Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: zF7BmFTmBfv4tfE6W4O0ADGJdyiWHxxVcjmE/OR7ay0=
Subject key identifier: ED:B1:BA:E9:F6:FA:28:42:CE:30:E6:7C:98:DB:C9:EC:55:0F:D8:6C
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019D25842AC1EFDFAA98F7568B2ED911F0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (hash: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=)
2: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (hash: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw=)
3: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: n4B1pihzc8OFX5xaVcf5gqI6Ee9vAL2PG4gkScAH8EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2a:c1:ef:df:aa:98:f7:56:8b:2e:d9:11:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=edb1bae9f6fa2842ce30e67c98dbc9ec550fd86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:3c:c3:7f:5f:32:29:ac:fc:6c:78:3b:c5:
65:40:81:97:f9:6f:54:aa:f2:fb:d3:3a:32:2d:5e:
94:a9:4b:a8:d0:36:a0:82:48:93:fe:19:16:94:31:
53:51:9c:26:d1:18:ca:56:f5:e9:c4:61:87:ad:2c:
08:d9:83:b3:18:65:c3:f2:94:2b:6e:bf:c7:ee:de:
71:18:67:44:6c:dd:79:c5:03:c9:d0:e7:0f:fb:01:
db:49:86:08:37:ae:6e:e7:bb:b2:d8:7c:e0:c0:33:
52:1e:f6:eb:52:11:1a:64:c5:d0:bc:62:8b:9b:ed:
56:9b:db:af:57:bb:ce:5e:10:d1:c1:24:36:00:fa:
41:b6:6d:eb:f8:3b:ab:b8:0d:7d:c7:1b:aa:7a:2f:
ae:f2:79:c3:24:05:3d:ee:42:84:82:35:b3:66:08:
e0:82:4a:ec:24:bd:ba:9a:7e:a1:ab:07:a9:8f:01:
12:52:23:ec:0d:ed:56:5e:7c:2b:8c:26:3d:f5:4b:
78:09:50:bf:91:df:2d:ad:79:a8:82:5a:43:86:cf:
24:41:ea:43:37:ea:5a:f2:0e:eb:3e:de:ec:23:d3:
3c:2b:8d:33:59:aa:71:1a:bb:cb:fb:e4:e1:7a:40:
55:ce:b6:fa:7a:fa:e9:29:ed:ed:97:25:92:d8:4e:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B1:BA:E9:F6:FA:28:42:CE:30:E6:7C:98:DB:C9:EC:55:0F:D8:6C
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:80:d5:a8:60:ca:d9:be:3a:52:2d:33:0a:37:c6:15:38:
ce:6c:d6:b8:46:5a:ed:84:a6:49:7e:ac:34:79:ad:a1:0d:7d:
39:ab:44:19:85:6a:69:80:98:52:57:42:55:c4:5c:fd:5c:63:
bb:cd:59:d6:4d:8f:15:b2:e0:d6:61:5f:88:d3:4c:a2:5d:99:
82:bd:63:9c:43:f9:30:c9:ec:b5:3c:ce:4f:63:dc:23:07:b3:
5f:bd:a0:e0:3e:65:c2:83:40:8f:24:bd:2f:b4:cd:a1:6f:9f:
67:81:56:3b:fc:95:c9:2f:25:80:08:50:37:23:7b:de:46:c1:
e6:35:68:81:b0:36:1e:af:0c:c1:b8:79:ab:d5:d5:13:90:44:
8d:cb:20:cb:1f:b4:b6:37:58:99:72:5d:e4:f1:09:a7:56:26:
a0:19:61:54:78:7b:46:a8:d2:c4:f1:de:9f:42:a7:03:28:0b:
0e:54:43:af:1a:a8:26:d4:12:b2:d0:b1:f4:97:81:5e:25:72:
dd:e8:f6:c7:65:37:00:3a:9b:0f:fb:b1:27:9c:81:6c:cd:b6:
ab:39:6f:02:e3:25:3e:8c:0a:d6:b4:9b:50:98:68:b9:b3:67:
79:78:aa:ee:1f:61:bb:50:c6:da:cc:ad:9a:16:08:29:f7:00:
8f:3f:16:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhCrB79+qmPdWiy7ZEfD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjYwMzI1MTUwMTUxWhcNMjYwMzI2MTUwMTUxWjAzMTEwLwYDVQQD
EyhlZGIxYmFlOWY2ZmEyODQyY2UzMGU2N2M5OGRiYzllYzU1MGZkODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTo8w39fMims/Gx4O8VlQIGX+W9U
qvL70zoyLV6UqUuo0DaggkiT/hkWlDFTUZwm0RjKVvXpxGGHrSwI2YOzGGXD8pQr
br/H7t5xGGdEbN15xQPJ0OcP+wHbSYYIN65u57uy2HzgwDNSHvbrUhEaZMXQvGKL
m+1Wm9uvV7vOXhDRwSQ2APpBtm3r+DuruA19xxuqei+u8nnDJAU97kKEgjWzZgjg
gkrsJL26mn6hqwepjwESUiPsDe1WXnwrjCY99Ut4CVC/kd8trXmoglpDhs8kQepD
N+pa8g7rPt7sI9M8K40zWapxGrvL++ThekBVzrb6evrpKe3tlyWS2E5UAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2xuun2+ihCzjDmfJjbyexVD9hsMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhqA1ahg
ytm+OlItMwo3xhU4zmzWuEZa7YSmSX6sNHmtoQ19OatEGYVqaYCYUldCVcRc/Vxj
u81Z1k2PFbLg1mFfiNNMol2Zgr1jnEP5MMnstTzOT2PcIwezX72g4D5lwoNAjyS9
L7TNoW+fZ4FWO/yVyS8lgAhQNyN73kbB5jVogbA2Hq8Mwbh5q9XVE5BEjcsgyx+0
tjdYmXJd5PEJp1YmoBlhVHh7RqjSxPHen0KnAygLDlRDrxqoJtQSstCx9JeBXiVy
3ej2x2U3ADqbD/uxJ5yBbM22qzlvAuMlPowK1rSbUJhoubNneXiq7h9hu1DG2syt
mhYIKfcAjz8W0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:24 2026 by rpki-client