Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier: Ow28DOEQufeUB9lve0O4cXjeDHG1aOrLMUsaTFn63X8=
Subject key identifier: 0E:8F:C4:30:86:41:A9:92:7F:E5:BD:2A:39:30:F1:D5:D7:32:F8:47
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 019D2BBCA11B1056B76A6A68BF25E52AA00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number: 1487
Signing time: Thu 26 Mar 2026 20:01:15 +0000
Manifest this update: Thu 26 Mar 2026 20:01:15 +0000
Manifest next update: Fri 27 Mar 2026 20:01:15 +0000
Files and hashes: 1: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: sRiLBpyD3qwhlMtOffxYq6ckvxpstUwfKX48U3n2WP0=)
2: pAESyPqHIlN4NTJAugrXcjke2nM.roa (hash: eftVyacucHA1lYWjx3ZzoQjWGGcLhPcyZlIC+dbOdko=)
3: pYGDQP7z4knn6-l2OGShS12r9vg.roa (hash: OTzBNhKlo1pe/s0so9dkt15EFzXNXt7pIqKb4IqGORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:a1:1b:10:56:b7:6a:6a:68:bf:25:e5:2a:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Mar 26 20:01:15 2026 GMT
Not After : Mar 27 20:01:15 2026 GMT
Subject: CN=0e8fc4308641a9927fe5bd2a3930f1d5d732f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:05:65:4d:ab:c0:db:cd:f1:48:69:95:26:
0f:73:92:b6:8b:6c:7b:ec:0e:7e:21:1f:94:60:e4:
ba:67:0d:a1:47:28:61:cc:8d:25:0b:ba:0b:92:43:
45:9f:01:95:8b:80:98:43:f8:01:fe:88:91:03:02:
cd:35:fc:bc:70:bb:2f:2d:93:34:ed:bc:44:6f:71:
61:1d:7e:9b:ac:d6:0a:98:e3:9b:9b:29:0f:db:96:
0e:a6:db:fd:a8:ea:00:40:23:17:17:6d:27:e6:05:
14:5f:df:74:f7:cc:ab:1c:02:5a:c6:4c:d3:93:4e:
27:1e:bc:a3:52:d6:04:13:24:d8:54:92:43:0f:0b:
61:98:53:9f:44:e9:cd:43:b5:10:ee:eb:3f:28:96:
e2:70:69:c7:3a:39:fb:84:25:77:28:65:79:d1:66:
27:34:65:f0:0c:f9:c8:8b:8b:4e:e2:a7:00:5b:24:
3a:8a:2c:0c:af:76:5d:56:d2:d4:d3:32:58:c8:2f:
9a:98:dd:90:4f:d6:a6:f7:30:0e:d9:ea:f4:b1:23:
c9:ed:65:78:cc:8c:a3:08:52:9c:8e:a2:81:21:c1:
e4:a6:dd:b5:99:25:ef:ca:c5:dd:03:25:29:68:86:
52:d2:e7:89:10:bf:08:97:28:a8:4e:54:4e:99:98:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:C4:30:86:41:A9:92:7F:E5:BD:2A:39:30:F1:D5:D7:32:F8:47
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:56:53:04:6c:04:3c:24:c5:b3:ff:9a:eb:05:83:97:99:
99:f9:10:08:39:25:78:56:26:25:9b:ed:93:95:ac:9e:05:1c:
bd:71:ea:ce:21:e9:02:43:2a:81:8a:f5:79:c3:6f:6a:bb:96:
19:02:cf:68:12:e9:96:57:52:f2:11:90:ae:64:de:34:c5:bb:
4e:e0:52:63:a1:ee:d8:55:16:b8:09:d9:5e:6d:96:7f:09:f9:
09:22:c5:10:07:5e:cd:94:17:4e:72:73:37:57:93:d8:9b:3a:
f8:a4:8d:d7:b6:69:9f:00:42:e5:6c:c0:d6:87:c2:fb:d9:dc:
1e:4e:19:6b:4e:db:78:7c:28:9d:0d:d6:e2:f2:55:00:60:76:
8b:25:6c:5f:5b:ba:23:79:3e:f9:98:fc:20:53:80:3a:0a:a8:
66:49:55:59:33:f0:6a:44:5b:42:0b:48:7e:48:eb:bd:65:63:
b8:21:69:f6:f3:98:d7:7a:4e:34:b6:7a:37:93:6f:fc:d5:d9:
75:ed:84:e1:bb:89:7c:94:e7:e9:33:8a:e6:50:c9:8c:88:8c:
1f:ec:60:49:aa:eb:24:6f:29:55:57:61:43:a9:14:64:df:e3:
cc:b3:80:f6:67:cd:89:4f:e4:02:12:1a:38:87:58:99:8d:6e:
2e:78:e6:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvKEbEFa3ampovyXlKqANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm
MjMxZjQwHhcNMjYwMzI2MjAwMTE1WhcNMjYwMzI3MjAwMTE1WjAzMTEwLwYDVQQD
EygwZThmYzQzMDg2NDFhOTkyN2ZlNWJkMmEzOTMwZjFkNWQ3MzJmODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q4FZU2rwNvN8UhplSYPc5K2i2x7
7A5+IR+UYOS6Zw2hRyhhzI0lC7oLkkNFnwGVi4CYQ/gB/oiRAwLNNfy8cLsvLZM0
7bxEb3FhHX6brNYKmOObmykP25YOptv9qOoAQCMXF20n5gUUX99098yrHAJaxkzT
k04nHryjUtYEEyTYVJJDDwthmFOfROnNQ7UQ7us/KJbicGnHOjn7hCV3KGV50WYn
NGXwDPnIi4tO4qcAWyQ6iiwMr3ZdVtLU0zJYyC+amN2QT9am9zAO2er0sSPJ7WV4
zIyjCFKcjqKBIcHkpt21mSXvysXdAyUpaIZS0ueJEL8IlyioTlROmZgw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6PxDCGQamSf+W9Kjkw8dXXMvhHMB8GA1UdIwQY
MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt
NGY4OTAyYmZlMTcyLzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy
LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVhWUwRs
BDwkxbP/musFg5eZmfkQCDkleFYmJZvtk5WsngUcvXHqziHpAkMqgYr1ecNvaruW
GQLPaBLplldS8hGQrmTeNMW7TuBSY6Hu2FUWuAnZXm2Wfwn5CSLFEAdezZQXTnJz
N1eT2Js6+KSN17ZpnwBC5WzA1ofC+9ncHk4Za07beHwonQ3W4vJVAGB2iyVsX1u6
I3k++Zj8IFOAOgqoZklVWTPwakRbQgtIfkjrvWVjuCFp9vOY13pONLZ6N5Nv/NXZ
de2E4buJfJTn6TOK5lDJjIiMH+xgSarrJG8pVVdhQ6kUZN/jzLOA9mfNiU/kAhIa
OIdYmY1uLnjmtg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:41 2026 by rpki-client