
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier: T7qH2mRdokga7xT1dYT6uksuoP5deoylzE3oFEQiA8w=
Subject key identifier: D0:92:36:81:9E:64:8D:22:63:C2:36:D8:13:85:89:38:5A:69:29:7B
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019D288447CBC4BC700AD9970C3092EABA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number: 184A
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: 6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa (hash: OTv2XEJolNR8TAIm4a6NTDxE9WsD3wHCkSRiEecs+hA=)
2: 8i5Ds-N-roh3aLA1xwfcTEEswQE.roa (hash: rwy4JFH9zpztXM4MraEw5nOMWLCJcPLmRgbD+aZVpPg=)
3: AVPuOu9WJgQFeY3OKziZugz6I8w.roa (hash: GA/D9jB65LyEclzGHWIX2nscOtPzaUo+KGMXTzHX+8Y=)
4: CWyUYsYrHl5cCZr6qaohHLKpdJI.roa (hash: IvmnQYp72Ns3lgs7TiLYlWSG657dtK8bI8cQG8CHOEM=)
5: awM-mF2LuJSHr5AQaHNMqJ1enTM.roa (hash: Y5juHU/HVAVlVF39MoV3F3X1JaAmaMtik3VRP6Mzl6Q=)
6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: wWJ5gXsnKA9BU2WAVOZObxRR5ZOh4RuEXBofwARqfIE=)
7: uYiIkwBfPqClYfMGl38tvm4KBvg.roa (hash: o4gsrEz/fQuiw6/1tweyaGkFxUvLi+VVTdNf5NDVUL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:47:cb:c4:bc:70:0a:d9:97:0c:30:92:ea:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=d09236819e648d2263c236d8138589385a69297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:50:f7:41:ab:ab:9a:ba:db:c1:bc:bc:df:
db:3f:fe:ca:b7:e2:48:4e:93:68:c3:bb:b6:06:2c:
2c:b5:d6:89:42:50:55:f2:cb:2d:c4:6e:b0:20:0d:
5a:58:1d:ee:aa:db:ec:21:0d:a3:31:f1:f4:ea:99:
eb:10:7a:7e:22:51:70:c2:09:a6:7e:d2:43:d3:9d:
14:fd:5c:ca:b7:b1:b6:b5:e8:1f:5d:52:3a:d4:99:
0e:a6:18:6a:d8:27:72:1f:37:22:35:0f:ef:18:bc:
63:e8:3b:05:dc:d7:2c:64:85:3a:45:d1:ec:c3:32:
bd:6c:a2:34:9d:99:2b:57:d0:08:c3:f1:2c:2f:2d:
e2:f0:c2:a0:d3:81:39:41:a9:b5:ce:c1:a8:ca:3d:
82:7d:13:a8:76:42:15:19:0a:f2:c1:f8:49:75:f4:
8a:64:cd:0f:80:90:df:aa:a1:36:e0:d8:64:73:05:
9b:2e:5f:19:43:6b:56:62:89:b6:b8:f9:3a:1e:86:
b4:df:ab:79:99:e4:4f:e1:91:4e:2c:ca:21:5f:76:
62:7c:e7:67:1a:b7:f6:13:86:22:cf:53:c9:21:ba:
63:d1:ad:68:6b:8c:82:3b:e3:bb:9f:b3:fc:bb:b9:
e5:d3:db:19:6e:38:a8:3e:c7:bd:53:fe:00:1f:63:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:36:81:9E:64:8D:22:63:C2:36:D8:13:85:89:38:5A:69:29:7B
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:fa:1a:2a:1f:70:3f:8d:58:f1:be:a1:cd:63:9b:1d:da:
01:f4:f9:79:1e:df:7d:b3:30:c0:e8:b4:8b:84:9b:56:53:c7:
85:a1:c6:11:69:1a:dd:b2:69:20:fc:a9:83:a8:94:62:1f:50:
c2:7b:70:e9:b7:8c:ce:65:fe:2e:4a:89:03:a8:8e:56:16:c1:
f2:2c:8a:d2:bc:f9:f3:4c:94:ed:f3:d8:3e:d0:c3:fa:38:45:
2c:49:c8:7e:f3:d2:ce:dc:ee:7a:47:bd:63:d3:d6:c0:a9:92:
b9:86:e7:17:58:91:28:73:06:3c:b0:36:e3:e1:7b:ce:5a:1d:
d3:6c:04:99:5a:0c:c6:82:a1:ff:e7:84:ae:5e:15:08:a0:f0:
4c:50:e3:a8:00:d1:8d:ed:0e:b7:eb:56:b2:9a:2e:a6:7f:af:
5c:01:2d:4f:ae:3d:fa:17:12:31:64:fc:fb:4f:75:15:26:b4:
3f:bb:42:2f:f0:74:6d:d1:2f:bd:21:34:ec:5e:fe:09:c8:56:
b4:41:65:f6:32:c6:2a:d9:ba:e8:32:d6:7c:00:bf:46:86:c8:
78:ff:d5:4a:d4:97:61:b3:2e:d9:cb:ab:f2:b5:75:0b:1c:9e:
83:f8:0a:5d:f0:5c:44:c6:7b:cb:91:a8:ea:a0:62:c4:db:4c:
94:8a:bf:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohEfLxLxwCtmXDDCS6rpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm
MTYzZGUwHhcNMjYwMzI2MDUwMDUwWhcNMjYwMzI3MDUwMDUwWjAzMTEwLwYDVQQD
EyhkMDkyMzY4MTllNjQ4ZDIyNjNjMjM2ZDgxMzg1ODkzODVhNjkyOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tFQ90Grq5q628G8vN/bP/7Kt+JI
TpNow7u2BiwstdaJQlBV8sstxG6wIA1aWB3uqtvsIQ2jMfH06pnrEHp+IlFwwgmm
ftJD050U/VzKt7G2tegfXVI61JkOphhq2CdyHzciNQ/vGLxj6DsF3NcsZIU6RdHs
wzK9bKI0nZkrV9AIw/EsLy3i8MKg04E5Qam1zsGoyj2CfROodkIVGQrywfhJdfSK
ZM0PgJDfqqE24NhkcwWbLl8ZQ2tWYom2uPk6Hoa036t5meRP4ZFOLMohX3ZifOdn
Grf2E4Yiz1PJIbpj0a1oa4yCO+O7n7P8u7nl09sZbjioPse9U/4AH2MCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCSNoGeZI0iY8I22BOFiThaaSl7MB8GA1UdIwQY
MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt
ZDNiNThmNjk4MTQ4LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4
LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh76Giof
cD+NWPG+oc1jmx3aAfT5eR7ffbMwwOi0i4SbVlPHhaHGEWka3bJpIPypg6iUYh9Q
wntw6beMzmX+LkqJA6iOVhbB8iyK0rz580yU7fPYPtDD+jhFLEnIfvPSztzueke9
Y9PWwKmSuYbnF1iRKHMGPLA24+F7zlod02wEmVoMxoKh/+eErl4VCKDwTFDjqADR
je0Ot+tWspoupn+vXAEtT649+hcSMWT8+091FSa0P7tCL/B0bdEvvSE07F7+CchW
tEFl9jLGKtm66DLWfAC/RobIeP/VStSXYbMu2cur8rV1Cxyeg/gKXfBcRMZ7y5Go
6qBixNtMlIq/0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:39 2026 by rpki-client