Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: sCe0iewsJeLPbtlNODadbM0Kt+Vw9JWGVdo9YXCYCtk=
Subject key identifier: A2:91:65:A0:BC:11:36:E3:BD:C6:78:7E:A7:67:5E:A9:9B:6C:99:F5
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019D269679A88D961612B86B563A6BBC6731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1459
Signing time: Wed 25 Mar 2026 20:01:28 +0000
Manifest this update: Wed 25 Mar 2026 20:01:28 +0000
Manifest next update: Thu 26 Mar 2026 20:01:28 +0000
Files and hashes: 1: ElwaUMINBaBKF34TpTL8haqVd_s.roa (hash: QJTxI54JV9QgQdwNg1CINH9sDRPfJfNrzCHiU/q0Bi0=)
2: PfqFO43KqwDuwV1NwMVNOIpCa7k.roa (hash: KIFfrdCVgjpBo7n8/Wm61/4Xa4EQ0RYR7+7S2nxBq8A=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: UIUhyUEI0a+AbExCAC5MBFzIjK4n0+oT8cxztkB7UWo=)
4: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (hash: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:79:a8:8d:96:16:12:b8:6b:56:3a:6b:bc:67:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Mar 25 20:01:28 2026 GMT
Not After : Mar 26 20:01:28 2026 GMT
Subject: CN=a29165a0bc1136e3bdc6787ea7675ea99b6c99f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:de:1b:07:fb:3d:7e:f4:2e:d0:0b:f3:6e:
a1:34:b9:0d:ca:b4:c7:35:15:6c:ff:e9:bd:f5:2b:
70:7d:85:33:55:3c:2c:e6:48:09:70:ac:9f:78:41:
54:97:14:be:68:7c:57:b5:8c:15:28:ce:78:04:6b:
44:c2:a3:5c:06:21:2f:9d:49:1b:36:4b:02:4b:e8:
7a:8e:e6:3c:a1:d1:3c:de:ea:4b:29:e2:61:e2:5c:
9f:49:0e:67:3c:af:c3:3b:f1:10:fa:d8:77:b3:26:
7f:0c:21:ae:04:83:22:02:0a:6a:95:94:49:bc:ba:
92:d1:b3:8d:b2:8b:11:76:2a:e8:9c:b8:af:84:b4:
72:fc:3b:32:06:f8:6b:ab:ae:bd:5a:06:a5:96:53:
55:97:45:6b:cc:0a:14:7b:74:5f:6e:c6:56:3c:7a:
77:e0:14:1c:d1:48:4f:e2:cc:47:5d:ca:9d:fb:49:
a6:4c:51:9b:34:15:f0:56:11:7c:8a:35:78:e7:4f:
5b:3a:3d:d2:2c:d5:2e:68:01:47:d0:6c:a8:0d:ed:
98:83:5f:ad:cf:9f:f2:8e:47:ad:ad:99:c8:09:da:
62:e0:94:9c:1f:1e:0b:ee:e4:21:cb:6b:b8:6d:4d:
a2:ad:8a:8e:4c:d8:a9:6b:33:fb:d2:a4:6d:a4:6d:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:65:A0:BC:11:36:E3:BD:C6:78:7E:A7:67:5E:A9:9B:6C:99:F5
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:92:bd:f5:d3:34:ce:77:ad:e5:cf:0e:08:55:c2:0c:3b:
62:19:e1:14:fb:d6:13:a5:be:b5:3f:ef:c7:a0:6b:ce:3c:77:
79:25:5f:0f:9a:87:90:a8:94:57:06:df:98:fd:7a:45:8a:ca:
9e:b9:7c:a3:87:ba:db:39:6e:9c:04:08:e8:4f:d7:31:9a:0e:
11:54:f3:c3:0a:4e:e5:f4:5c:f0:58:92:1a:ef:ef:e8:45:76:
57:dd:27:41:81:5d:b0:bc:f5:23:65:da:93:99:e5:8c:46:44:
75:83:14:ae:d0:5e:92:db:ff:a3:54:99:68:fa:50:09:87:e7:
f3:1f:1f:e5:45:ae:7d:16:94:15:ba:21:ad:40:ec:45:d6:07:
da:1d:3e:73:a8:e7:58:9b:8e:7d:d1:3c:25:bd:ff:1e:86:14:
e9:07:4c:c7:3b:a7:f3:43:b5:a8:38:bd:d7:85:da:07:8c:fb:
d9:2a:b0:f9:68:34:79:8e:80:11:96:e3:2d:76:26:4c:2e:d3:
c8:d0:c3:e4:38:4c:17:0a:d3:f2:f6:9b:cd:a6:d0:4a:8b:38:
a7:c5:71:9a:30:cf:74:58:de:5c:da:8a:28:5d:ff:a7:08:16:
e5:49:ac:e0:b9:ca:41:58:d0:c7:7f:08:ca:5d:cd:0a:6f:9d:
e8:b0:7d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlnmojZYWErhrVjprvGcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1
MGI2ZGIwHhcNMjYwMzI1MjAwMTI4WhcNMjYwMzI2MjAwMTI4WjAzMTEwLwYDVQQD
EyhhMjkxNjVhMGJjMTEzNmUzYmRjNjc4N2VhNzY3NWVhOTliNmM5OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43reGwf7PX70LtAL826hNLkNyrTH
NRVs/+m99StwfYUzVTws5kgJcKyfeEFUlxS+aHxXtYwVKM54BGtEwqNcBiEvnUkb
NksCS+h6juY8odE83upLKeJh4lyfSQ5nPK/DO/EQ+th3syZ/DCGuBIMiAgpqlZRJ
vLqS0bONsosRdironLivhLRy/DsyBvhrq669WgalllNVl0VrzAoUe3RfbsZWPHp3
4BQc0UhP4sxHXcqd+0mmTFGbNBXwVhF8ijV4509bOj3SLNUuaAFH0GyoDe2Yg1+t
z5/yjketrZnICdpi4JScHx4L7uQhy2u4bU2irYqOTNipazP70qRtpG05QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKRZaC8ETbjvcZ4fqdnXqmbbJn1MB8GA1UdIwQY
MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt
MTY1NGE4MGRiYzM2LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2
LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo+SvfXT
NM53reXPDghVwgw7YhnhFPvWE6W+tT/vx6Brzjx3eSVfD5qHkKiUVwbfmP16RYrK
nrl8o4e62zlunAQI6E/XMZoOEVTzwwpO5fRc8FiSGu/v6EV2V90nQYFdsLz1I2Xa
k5nljEZEdYMUrtBektv/o1SZaPpQCYfn8x8f5UWufRaUFbohrUDsRdYH2h0+c6jn
WJuOfdE8Jb3/HoYU6QdMxzun80O1qDi914XaB4z72Sqw+Wg0eY6AEZbjLXYmTC7T
yNDD5DhMFwrT8vabzabQSos4p8VxmjDPdFjeXNqKKF3/pwgW5Ums4LnKQVjQx38I
yl3NCm+d6LB9wQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:52 2026 by rpki-client