Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: c5KZDC6C9iLBkcXPY6fwbVH4rcp5nZtgnCKM/e1Cwg0=
Subject key identifier: FB:6C:A0:37:AD:58:49:4F:DD:59:6A:3B:D6:0F:20:91:87:37:DB:DB
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019D31BE4513AF4D74F6AF712DC77A37676C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 00:00:46 +0000
Manifest this update: Sat 28 Mar 2026 00:00:46 +0000
Manifest next update: Sun 29 Mar 2026 00:00:46 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: ZEoe7/NRNBRcbMvqXB2pum30uswslkHEOy4956ZySxw=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:45:13:af:4d:74:f6:af:71:2d:c7:7a:37:67:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Mar 28 00:00:46 2026 GMT
Not After : Mar 29 00:00:46 2026 GMT
Subject: CN=fb6ca037ad58494fdd596a3bd60f20918737dbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:b9:01:75:fe:62:7d:e4:d3:0c:e5:7a:25:
8d:f8:54:a7:3f:8d:6e:bb:24:c7:fa:67:20:7a:8f:
5e:a7:6e:2b:8f:e8:76:ca:90:26:e0:d2:34:04:4b:
b1:34:0a:09:23:0c:8c:7d:7b:a1:b6:e6:34:71:e7:
d9:44:5f:3d:64:b4:db:a8:cf:f7:7e:8b:31:57:b2:
25:86:e8:ff:79:21:5c:60:e5:95:4d:68:71:ba:9b:
9e:9e:59:8b:29:9a:b0:59:ec:a0:16:bf:f4:98:b3:
50:a4:ca:75:14:27:df:d1:97:2c:41:db:9a:5c:b1:
f6:53:dc:7e:fc:0a:34:68:fe:15:75:ad:cb:a6:d2:
63:b9:ee:b5:41:2f:46:6d:67:a5:4e:66:c5:2e:4d:
d7:7e:b1:86:16:8f:65:f3:1c:ec:42:f0:b9:f5:8a:
20:a8:d9:6c:44:fa:fd:1d:1f:a8:17:c6:73:4d:63:
88:e8:0d:7f:3e:dc:f7:21:d0:4f:32:9d:60:bf:7b:
ec:28:f7:6b:23:3c:71:89:e1:94:b6:75:bf:36:a6:
40:61:25:28:bf:8d:ec:5f:bd:3b:be:c5:b9:74:f9:
35:a3:27:ff:00:69:18:14:90:73:de:40:ff:67:e7:
f3:c3:62:4f:2a:b3:e0:9e:62:2e:19:90:ac:5c:e6:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:A0:37:AD:58:49:4F:DD:59:6A:3B:D6:0F:20:91:87:37:DB:DB
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:0c:31:0d:f7:5f:24:64:09:c0:e6:8d:3d:1c:b7:7f:7b:
51:d4:62:16:d6:ab:a2:08:35:47:0a:fc:59:43:42:9c:f5:64:
d8:7f:ca:50:53:6d:8c:bb:4f:e8:49:c9:97:40:dc:98:2b:90:
14:8b:ad:3c:62:a4:ef:fc:56:ac:60:80:a0:ee:1e:54:0b:ad:
73:a9:90:3a:f8:06:ff:28:9f:1c:cf:33:3f:b7:18:1f:93:82:
74:f6:68:75:ef:b3:5e:57:b7:de:db:35:6f:a8:10:9c:e8:7a:
1b:49:05:e1:89:1f:2c:a8:2b:8d:a7:05:d4:1d:38:92:9e:0c:
6e:ce:5a:fb:c0:c7:a4:1d:39:d7:98:14:79:75:01:dc:3a:e5:
1c:26:0b:c7:42:be:5d:ee:11:4b:7d:69:ac:cc:0b:21:16:23:
75:d3:41:47:11:4a:8c:da:e4:a3:d3:6b:e2:71:24:16:73:5a:
55:62:3d:2f:4e:63:e7:6d:40:a7:0b:77:46:88:f0:97:f5:39:
48:c9:1c:6e:98:3e:3f:0a:66:78:49:6d:7b:08:59:7c:c6:c7:
f2:6c:c9:6a:14:70:43:6d:02:6a:dc:f5:a4:df:40:64:9d:3a:
69:3a:dd:4d:c9:0c:63:6d:03:a4:e4:44:70:51:6f:e2:97:3a:
2a:d5:81:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xvkUTr0109q9xLcd6N2dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi
N2MyNGQwHhcNMjYwMzI4MDAwMDQ2WhcNMjYwMzI5MDAwMDQ2WjAzMTEwLwYDVQQD
EyhmYjZjYTAzN2FkNTg0OTRmZGQ1OTZhM2JkNjBmMjA5MTg3MzdkYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvK5AXX+Yn3k0wzleiWN+FSnP41u
uyTH+mcgeo9ep24rj+h2ypAm4NI0BEuxNAoJIwyMfXuhtuY0cefZRF89ZLTbqM/3
fosxV7Ilhuj/eSFcYOWVTWhxupuenlmLKZqwWeygFr/0mLNQpMp1FCff0ZcsQdua
XLH2U9x+/Ao0aP4Vda3LptJjue61QS9GbWelTmbFLk3XfrGGFo9l8xzsQvC59Yog
qNlsRPr9HR+oF8ZzTWOI6A1/Ptz3IdBPMp1gv3vsKPdrIzxxieGUtnW/NqZAYSUo
v43sX707vsW5dPk1oyf/AGkYFJBz3kD/Z+fzw2JPKrPgnmIuGZCsXOZx1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtsoDetWElP3VlqO9YPIJGHN9vbMB8GA1UdIwQY
MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut
ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk
LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH8MMQ33
XyRkCcDmjT0ct397UdRiFtarogg1Rwr8WUNCnPVk2H/KUFNtjLtP6EnJl0DcmCuQ
FIutPGKk7/xWrGCAoO4eVAutc6mQOvgG/yifHM8zP7cYH5OCdPZode+zXle33ts1
b6gQnOh6G0kF4YkfLKgrjacF1B04kp4Mbs5a+8DHpB0515gUeXUB3DrlHCYLx0K+
Xe4RS31prMwLIRYjddNBRxFKjNrko9Nr4nEkFnNaVWI9L05j521Apwt3Rojwl/U5
SMkcbpg+PwpmeEltewhZfMbH8mzJahRwQ20Catz1pN9AZJ06aTrdTckMY20DpORE
cFFv4pc6KtWBBA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:28 2026 by rpki-client