Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: fq7QcvrhAVBJp8YdPZYYdmiVRdQFb7U51TROgwCviQI=
Subject key identifier: FE:AA:D4:27:D0:F0:7F:AC:1D:9E:A8:0C:61:AE:E0:BF:AA:67:33:DC
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019D27A870F57E11B934F7976CFDD9B5DD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 158D
Signing time: Thu 26 Mar 2026 01:00:43 +0000
Manifest this update: Thu 26 Mar 2026 01:00:43 +0000
Manifest next update: Fri 27 Mar 2026 01:00:43 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: LCb4duFO9/TLPIV8kpo2R+GHokq2ehu9KUhGGgsmS+4=)
6: dop4_-0zlvctrufVT5v0wxv-AEk.roa (hash: dtFhCs02IJalxP2PiP4DNh5wKXd+5+aq9kRU5RiYqkg=)
7: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
8: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
9: x4wXEKXMOxtK_lFwko7eiWoBBHU.roa (hash: aj4RuLLfbpjb0EvT7ddowihSUQXljP0or+HYSFta5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:70:f5:7e:11:b9:34:f7:97:6c:fd:d9:b5:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Mar 26 01:00:43 2026 GMT
Not After : Mar 27 01:00:43 2026 GMT
Subject: CN=feaad427d0f07fac1d9ea80c61aee0bfaa6733dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:a3:b9:85:83:3f:42:f2:b3:e1:6a:54:b0:
ac:1d:67:0e:00:54:fb:b4:93:96:fe:6e:3b:e2:d6:
6d:d8:73:8f:d0:8b:d1:da:2f:03:6b:ef:0b:e6:67:
fc:f2:4d:31:a6:46:22:d4:0a:3b:cc:38:47:97:30:
e1:e6:e1:4f:92:0f:8f:66:a0:f3:29:4d:a6:59:4b:
09:be:f9:44:5c:b7:08:74:b1:61:d2:9e:4e:26:c4:
f2:fd:a6:17:bb:30:7c:78:82:90:c3:ae:70:71:be:
39:71:4a:aa:22:f0:1e:a4:5a:e2:13:ca:ff:7b:d2:
8e:47:5e:4f:b2:66:63:f7:b0:67:b9:4a:2a:b6:bc:
c1:28:34:61:eb:25:1f:ee:8d:5e:56:f6:c9:53:61:
88:17:66:49:4f:65:e7:3b:c9:2a:0c:1b:ae:4b:4e:
7e:30:75:d1:9a:d7:cd:76:99:e4:4e:e3:70:01:18:
b0:f1:13:b5:0e:9d:91:c0:72:00:97:6f:56:c0:e6:
27:38:11:2d:b3:d0:36:0f:e3:6d:a2:74:87:dd:e2:
a1:54:63:8d:3e:69:ea:fe:91:5d:d1:be:ad:fb:42:
96:cd:d3:6e:27:36:3c:57:ea:e2:f8:a1:7a:6b:9b:
0c:92:31:58:72:b9:a0:69:38:02:70:d2:cd:a3:1f:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:D4:27:D0:F0:7F:AC:1D:9E:A8:0C:61:AE:E0:BF:AA:67:33:DC
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:7b:7d:98:a5:91:19:37:c9:0a:f3:57:8d:e6:c2:2e:de:
58:fb:19:a7:b0:b4:86:0f:fe:60:e0:a0:2d:59:ce:ae:b8:04:
9a:72:4b:7f:41:b0:28:29:4e:46:6c:c5:53:28:55:39:92:14:
54:66:17:e6:eb:02:7b:5a:d9:a7:2b:ba:44:43:fb:66:3a:73:
a0:31:88:3b:54:ad:13:45:5e:ca:57:b1:85:3f:bd:8b:83:c3:
41:86:39:59:38:ad:13:64:ca:52:4e:e6:d1:9c:63:16:eb:68:
3a:a5:3e:60:ea:bd:1c:0e:15:0e:6e:96:1b:a7:bb:45:95:53:
59:52:45:40:74:72:06:67:c5:db:f0:10:df:5d:fa:6c:8e:12:
3c:ae:51:38:46:85:e1:19:38:3a:dd:8b:6f:8a:7c:d3:4b:43:
cf:1e:ac:8a:0e:0a:da:b7:f7:ae:f9:98:22:2d:89:90:4e:81:
dc:06:31:c4:50:28:97:54:76:2b:f1:86:c5:39:e6:60:68:7c:
b1:70:04:fb:00:d2:52:4c:57:c6:f6:b0:ad:c6:31:e7:d5:1a:
cd:6a:f4:2c:fe:49:5d:50:0d:ab:9d:69:26:39:c8:75:e7:25:
45:dc:0f:ba:ee:8f:60:90:80:f9:f6:ad:2d:6a:11:bb:02:9f:
68:19:7f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqHD1fhG5NPeXbP3Ztd03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjYwMzI2MDEwMDQzWhcNMjYwMzI3MDEwMDQzWjAzMTEwLwYDVQQD
EyhmZWFhZDQyN2QwZjA3ZmFjMWQ5ZWE4MGM2MWFlZTBiZmFhNjczM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdqjuYWDP0Lys+FqVLCsHWcOAFT7
tJOW/m474tZt2HOP0IvR2i8Da+8L5mf88k0xpkYi1Ao7zDhHlzDh5uFPkg+PZqDz
KU2mWUsJvvlEXLcIdLFh0p5OJsTy/aYXuzB8eIKQw65wcb45cUqqIvAepFriE8r/
e9KOR15PsmZj97BnuUoqtrzBKDRh6yUf7o1eVvbJU2GIF2ZJT2XnO8kqDBuuS05+
MHXRmtfNdpnkTuNwARiw8RO1Dp2RwHIAl29WwOYnOBEts9A2D+NtonSH3eKhVGON
Pmnq/pFd0b6t+0KWzdNuJzY8V+ri+KF6a5sMkjFYcrmgaTgCcNLNox/ZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6q1CfQ8H+sHZ6oDGGu4L+qZzPcMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJF7fZil
kRk3yQrzV43mwi7eWPsZp7C0hg/+YOCgLVnOrrgEmnJLf0GwKClORmzFUyhVOZIU
VGYX5usCe1rZpyu6REP7ZjpzoDGIO1StE0VeylexhT+9i4PDQYY5WTitE2TKUk7m
0ZxjFutoOqU+YOq9HA4VDm6WG6e7RZVTWVJFQHRyBmfF2/AQ3136bI4SPK5ROEaF
4Rk4Ot2Lb4p800tDzx6sig4K2rf3rvmYIi2JkE6B3AYxxFAol1R2K/GGxTnmYGh8
sXAE+wDSUkxXxvawrcYx59UazWr0LP5JXVANq51pJjnIdeclRdwPuu6PYJCA+fat
LWoRuwKfaBl/tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:42 2026 by rpki-client