJ1htIOH1EfXHLAGcXXZzCXeCNE77fC8oem
U9F5meB5e6f37A9BZAxpXPWrxSdnBtVjy8/7QRpmy9ei8i0vVkszjyDg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5CXs7xvJHvJpfYGI8GMohWF9ONMB8GA1UdIwQY
MBaAFH/xuBz+arsRjpfgMltmLq+YTy9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEt
Y2VhN2ViMzUwNTM3LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEtY2VhN2ViMzUwNTM3
LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND8U2WRg
DnxAXtVybeLcQlhmeyzNk+ahHKUS20LYaKyhylYBsPY/TuRT1XaQjJou5rFFzjyH
PU4aycFFHFEldPrKD3ffDJ+ORR342jPoekAx0QV97NW7Nq3EWxLyPZjUfTH6t6nE
0cYsnhu3xVBtoDehINCx5uTPPaWS4uz7P2fni0+bGcUngUTPzseNlssBD9Z63xp3
Y1s3IiODU3xFBDw3jOBFs7wBTtxyk33L5O3ohewsutOXwD14mXLlp8imK8Px7fg0
B1iYlIxsaQKOn9g13/hOm2UCrrn0NKiOP2TrPeRm0KZNFZfsh74V6WZnqd2A6WvJ
TIGKyM7LMxcFkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:05 2026 by rpki-client