Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier: VoraAUWun9wEA+/UbRLBDPD8zGvKu6vovbIVwhzyBrQ=
Subject key identifier: 67:BD:3F:3A:D7:47:BB:4C:20:75:0B:ED:E3:C4:43:66:70:00:91:8F
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial: 019D2771FBCFC7D05A310C7D6CCC3FAB2A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number: 1478
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa (hash: 34EHgphrwj4YxmqwBGDa+7QYhkgQ4fOpOeCf2tXVnG4=)
2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: g5jXcjmhYEkGXASNzeQXL4QpJ/azT22h6+92AKgQle8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fb:cf:c7:d0:5a:31:0c:7d:6c:cc:3f:ab:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=67bd3f3ad747bb4c20750bede3c443667000918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:7d:9a:7e:3f:4c:64:ed:9d:75:f0:a2:e2:
19:e6:77:73:31:9b:ae:66:c6:36:6d:04:54:e9:de:
8e:ce:57:18:14:d7:47:6e:2a:1a:0a:b0:1b:4f:4b:
b1:01:16:c8:f4:a1:97:69:3b:0c:dd:7e:b6:9d:25:
80:25:16:66:7b:5e:4c:06:b6:bc:d5:20:1c:e7:83:
f5:36:1b:03:30:4d:d8:56:b2:49:0d:84:d3:af:91:
01:60:8a:3f:80:65:06:6a:0c:d7:ad:16:a3:5a:6c:
8a:e0:05:5f:3c:13:b5:7f:6a:f6:f1:46:fc:8e:20:
e8:a4:3d:39:3b:f1:7a:18:2d:53:f1:0e:78:73:d6:
46:3d:a8:ca:42:19:46:e9:d4:25:f3:ba:1e:b6:be:
5c:ad:10:0f:bd:22:41:65:57:34:25:8d:52:89:0f:
f3:98:50:a8:48:e1:27:77:87:c5:c0:1a:98:22:31:
b4:c1:ad:a2:23:cd:f1:39:3e:84:30:5d:bd:64:f8:
f9:bd:e4:d1:c5:2d:65:a5:e0:46:48:d5:a7:f2:69:
9a:eb:30:f7:53:d9:74:b3:d9:49:23:c7:38:7b:2b:
27:97:2b:0f:8f:41:2d:2d:2e:20:d8:85:79:58:79:
dc:ac:e7:cc:8d:95:7b:46:fe:cd:32:d1:84:80:79:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:3F:3A:D7:47:BB:4C:20:75:0B:ED:E3:C4:43:66:70:00:91:8F
X509v3 Authority Key Identifier:
keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cd:3f:35:be:b4:13:ff:bd:da:3c:e1:61:2e:70:d1:a8:9f:
fd:44:81:8c:7e:89:a3:af:25:ca:a4:28:d8:a7:94:1e:78:75:
13:f5:3a:1c:55:8f:d8:fb:8b:89:2f:19:4f:a3:68:44:84:c1:
1d:01:9a:73:ab:ef:08:2c:f4:17:d2:53:84:06:23:a7:4a:e6:
31:9d:c4:0c:5c:71:27:ec:5e:08:f3:2e:71:02:7e:18:8a:33:
56:b1:77:ba:c6:9b:f4:82:75:f7:4a:82:32:71:93:8f:d4:b5:
5e:87:ed:41:ed:05:50:b5:47:4e:e3:65:03:ab:4a:15:13:a7:
47:b1:d2:a7:c1:f5:5c:3a:db:83:66:c0:7b:f5:10:7a:4e:64:
b9:0a:37:a8:fc:eb:37:37:40:34:c3:a0:2a:9c:a3:31:eb:b2:
fc:46:ca:f5:1d:1c:7c:83:de:a6:7c:c7:10:79:d8:49:ae:f9:
cb:ac:32:c8:6e:c3:90:f7:99:23:b3:e3:85:51:fe:13:f5:ec:
24:19:9d:e0:d1:94:f3:72:db:cb:ec:d9:ee:39:6c:21:85:e2:
df:d6:55:0b:bf:90:ff:31:9b:fb:ce:e9:4b:d4:bf:d6:c4:05:
ee:73:4a:a3:5f:46:c9:b7:be:1e:ac:40:1c:08:9b:72:bc:cf:
02:94:7c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfvPx9BaMQx9bMw/qyoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0
M2EyODQwHhcNMjYwMzI2MDAwMTE0WhcNMjYwMzI3MDAwMTE0WjAzMTEwLwYDVQQD
Eyg2N2JkM2YzYWQ3NDdiYjRjMjA3NTBiZWRlM2M0NDM2NjcwMDA5MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Z9mn4/TGTtnXXwouIZ5ndzMZuu
ZsY2bQRU6d6OzlcYFNdHbioaCrAbT0uxARbI9KGXaTsM3X62nSWAJRZme15MBra8
1SAc54P1NhsDME3YVrJJDYTTr5EBYIo/gGUGagzXrRajWmyK4AVfPBO1f2r28Ub8
jiDopD05O/F6GC1T8Q54c9ZGPajKQhlG6dQl87oetr5crRAPvSJBZVc0JY1SiQ/z
mFCoSOEnd4fFwBqYIjG0wa2iI83xOT6EMF29ZPj5veTRxS1lpeBGSNWn8mma6zD3
U9l0s9lJI8c4eysnlysPj0EtLS4g2IV5WHncrOfMjZV7Rv7NMtGEgHnmOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe9PzrXR7tMIHUL7ePEQ2ZwAJGPMB8GA1UdIwQY
MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt
MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1
LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks0/Nb60
E/+92jzhYS5w0aif/USBjH6Jo68lyqQo2KeUHnh1E/U6HFWP2PuLiS8ZT6NoRITB
HQGac6vvCCz0F9JThAYjp0rmMZ3EDFxxJ+xeCPMucQJ+GIozVrF3usab9IJ190qC
MnGTj9S1XoftQe0FULVHTuNlA6tKFROnR7HSp8H1XDrbg2bAe/UQek5kuQo3qPzr
NzdANMOgKpyjMeuy/EbK9R0cfIPepnzHEHnYSa75y6wyyG7DkPeZI7PjhVH+E/Xs
JBmd4NGU83Lby+zZ7jlsIYXi39ZVC7+Q/zGb+87pS9S/1sQF7nNKo19Gybe+HqxA
HAibcrzPApR8Ng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:58 2026 by rpki-client